Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: LdLDTvEV/KF364xJRpFzWFgVkLwe4ucVWZb5arFrPkc=
Subject key identifier: 72:F6:31:7A:01:59:37:58:C7:CB:68:1E:86:48:86:6F:F8:8B:48:B9
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 01974CD69CE3981DF4BC3EB0FF02DBD5E247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 00:00:22 +0000
Manifest this update: Sun 08 Jun 2025 00:00:22 +0000
Manifest next update: Mon 09 Jun 2025 00:00:22 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: a/Jk2k+n0ELikSVYivK1LZ8UX0TJXVn6nQ5rkjUKbGw=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:9c:e3:98:1d:f4:bc:3e:b0:ff:02:db:d5:e2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jun 8 00:00:22 2025 GMT
Not After : Jun 9 00:00:22 2025 GMT
Subject: CN=72f6317a01593758c7cb681e8648866ff88b48b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:8f:47:d1:c2:fc:0a:96:54:90:61:53:ee:
46:1b:8e:48:e3:96:75:8e:d7:fb:27:f3:25:49:f3:
b4:c9:18:97:28:dd:a5:b1:0f:ba:fc:23:8b:c6:be:
ff:73:cb:db:10:a3:a3:8d:78:61:2c:cd:c8:7a:6a:
58:1e:fa:66:30:b5:66:d8:2d:3f:6b:ff:98:81:49:
90:e5:06:fd:1f:ef:ad:5d:9a:d0:09:40:98:36:62:
51:d4:be:e4:6f:9d:14:eb:6e:aa:29:d5:0a:18:52:
55:ca:96:7b:2f:b0:44:ba:f6:ae:bf:37:13:27:8c:
47:9c:98:f7:98:a2:53:d4:73:8d:8f:61:71:56:4f:
92:08:f8:6e:1b:98:b7:63:6a:8f:2c:f4:79:2c:47:
42:57:bd:a1:7c:57:2f:8c:c2:07:fa:3c:51:c7:a7:
80:56:fd:8f:36:69:b4:66:95:19:60:58:85:ae:a0:
07:b0:1a:10:87:2f:a8:b7:28:8f:dd:34:e6:64:a0:
5b:b1:42:5d:9e:f0:e0:e9:b0:78:8b:97:cf:4c:ee:
e9:8c:ee:ae:38:3a:95:dd:6f:fa:d2:9f:6f:8f:89:
18:6d:58:e4:19:8b:e3:58:fe:11:b4:f9:6d:5e:02:
d3:90:e0:a4:a7:da:b3:92:9e:ed:7c:b0:ee:c8:6b:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:31:7A:01:59:37:58:C7:CB:68:1E:86:48:86:6F:F8:8B:48:B9
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:d0:66:d5:c2:cd:ed:e8:d7:8e:19:30:42:bf:6b:6c:64:
8c:86:95:78:2f:59:ce:a6:3e:4f:3f:2c:46:0e:4a:34:75:09:
cb:38:19:66:b3:29:97:aa:aa:c0:56:b1:96:49:ac:13:6e:5e:
7a:a9:91:81:c4:da:fb:db:7c:bf:26:da:07:32:b3:d8:46:bf:
02:df:f2:6f:fc:3b:f4:48:78:16:24:80:3c:2e:6c:e7:2b:6a:
58:ef:57:b5:24:75:a3:df:b7:ce:7c:4e:b1:c2:c8:4f:39:ae:
ee:0c:90:77:d8:c9:a4:dc:97:db:c9:db:bd:61:af:87:f7:83:
81:ef:a5:44:2f:d2:50:3b:2c:63:61:cd:ea:54:df:5a:be:23:
08:fa:dd:11:1f:f1:ad:b3:f7:f7:c4:26:c8:84:96:b3:f5:ba:
da:de:f8:a8:f1:5d:10:d2:6a:1f:13:90:0f:ea:61:03:42:45:
33:c4:7e:45:bf:4c:d9:c1:b8:6d:7a:59:ee:a9:48:3d:c8:9f:
28:29:33:36:fa:bc:25:6a:26:42:9c:bb:97:c6:ef:44:ab:33:
71:65:42:84:46:ab:e8:8f:6a:9b:9a:01:c7:7f:cd:a1:8c:c8:
db:46:2c:32:10:57:30:60:07:a8:22:2f:4b:f7:7b:eb:bf:e0:
eb:8f:d4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:01 2025 by rpki-client