Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: DJXV0uZe7GTwRsYSw4hKzyOYJRvdGp5dbghU7xbNrr0=
Subject key identifier: 56:A2:32:F7:79:83:8F:CF:00:46:87:1F:8A:C1:29:55:48:40:49:2C
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01974A43DC6084D0BB17E15CFA9A69AECE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 12:00:50 +0000
Manifest this update: Sat 07 Jun 2025 12:00:50 +0000
Manifest next update: Sun 08 Jun 2025 12:00:50 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: ftpuzx0XkTTb7IgPiHLzBQPPw+y8BmlumkoJoz2GNNo=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:dc:60:84:d0:bb:17:e1:5c:fa:9a:69:ae:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jun 7 12:00:50 2025 GMT
Not After : Jun 8 12:00:50 2025 GMT
Subject: CN=56a232f779838fcf0046871f8ac129554840492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:b4:ed:3b:42:b0:0b:96:b9:c6:f2:ff:ec:
e1:f2:6d:1a:cb:42:8c:38:bc:76:9e:4c:40:ef:82:
6b:3d:6a:2e:cd:38:37:09:4b:60:a0:bc:cf:fc:7f:
db:5e:e0:64:75:d3:31:75:bb:91:f0:9b:2b:f0:97:
63:c1:53:23:2d:ce:0c:0c:67:f6:7d:b2:68:72:15:
ec:f2:ed:e1:2c:49:db:bb:f6:25:7c:1d:5e:ba:ae:
70:8f:0d:97:68:d0:3a:54:ab:ad:11:5c:71:d8:eb:
a8:31:83:c8:76:46:7d:c3:d3:f9:21:a1:08:d8:99:
45:3b:39:96:a7:ff:4d:ef:35:00:38:04:2b:d2:31:
16:5e:5d:8c:d1:d1:be:a7:f2:5b:b2:67:cc:fa:e1:
69:73:47:4a:96:b3:90:cb:06:9f:85:82:7a:35:07:
fd:cc:d5:e6:ab:51:dc:99:f5:c2:3e:b7:da:5c:75:
21:8f:b3:a7:26:cf:08:3c:c2:f5:5b:06:09:b8:c7:
b7:8b:90:5b:00:5e:89:ba:2b:80:9c:64:e6:c3:1c:
d9:7e:a2:ff:9e:94:55:6e:f4:6a:bf:cc:d1:02:f1:
5a:60:aa:a8:5b:e0:32:d3:03:cc:b6:7e:f7:ec:d6:
df:fc:13:89:73:ae:32:c9:f4:86:a0:38:ef:bd:01:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:32:F7:79:83:8F:CF:00:46:87:1F:8A:C1:29:55:48:40:49:2C
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:c0:02:99:1b:fa:3c:2f:d5:ec:f3:6e:37:af:38:5c:fa:
23:ea:42:09:da:c6:42:01:9a:85:1d:ba:1e:60:e7:ee:12:cc:
5c:78:a3:ba:26:fc:47:16:a4:13:9c:8b:78:72:92:66:56:21:
3a:d7:0e:38:9f:e1:ac:44:3d:d4:58:48:fc:ec:19:ee:83:7b:
24:04:2a:ec:42:2b:e6:b3:a6:5c:04:32:5a:6f:a4:a6:de:86:
d6:13:07:2b:b2:39:b3:1a:d6:71:38:14:ce:57:f1:65:af:7b:
c4:2f:cd:13:ae:d4:91:38:ce:6b:30:d5:ed:aa:e6:2b:47:95:
79:6a:7f:ff:98:d2:d6:48:53:a1:3b:f4:95:83:dc:43:0f:32:
66:98:9e:20:77:85:f3:f3:65:43:ce:52:be:0f:67:c1:f7:29:
43:2a:fe:28:fc:aa:fc:f5:28:9d:7a:d0:90:32:e9:3e:1e:85:
8e:54:d4:a7:38:0b:2f:44:7f:ce:cc:ee:8f:ad:96:2c:e3:ca:
5c:bc:45:13:c1:1a:a0:c3:bc:91:e8:5a:f9:19:eb:4f:6a:92:
56:3f:da:7d:9a:3a:5e:40:d8:4e:5d:8f:58:78:91:ae:85:f5:
ed:76:79:a3:a4:0c:eb:3a:6e:d6:73:6e:9b:12:a4:3f:89:3f:
15:fe:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:56 2025 by rpki-client