Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: ZKro05XtB+vVlCAcZ2BztB42iN+tsNxu2HgybV91eJU=
Subject key identifier: E7:60:EC:E9:6C:74:45:17:97:AB:09:D1:03:64:34:2E:C7:0F:83:3B
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01974A0CE1305545C77FC8B27C263593BB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 107B
Signing time: Sat 07 Jun 2025 11:00:47 +0000
Manifest this update: Sat 07 Jun 2025 11:00:47 +0000
Manifest next update: Sun 08 Jun 2025 11:00:47 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: r+mW1K55vcInfKHrQlyqZ2gFzEjPffiDVEXkXdzQrJo=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:e1:30:55:45:c7:7f:c8:b2:7c:26:35:93:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jun 7 11:00:47 2025 GMT
Not After : Jun 8 11:00:47 2025 GMT
Subject: CN=e760ece96c74451797ab09d10364342ec70f833b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:65:2c:48:d3:97:6b:79:50:e0:db:f5:4c:
02:15:d5:17:5f:6b:9c:70:78:d5:0d:76:d8:db:e6:
0b:2e:17:2b:eb:fa:ef:44:bb:ec:ea:de:df:8e:fb:
20:ab:f6:70:0a:9e:bf:f7:8b:8e:e7:8c:c9:3f:14:
30:7e:81:17:4c:4e:8a:f6:27:c8:8c:46:a0:f8:dd:
91:5a:4a:29:ad:ba:89:b0:91:0f:d8:a9:0f:4c:86:
e1:51:1b:86:44:95:16:af:2f:1e:6a:8d:12:d6:79:
a0:9c:df:fc:dc:ac:2a:bd:7d:c4:f1:4e:80:8d:eb:
de:11:84:53:61:00:6b:f3:51:07:a6:bd:a6:8c:62:
93:77:26:31:ee:67:d2:e4:47:73:6d:1c:b7:9e:0d:
a4:57:57:17:ac:d2:22:af:c4:be:57:41:0d:2a:16:
c3:e4:10:2b:7a:94:41:73:66:ff:35:09:91:e7:07:
c8:59:e6:d6:96:c6:1b:4d:ad:48:25:2a:cf:bf:f3:
ca:b7:d5:58:61:be:91:5a:f6:04:b8:28:2d:d2:13:
1e:4d:10:e5:56:0b:76:5f:14:0a:bf:cb:e8:8f:96:
3d:74:fd:91:02:26:37:06:d4:73:f8:35:0c:22:15:
cf:8c:f7:2f:b2:d5:9a:88:58:70:b3:55:b6:ac:52:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:60:EC:E9:6C:74:45:17:97:AB:09:D1:03:64:34:2E:C7:0F:83:3B
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:4c:b1:6d:d1:fd:cf:75:4e:89:ba:f2:7c:96:18:e4:37:
30:c2:78:5a:62:3f:bb:05:d3:20:60:0d:62:c3:58:59:1b:25:
b6:1e:ef:9a:42:c2:2a:8d:04:29:63:10:c8:f2:79:d1:33:ff:
83:dd:2b:15:62:94:a7:61:23:3f:cd:1b:de:d3:1e:fa:54:0f:
3a:01:f4:c3:71:01:94:18:39:5f:69:bf:3b:eb:c7:51:e1:cb:
4a:9b:3b:21:58:71:66:d2:ee:df:e0:c5:5b:4e:5d:13:11:b6:
c9:c8:43:ff:cf:0b:ea:bc:3f:65:ed:54:57:fb:e0:af:17:64:
c3:95:a2:af:51:d0:0a:a3:0e:bf:9f:ff:11:03:fd:e4:07:ac:
c7:f9:a3:fc:0a:73:7e:15:b8:a2:7e:98:9b:a0:1b:94:1f:47:
42:df:01:80:61:f0:e3:f1:15:18:05:85:ca:6c:77:c7:3a:a5:
5f:7d:aa:9f:f1:af:0a:c6:1f:43:c0:15:6e:5c:00:66:19:09:
00:4b:48:93:c4:58:ef:57:13:89:ee:2a:5b:df:95:11:c0:47:
22:7b:86:dd:cd:f0:3e:46:8b:25:c9:a9:8a:0d:65:8d:ac:58:
a4:dd:4a:42:58:be:7a:66:9c:c6:70:a8:6d:df:44:f1:0a:9e:
0c:53:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:25 2025 by rpki-client