Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: kUhMMTsQ1e0voYtqYQzxU8Wz9NVDk5zV7KNZZT2F9FY=
Subject key identifier: 01:6B:2C:5D:94:3C:FF:BB:F4:D9:27:8B:DD:8D:97:A8:92:F7:9A:04
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019750EA42B83FF1A532FF57830D042D7A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 0320
Signing time: Sun 08 Jun 2025 19:00:19 +0000
Manifest this update: Sun 08 Jun 2025 19:00:19 +0000
Manifest next update: Mon 09 Jun 2025 19:00:19 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: Bx6n47gsMFDBADeQfrjWjJc3kYlfelPZTqxIhQ0oVI8=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:42:b8:3f:f1:a5:32:ff:57:83:0d:04:2d:7a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Jun 8 19:00:19 2025 GMT
Not After : Jun 9 19:00:19 2025 GMT
Subject: CN=016b2c5d943cffbbf4d9278bdd8d97a892f79a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:77:b3:a2:44:fb:4a:9b:47:b9:48:35:54:
72:30:78:e7:1b:b1:29:a3:9a:ce:15:6b:ae:97:3b:
d0:fe:e7:e9:b9:c6:7f:5c:9d:d8:4a:0d:85:30:a4:
9a:ea:33:af:d5:b6:5c:47:52:0f:0c:2d:b6:c8:a9:
c3:45:fd:51:71:90:bf:02:37:b5:1d:e7:94:6b:b3:
05:ad:8c:23:03:e8:0f:68:ba:56:1d:20:b5:ea:43:
00:fd:55:5c:32:dc:74:49:64:55:82:3c:81:48:16:
b1:40:65:0e:03:79:d2:d8:3e:63:8c:cf:42:dd:ce:
52:fe:c7:d1:a9:bb:50:6c:ce:8a:1f:68:eb:e1:74:
ed:f5:f1:63:56:04:10:50:34:d6:80:c0:d2:95:e1:
68:53:a0:17:39:27:f9:3b:c2:29:e9:30:05:c4:13:
4b:9c:4e:5f:2e:59:b1:e0:e1:86:c2:2b:98:76:e0:
03:25:4a:84:c4:74:7b:c9:a5:c9:ce:2c:10:bd:e6:
21:7c:02:aa:dc:27:5c:df:7f:6d:04:08:6d:6e:25:
63:40:d8:e0:32:97:ee:2e:7c:bc:b5:93:45:dd:13:
0a:60:9d:43:52:04:4e:c4:a9:29:f4:e5:f2:d2:c9:
14:ea:3d:a4:1f:1d:33:8f:c1:5d:ad:2a:c9:ea:40:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:2C:5D:94:3C:FF:BB:F4:D9:27:8B:DD:8D:97:A8:92:F7:9A:04
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:97:52:74:84:0b:c6:37:d1:e9:2a:a2:a8:73:b0:e0:46:
34:93:3a:8b:72:25:d8:8e:51:fb:a5:6d:1d:65:f2:40:c6:fc:
87:97:6e:95:e9:ba:7a:31:b7:84:09:c1:2c:b6:4b:c3:94:24:
8a:db:f3:2e:f2:51:9d:13:0e:df:b5:9b:e1:50:35:ae:c5:ff:
90:89:a5:cc:49:fd:55:a6:af:9b:79:33:a5:6c:9b:d2:1b:f4:
15:be:5e:26:fd:6c:d4:c2:00:c0:37:9d:5e:9a:5b:14:db:8b:
cb:a7:ad:df:de:69:02:92:3f:61:b2:a6:1e:fb:f3:87:d6:c8:
a1:d2:d7:44:d6:4f:67:84:38:ee:13:8b:a3:7f:f7:c5:72:11:
8e:60:f6:da:64:13:28:8d:6f:43:2e:14:97:6a:cf:dd:ac:47:
1d:4b:44:77:a2:88:e3:5a:3b:23:75:86:02:ce:a5:10:d5:53:
1c:bf:14:5b:af:0a:92:3f:1b:73:a8:ce:35:b5:2d:dd:a6:40:
d9:b6:1c:23:c2:88:c3:dc:e1:b1:41:46:8a:66:1d:58:28:fe:
89:c5:0e:cd:4a:3f:37:bb:e5:91:19:86:52:db:c7:d8:0b:e9:
84:6b:3a:69:b7:c6:df:23:f3:f5:80:72:5c:3e:b8:8d:f5:50:
29:23:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:40 2025 by rpki-client