Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: lLiAutx+AT88OiHxmwDt2VgmFbCFjUSxToCAKa6IPHQ=
Subject key identifier: 20:F8:58:40:FB:BA:42:FD:6D:EE:36:1D:1A:4E:14:8A:10:34:B6:E9
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01974CD76CB5C4C9FC3C610200334641C98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 09AA
Signing time: Sun 08 Jun 2025 00:01:15 +0000
Manifest this update: Sun 08 Jun 2025 00:01:15 +0000
Manifest next update: Mon 09 Jun 2025 00:01:15 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: 74Z6/RjarU+NhjR7MNpT6T7aVVw6ncQsgg9c2afpJEQ=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:6c:b5:c4:c9:fc:3c:61:02:00:33:46:41:c9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jun 8 00:01:15 2025 GMT
Not After : Jun 9 00:01:15 2025 GMT
Subject: CN=20f85840fbba42fd6dee361d1a4e148a1034b6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:a7:6a:5c:25:62:36:ae:a2:4e:d7:bf:de:
50:00:94:2e:1f:a1:28:81:55:98:84:7b:a2:9f:58:
d4:98:26:44:f7:64:32:7e:85:ef:49:df:17:09:99:
b2:6b:81:36:41:be:31:9b:7d:6e:59:75:51:e7:88:
35:c2:75:13:9c:f8:eb:34:4c:fb:6a:90:55:5c:5a:
18:3c:01:22:28:e9:da:bc:71:8e:2f:79:34:6b:3f:
0a:a5:80:17:aa:5a:a0:7e:85:44:8a:ad:18:9c:2a:
4f:b1:48:17:08:df:3d:2d:17:46:b1:f5:be:09:9f:
7b:91:d8:e1:a4:df:ee:72:ee:0f:5d:ae:52:35:13:
fe:a7:f4:1a:d0:bd:c5:41:d6:33:2c:e9:e8:7e:22:
5a:65:19:a9:2e:54:8c:50:9e:fe:58:13:14:12:54:
c4:25:e4:d1:d2:17:46:0f:66:24:bc:98:c2:50:b5:
d7:88:a8:45:f3:49:f0:3e:db:6a:19:ff:22:85:52:
a0:30:e9:e0:0b:35:2a:6f:c1:4c:e7:29:cd:5a:aa:
e3:40:61:fd:15:23:ca:a0:52:dc:0a:fe:fa:80:32:
07:ce:00:68:67:58:08:68:ae:9e:f9:8d:33:00:ed:
46:1f:f8:26:0c:74:cb:4a:f0:7c:77:82:a7:a0:49:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:58:40:FB:BA:42:FD:6D:EE:36:1D:1A:4E:14:8A:10:34:B6:E9
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:26:51:d6:32:6a:5b:bd:9c:08:61:ba:d8:e6:f5:71:73:6a:
7d:46:e6:1e:89:e1:58:e2:d6:e2:61:b0:c1:b5:2b:3f:16:96:
be:5d:3f:5a:79:f4:82:c0:02:6c:6a:21:0c:7f:29:87:f1:a1:
40:c2:72:4d:ec:28:27:46:ac:18:ee:79:33:d1:30:3e:1b:4f:
01:4c:1e:2c:bf:e4:bd:6b:d3:df:6d:df:b4:10:cb:3f:2d:13:
07:1c:57:8d:68:8c:8b:2e:15:fb:86:1b:96:28:39:57:95:23:
ae:6e:3a:e9:8c:6b:fb:39:cf:f4:44:59:97:62:f9:80:8f:af:
62:98:de:d4:7f:6b:4a:ac:3d:72:99:be:6d:dd:72:d8:bf:16:
0b:29:28:c7:1c:6d:9a:c6:d1:28:d4:1f:ee:2b:44:96:8b:7c:
99:cb:1b:c0:07:ff:71:49:cf:f7:69:34:05:67:90:8d:90:d9:
ee:35:b9:4a:64:01:57:9e:6a:e8:a3:f8:18:86:ad:0f:06:fd:
fe:a5:fc:19:d4:b1:d6:8c:9b:bb:23:df:0d:26:1d:2f:f8:37:
5d:8e:8e:62:b4:11:4b:ee:2e:8a:7b:01:d6:e5:20:58:7d:d4:
ff:f2:18:df:53:2b:cf:6c:e3:43:01:48:f4:4c:4f:85:d3:43:
28:34:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:58:53 2025 by rpki-client