Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: ImZbHqJAlO+8FQ5gEZchCY2LYvrxeWrxB3nHP4GASqU=
Subject key identifier: DF:05:CE:B3:2A:93:BA:B8:B6:D3:23:65:15:5E:25:B7:73:91:13:AE
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019751FD7745A3F9E31009F4C695F42F2C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0DF1
Signing time: Mon 09 Jun 2025 00:00:54 +0000
Manifest this update: Mon 09 Jun 2025 00:00:54 +0000
Manifest next update: Tue 10 Jun 2025 00:00:54 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: 6SKmH5L4p2taFxUmNVm+Kc0boEs2fUQGqdAgyBLN5T0=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:77:45:a3:f9:e3:10:09:f4:c6:95:f4:2f:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Jun 9 00:00:54 2025 GMT
Not After : Jun 10 00:00:54 2025 GMT
Subject: CN=df05ceb32a93bab8b6d32365155e25b7739113ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:9f:dd:16:08:5e:6f:00:f3:6b:86:ac:5d:
65:e8:83:d0:bb:53:a4:3e:b2:13:b4:e2:0e:42:24:
83:e2:31:1f:11:8a:fc:c3:af:c7:05:75:16:0b:4c:
67:67:e6:8a:e8:00:1f:c1:ab:57:c5:08:ba:ea:24:
a1:0d:80:ba:f8:f2:dc:43:7c:1d:6c:3e:2f:3b:1f:
b8:3f:e5:f5:01:ca:d7:1f:11:56:6d:79:00:85:a5:
5f:86:3f:bf:98:8c:17:4f:51:af:90:3a:dc:d4:23:
11:f7:c6:81:6a:6e:eb:44:c5:84:8a:db:8e:15:f7:
01:0e:cc:33:7a:24:9e:7e:b6:43:b2:ca:51:0c:c1:
c5:89:59:94:be:fa:fb:46:69:42:de:df:2a:3e:c1:
00:cc:41:46:5d:8e:ca:e9:6e:0a:84:15:f9:18:6b:
6d:46:a5:8b:88:e4:26:55:98:22:df:30:0a:ba:1b:
22:88:00:7b:9c:98:33:f4:10:b1:1d:33:46:e1:a3:
3f:90:22:8b:c3:f5:cd:06:38:36:d2:2a:80:9e:ac:
94:b1:0d:35:57:45:47:e7:34:bb:06:19:8c:60:c1:
57:28:d4:b7:66:46:d5:05:9d:e6:22:b5:84:d5:cd:
d6:ed:53:3b:3d:fe:5b:49:6c:8f:6d:d9:4b:23:37:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:CE:B3:2A:93:BA:B8:B6:D3:23:65:15:5E:25:B7:73:91:13:AE
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:8a:53:cd:67:6c:95:e6:67:98:d3:5e:bc:cb:84:a6:d3:
4e:79:0e:cd:bb:ee:32:ac:46:71:df:0e:dd:bd:d9:f0:6c:c4:
70:ad:54:cb:83:a2:38:00:16:cc:40:68:05:07:89:a0:e6:76:
f1:72:92:81:e5:18:27:b0:bf:f1:52:9f:a6:ad:11:8c:16:18:
a7:85:81:69:e2:15:e6:cf:3d:b7:45:b2:c7:ea:59:7d:ff:4b:
6d:3f:62:59:4d:24:a1:9b:ec:aa:0f:a5:59:29:0b:92:8b:50:
5b:54:53:1f:45:c1:5e:cb:08:9b:27:90:e8:db:e4:86:14:f4:
c5:36:2d:61:fa:a4:bc:8e:23:05:8b:29:81:82:93:63:a7:2f:
92:5b:b5:82:3e:df:35:70:f2:08:2a:6c:eb:8c:5b:5c:32:6b:
7c:59:80:1c:97:bf:2a:07:c7:9f:a9:e0:1f:6d:cf:34:2b:77:
26:bd:2e:93:09:db:75:df:c2:a6:78:70:95:3f:6d:35:8f:7f:
c5:46:ef:8e:73:64:ff:ef:40:fd:34:be:f8:6e:b2:fb:01:9a:
7a:0c:16:e4:a9:4a:a7:84:14:b3:56:6f:97:88:5d:bf:5f:59:
2b:f5:b7:f9:69:66:1e:e7:de:a3:ec:96:1a:e0:69:2e:1f:46:
d2:54:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:29 2025 by rpki-client