Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: 6wN+bmGG3iPUfWveY1hH5I3pZzo5CmrG9RshF9ErE0Q=
Subject key identifier: F4:DA:FD:0A:17:5F:BB:C9:1D:AB:41:F9:A8:C1:E6:16:FA:8A:35:BF
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 019749D5C7D344A1B8ADF1171A785B6C49E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 04E0
Signing time: Sat 07 Jun 2025 10:00:36 +0000
Manifest this update: Sat 07 Jun 2025 10:00:36 +0000
Manifest next update: Sun 08 Jun 2025 10:00:36 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: YqcPDj4YuXHOBjoPOciGQVw2H9NoDikZtW/KLSFul58=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c7:d3:44:a1:b8:ad:f1:17:1a:78:5b:6c:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Jun 7 10:00:36 2025 GMT
Not After : Jun 8 10:00:36 2025 GMT
Subject: CN=f4dafd0a175fbbc91dab41f9a8c1e616fa8a35bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:53:67:91:df:17:a0:eb:04:fb:64:06:4d:
e8:37:a1:59:80:d7:16:98:d8:be:60:fd:8b:c0:8c:
ad:4b:c1:fc:4d:4a:db:f9:f6:6e:2a:8c:f6:99:b5:
59:1b:ea:cb:0d:76:c8:d3:5c:f1:b2:14:e5:b4:04:
fb:7a:88:c8:44:c8:8e:e9:7d:a7:d9:bf:72:ae:a1:
54:6b:23:5b:e9:72:2f:8c:a5:22:4c:36:04:a6:b5:
10:60:4f:81:31:1c:e7:2e:d7:8b:7c:ce:99:f3:ec:
56:6b:df:49:5f:eb:4c:23:42:a9:94:56:a1:32:c9:
bf:cf:30:12:b7:aa:4e:c5:12:bb:a7:1a:56:f8:bf:
12:28:69:a9:6e:fd:e5:a7:09:7f:96:14:8a:5a:3b:
bf:5f:12:f2:87:ac:6e:98:24:12:51:f7:20:39:d5:
f5:6a:04:83:9a:e5:28:83:5c:d7:1a:4c:c3:ee:05:
52:2c:c0:d5:0d:9d:d4:a1:97:bb:d7:61:11:7c:81:
a7:99:da:3b:e0:50:1d:14:fc:d3:24:c1:07:ac:8f:
7d:68:e8:6c:a9:13:91:93:38:30:50:57:8e:06:d5:
78:cd:1a:52:5e:cb:53:00:03:0f:67:9c:25:09:a6:
b3:d0:92:81:90:14:60:6a:a1:6c:2a:a7:17:c1:28:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:FD:0A:17:5F:BB:C9:1D:AB:41:F9:A8:C1:E6:16:FA:8A:35:BF
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:4b:9a:93:ea:3e:60:d0:21:93:57:f6:69:af:bc:90:15:
5e:06:1d:da:73:5e:54:5c:da:78:56:0e:e5:55:61:39:c4:1d:
c5:b8:71:a2:66:1d:77:6e:b1:76:12:6f:5d:de:75:d8:a0:3e:
50:60:86:1f:f6:ee:33:4e:66:9e:88:21:0c:ad:15:d9:25:71:
25:ca:08:9c:74:8b:e8:2b:61:0b:e6:74:8e:68:b2:fb:e2:6b:
a1:35:b9:17:8e:0d:c8:fa:c2:10:3d:18:fa:55:4b:45:51:5f:
55:dc:62:ec:35:c1:df:37:94:32:a4:0c:b4:45:9c:e1:32:ad:
53:b8:38:62:79:b7:0f:af:d1:b0:a1:0c:65:70:56:04:cf:aa:
1c:b3:67:cf:f5:b7:f4:66:6e:23:db:88:6d:18:ef:98:a8:f2:
3f:73:e7:da:de:a1:ce:7c:b2:47:c0:68:66:4a:15:1a:d8:f7:
b2:5a:6a:dd:05:bf:ab:68:c0:e3:7a:b4:ed:b2:af:8c:35:94:
4f:d1:95:c8:95:d9:ad:aa:4b:c9:bf:30:18:7a:ce:2d:b8:b5:
a3:54:9b:9a:57:32:f7:31:b4:84:c1:a5:f2:c1:ca:05:10:cb:
ae:c8:6c:6a:c4:85:35:bb:98:98:45:e1:67:96:1c:42:24:6f:
0d:1f:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:50 2025 by rpki-client