Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 6GkFYfZoZIgc9ARyHKqm+BRYKiCy/sXb4ZXzc9R+EWI=
Subject key identifier: 9C:ED:B7:3B:70:51:4E:6E:93:78:37:F9:F6:57:28:AF:09:8D:C9:61
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 01975D935E8392BAF25AD4411863DA35A8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0389
Signing time: Wed 11 Jun 2025 06:00:28 +0000
Manifest this update: Wed 11 Jun 2025 06:00:28 +0000
Manifest next update: Thu 12 Jun 2025 06:00:28 +0000
Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: z/l8JYZIIExD7Sn2zQMoQloD9u2q4FUBlNbVgjmBi+A=)
3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:5e:83:92:ba:f2:5a:d4:41:18:63:da:35:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jun 11 06:00:28 2025 GMT
Not After : Jun 12 06:00:28 2025 GMT
Subject: CN=9cedb73b70514e6e937837f9f65728af098dc961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:72:6c:9b:32:4b:1b:f0:f2:b4:e2:3c:28:
b1:d8:d6:dc:67:e2:03:fd:78:da:1b:55:49:88:d1:
64:bf:64:41:57:09:be:05:5e:f2:5e:5d:e9:8c:43:
3f:3a:4c:f3:55:cf:26:19:b4:9e:30:a0:0a:c8:78:
25:ac:50:c8:82:1d:a7:9a:6d:eb:8b:1e:df:a4:c7:
ba:33:79:b6:6a:cc:b7:bd:5b:a0:e7:ef:ff:77:db:
cd:45:7d:73:80:4e:bd:95:3c:cd:40:da:fc:24:a1:
8a:92:ac:52:46:88:48:a1:82:eb:42:c2:a7:74:3f:
7e:62:75:d6:00:bb:c9:2d:8f:35:1f:b3:a5:ac:8a:
be:c5:39:18:bf:bc:b1:17:0d:b3:c3:e0:d8:37:4f:
73:2d:4e:f1:6c:69:88:31:d7:5e:90:96:f4:c5:ec:
ed:cd:1a:43:f6:1e:38:b7:fb:fa:ae:a8:0c:b2:08:
d3:74:24:f0:c1:07:77:d2:fe:0c:82:82:8e:f5:b5:
94:4d:4d:6b:e7:ce:94:bf:1a:a1:95:bc:9a:06:b4:
9e:d2:35:02:79:b3:d5:1a:d9:57:94:62:4c:0e:64:
83:26:17:10:38:39:59:99:a6:d4:3b:7a:74:89:bd:
d2:d2:12:f7:00:ba:4d:fc:90:32:b9:51:bc:9e:27:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:B7:3B:70:51:4E:6E:93:78:37:F9:F6:57:28:AF:09:8D:C9:61
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:f9:e2:f9:67:53:07:8a:2b:d5:fa:a8:17:e6:af:7e:aa:
04:14:30:a6:c6:49:d9:a7:d9:3d:03:51:84:f4:27:c0:05:d7:
9d:c8:a5:f7:89:97:5a:84:10:73:ad:97:80:84:75:aa:72:6e:
ee:c2:3b:cb:42:10:64:f5:6b:a5:d9:42:e3:ae:c8:2c:2d:00:
5a:a1:0c:2f:df:46:73:4a:19:aa:56:ce:12:be:9e:45:e7:e1:
98:fe:f8:1b:3e:26:67:ca:f5:d3:c6:5b:ec:38:15:c6:a9:c8:
bf:23:ae:61:6d:6d:38:9c:52:f8:dc:ef:0c:c5:79:4c:f2:d0:
29:8b:f9:7a:99:12:41:6e:8b:47:27:80:3d:e4:87:7d:97:8c:
b4:e8:d0:c0:e3:18:d5:2e:8d:f6:05:9d:d4:c0:ec:19:e0:ec:
33:fd:8a:7b:01:13:a3:65:4a:3d:e3:e3:48:ce:d8:de:47:87:
1f:aa:90:24:80:c8:38:2c:e7:c4:d5:d0:bf:f0:65:10:f7:72:
df:d4:c1:5a:01:79:e1:f1:38:72:9c:32:42:5a:18:0f:19:47:
ee:4c:b8:9e:e9:ce:e4:ef:1f:0b:f0:7d:4b:bb:b5:18:08:1e:
10:05:8f:f3:af:8a:b3:83:93:89:fc:fc:e5:1b:37:e4:ab:34:
c5:70:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:01:02 2025 by rpki-client