Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: 4hCgw7hoXFu443gA9q4eKk8yAWLYcVEwAUNEXA4Ypq0=
Subject key identifier: BA:85:CA:E1:0E:61:F7:4D:4C:3A:28:61:74:5E:96:B7:E4:F9:EA:AF
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 01974A7A58AC58ABB14D6E99E5D6B5E3F7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:00:21 +0000
Manifest this update: Sat 07 Jun 2025 13:00:21 +0000
Manifest next update: Sun 08 Jun 2025 13:00:21 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: 4vjBkEh7snUkzxQcERwLKYdvotWZbVVbeeX+Zjddt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:58:ac:58:ab:b1:4d:6e:99:e5:d6:b5:e3:f7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Jun 7 13:00:21 2025 GMT
Not After : Jun 8 13:00:21 2025 GMT
Subject: CN=ba85cae10e61f74d4c3a2861745e96b7e4f9eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:dd:39:ed:2d:40:72:e4:6e:df:11:08:38:
05:67:a9:11:8f:7a:98:ba:63:0d:e2:71:d7:03:f3:
15:cf:07:03:24:3f:57:30:82:55:87:35:30:43:7e:
af:4c:ee:bb:b6:82:61:8a:c7:cc:c2:77:b4:a6:43:
e6:a3:3b:40:f5:f4:f8:db:49:27:cd:11:5b:bb:ec:
9a:ce:3e:ee:23:99:3c:f6:56:73:9f:e3:b0:94:2b:
9a:12:19:13:41:82:42:6b:75:c7:46:1f:1b:60:53:
65:c9:4f:dd:21:c9:34:f9:cf:d1:c5:c8:ee:e3:36:
e3:21:4c:de:fc:4e:e5:7b:3a:ff:94:06:4c:70:b0:
69:38:1b:9a:6d:33:91:11:1e:2d:eb:eb:8c:19:46:
a1:48:6a:d6:bc:89:d6:c4:5f:46:71:86:84:9b:d3:
89:97:a0:e6:6a:64:9f:c2:a6:0a:42:b2:48:e2:64:
73:28:3c:44:15:83:24:a9:e7:b5:3b:19:e0:92:26:
1b:0d:e8:4c:62:63:96:6b:4d:e2:50:0f:c3:89:1d:
f1:d9:96:c3:11:5d:a3:ac:1d:78:b0:d7:19:e7:4d:
70:97:fd:7a:a1:c8:c0:93:69:4b:6a:28:a1:49:ef:
d3:b8:5a:c0:e2:6c:18:09:98:e8:71:1e:a7:9b:9c:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:CA:E1:0E:61:F7:4D:4C:3A:28:61:74:5E:96:B7:E4:F9:EA:AF
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b0:c9:4a:5f:bf:bc:22:c4:6c:6c:65:93:eb:f4:5f:62:56:
ca:e4:49:79:06:85:f1:34:f9:6e:ef:00:52:6f:b9:43:13:89:
bf:b0:8a:e4:1a:42:bf:67:4f:e0:fc:46:3f:c3:e5:8e:54:52:
12:7b:6c:94:14:36:8c:27:96:b9:56:f2:15:7d:77:67:b9:83:
17:8f:56:fa:68:65:01:4c:35:7d:b4:17:f0:15:15:25:7a:df:
92:a7:9d:d5:41:08:f4:6d:2b:3d:b5:2b:b8:94:4c:c3:50:08:
d1:d7:2a:32:11:ba:48:aa:35:49:e8:d5:85:72:0d:7b:fa:c1:
7f:05:dd:0d:ee:07:10:9e:9a:9c:e2:78:34:a0:b8:da:6d:4f:
43:d8:bf:7c:ce:9c:68:d4:7f:33:30:27:ed:d8:5c:9e:76:3b:
36:05:61:c4:12:a1:05:2f:be:43:83:aa:f8:25:77:82:93:6a:
3f:d3:d9:56:60:af:29:bb:0b:10:96:dc:f1:ae:fe:5c:57:21:
6e:56:2b:47:7d:03:e8:00:36:ac:f9:ee:1e:eb:12:e6:01:23:
96:83:d3:ed:d9:15:e1:73:0a:1c:f8:c0:45:35:b7:95:a4:3f:
ac:6f:9d:6a:a4:25:bb:1c:69:46:39:cd:12:03:08:97:b1:84:
69:46:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:43:30 2025 by rpki-client