Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: p97xskmV+A63Ejtnr5DMcGUEUWReMqmOzZBo77ON7yE=
Subject key identifier: E1:B1:58:89:F0:04:F3:D6:4F:C9:29:48:2B:4A:79:93:BE:8B:49:A3
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0197462FED7E0165B8A521DBA1764ACDAA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 128B
Signing time: Fri 06 Jun 2025 17:00:35 +0000
Manifest this update: Fri 06 Jun 2025 17:00:35 +0000
Manifest next update: Sat 07 Jun 2025 17:00:35 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: j3g1MBceKR3DZX1vjYw8JR3ltbRV5jD9cf/giBBCzHk=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ed:7e:01:65:b8:a5:21:db:a1:76:4a:cd:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jun 6 17:00:35 2025 GMT
Not After : Jun 7 17:00:35 2025 GMT
Subject: CN=e1b15889f004f3d64fc929482b4a7993be8b49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:fc:a4:de:ae:9a:21:fc:83:98:b8:1d:30:
c8:49:a4:bc:7c:f2:fc:ab:a4:02:74:09:fe:35:fe:
5a:78:94:b0:73:dc:dc:81:59:09:b2:e7:f6:e6:cd:
e4:17:2e:11:c2:95:99:f6:ff:92:2a:ec:2f:a1:f1:
4b:48:66:cb:fd:5c:63:8a:d5:86:3e:9e:c1:24:98:
f4:a9:70:0c:0c:8a:f2:f9:61:4e:34:2b:31:5a:65:
57:ae:62:b7:8e:9d:c4:48:01:dd:aa:89:0a:36:87:
9e:3a:02:83:eb:dc:a3:9d:55:ff:f5:bc:bc:c2:86:
58:81:cf:4d:1a:48:ce:9e:93:6a:6d:b4:08:60:e2:
e9:c1:16:c4:6b:31:fe:7b:27:ab:c8:62:1d:c0:3e:
fe:f5:0a:36:e6:d4:15:0a:bc:02:1f:bc:23:c0:c2:
37:84:64:b9:53:dd:88:0c:ba:47:7e:e4:89:db:03:
bc:83:34:6f:05:39:55:2d:97:1e:c0:0f:46:1a:d9:
dd:33:a1:c7:e2:55:6a:4b:e2:d3:df:a5:74:e7:8e:
1f:9e:b8:45:c9:6b:ba:4a:30:a7:11:6c:3a:f4:18:
02:2f:29:0b:d4:28:68:6a:8e:08:f1:78:ef:7b:80:
f4:23:8a:c3:15:85:8f:f3:d3:9f:93:28:3d:a5:1e:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B1:58:89:F0:04:F3:D6:4F:C9:29:48:2B:4A:79:93:BE:8B:49:A3
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ed:b7:e8:bb:e3:a2:cf:f0:6b:52:3a:a2:ab:fb:e8:30:92:
17:70:52:74:9e:ed:70:56:f2:f7:31:78:19:ed:a2:cc:ac:7e:
f0:4b:5b:18:b2:fc:cf:38:62:de:e9:ac:35:67:17:14:68:ce:
ad:be:26:94:ac:53:4a:a1:e8:f1:fb:c7:fb:65:73:10:a8:b1:
5e:5e:46:71:7d:90:ec:49:5c:53:d4:cd:17:2e:03:f1:19:b5:
af:e4:d1:15:a4:fe:df:0d:82:97:97:55:06:0b:fa:e5:25:a4:
41:ab:9c:72:c5:d6:03:85:2b:19:64:e3:94:80:b5:2f:10:0d:
5d:ff:55:76:16:9e:3b:26:0e:ec:7f:a0:0f:3b:04:6a:eb:2c:
3c:05:ea:7a:47:9e:8f:3f:54:1d:28:49:f6:61:e7:6e:21:ea:
47:12:8e:a2:33:3c:e4:4a:0e:bf:1b:c8:6d:51:df:27:25:af:
37:ef:56:81:9d:bb:c5:20:38:5e:47:7c:4c:54:30:37:3d:93:
20:57:6e:19:d9:cc:96:37:20:47:14:f8:28:fe:9a:7f:4a:51:
03:f0:7e:cb:c0:6f:1c:58:5c:75:ed:22:4d:66:cb:3e:2f:e0:
83:15:91:5c:8a:40:d7:c4:38:8a:1d:9b:a0:7a:99:5b:b4:88:
a5:09:54:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:12:15 2025 by rpki-client