Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: 4I3FlR8qLFfRQjNzXM3+JQQN47+1hWl4b/VZ0O7cLgA=
Subject key identifier: B2:7F:44:3E:CA:D1:64:C1:14:59:84:89:9F:BC:33:9B:CC:39:A0:05
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0197488CCEDFFF6BA5FD700892DCA6938D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0930
Signing time: Sat 07 Jun 2025 04:01:16 +0000
Manifest this update: Sat 07 Jun 2025 04:01:16 +0000
Manifest next update: Sun 08 Jun 2025 04:01:16 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: oK4k18+Mtqwt+11dSd00D3gjujkvES9ierAUfLLQuX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ce:df:ff:6b:a5:fd:70:08:92:dc:a6:93:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jun 7 04:01:16 2025 GMT
Not After : Jun 8 04:01:16 2025 GMT
Subject: CN=b27f443ecad164c1145984899fbc339bcc39a005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:04:55:88:23:31:57:1c:50:ab:ff:16:ef:
1b:74:98:ba:93:af:95:99:17:1d:c8:7d:80:f7:4d:
f1:8e:6e:18:11:62:cc:2b:0d:60:bb:7a:00:bb:1c:
5d:c3:d0:56:f7:b7:ee:92:9b:a4:ec:d9:cc:ed:00:
b5:3f:87:e8:94:c4:c4:f1:63:61:61:c4:0c:38:b2:
a8:89:36:60:6e:a3:e1:2b:51:c9:f7:97:b4:b3:82:
71:c1:de:24:ae:0b:eb:cd:1c:1e:62:74:1d:d0:72:
4e:64:b7:4e:7a:2c:7a:cb:6b:d5:e1:cf:43:02:5a:
90:e4:7b:00:f4:46:2c:2f:7a:eb:56:31:7b:0d:2d:
b5:c5:2b:5c:3c:84:14:99:2f:e0:cb:81:df:b8:d4:
f1:7e:6d:ce:83:8f:ef:8d:68:fb:45:d0:31:01:e4:
a3:a4:72:ae:13:c8:ec:75:5c:50:c0:22:e6:5f:a5:
8f:76:c2:01:1a:b8:9e:8c:27:fe:60:c4:79:02:f4:
fb:f0:e4:5c:b0:4d:8f:d0:30:0d:29:c1:bb:71:0a:
ee:a5:73:51:8b:c0:4c:a4:25:cb:ca:67:d7:a1:6e:
7c:93:55:d4:eb:83:3c:d0:77:7c:61:5f:90:12:c1:
3c:b1:dc:2b:d5:e3:9a:67:34:a9:ce:b9:86:8b:a3:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:44:3E:CA:D1:64:C1:14:59:84:89:9F:BC:33:9B:CC:39:A0:05
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5a:2a:dd:1d:c6:2c:7c:56:87:2f:d6:03:f9:f4:f6:da:eb:
d0:60:9f:ab:9e:b8:ee:41:92:8a:9d:7f:3d:db:d3:25:6f:98:
94:fe:05:76:72:fd:bb:ba:36:ec:13:15:a8:26:1f:53:ec:c9:
44:29:84:dc:22:24:f5:6d:70:9b:8e:3f:2c:10:ac:6e:c3:fa:
00:a3:43:83:44:f4:f6:9f:df:8d:b2:69:a0:84:22:3e:4f:02:
2c:a6:e8:56:a7:f4:d0:cc:b1:ec:00:aa:60:22:1c:3a:3e:40:
de:76:8b:cf:06:e6:aa:c0:09:27:06:3b:13:46:a8:99:da:dd:
fc:7c:f6:e2:e5:bf:c5:76:f0:0b:ef:6d:1f:81:81:38:c4:60:
3f:0f:88:7f:50:44:0c:40:b6:41:a5:28:27:52:33:84:0c:d7:
7a:f1:03:f5:1c:34:34:ba:7d:1d:96:e2:16:fb:0c:e5:1c:8f:
1b:86:d6:41:6b:6f:5a:cd:04:92:66:53:0c:1a:8c:04:19:a9:
5e:a3:02:1f:4b:d6:9c:7a:af:cf:5f:ca:1b:30:95:3b:73:ec:
8c:d2:c0:bf:74:5a:4a:7d:a6:7a:55:58:34:76:ae:bd:6b:9c:
69:88:a7:14:c1:8e:22:e8:23:95:c5:07:d3:38:39:f5:6b:8b:
1a:88:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:35 2025 by rpki-client