Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: EkDxT3EefRdUNhhjwa196XpKIEHR/t6L/Voq/UiEnCk=
Subject key identifier: 9C:47:3B:4C:FB:DE:23:25:3D:42:59:21:C8:F3:8C:30:02:3C:BC:08
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 01974B8D46C1A6C2EBD73FB6691E4F75477A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 06AA
Signing time: Sat 07 Jun 2025 18:00:39 +0000
Manifest this update: Sat 07 Jun 2025 18:00:39 +0000
Manifest next update: Sun 08 Jun 2025 18:00:39 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: cBhdrN2BlkuNaHUKZ7VUFW9nxrE9gZUZDB3joa2B2s8=)
2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:46:c1:a6:c2:eb:d7:3f:b6:69:1e:4f:75:47:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Jun 7 18:00:39 2025 GMT
Not After : Jun 8 18:00:39 2025 GMT
Subject: CN=9c473b4cfbde23253d425921c8f38c30023cbc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:40:3c:84:7b:43:0d:a0:de:08:8a:a3:c3:
3d:45:fc:16:87:59:e8:68:d0:a2:64:16:31:dd:87:
12:40:23:47:40:a4:80:b4:4b:51:40:e8:b8:82:ee:
dc:7e:1d:6d:a4:48:94:5f:a3:d8:f3:cc:47:41:b1:
2f:17:70:19:d7:e7:d8:8a:6b:ab:e5:83:b6:7d:78:
fc:4d:31:cd:5d:25:63:9e:0b:e7:66:2b:e9:ff:ba:
a9:eb:2d:88:dc:43:5f:a8:f1:6a:b8:8b:de:9b:77:
dc:b0:f6:20:e2:ce:bb:ba:7d:f6:b9:63:4f:82:66:
ca:83:3e:85:f9:aa:75:87:ec:d9:3f:22:35:79:6b:
73:36:89:c3:e0:ec:b3:47:36:c5:87:0e:88:0c:34:
05:20:36:34:8d:53:6c:95:52:3d:ab:21:39:79:c5:
15:4a:18:b6:26:05:38:9e:90:72:30:53:08:ec:a6:
e9:4e:79:f1:aa:0d:94:93:83:6f:3a:c9:7d:2b:cf:
f5:0c:cc:d4:6f:3e:06:54:bd:ae:b7:13:ab:38:a4:
18:98:25:c9:a2:7f:a9:23:55:a7:45:99:87:47:a3:
9f:4b:df:06:9b:6b:88:53:1e:5f:66:07:20:fc:47:
62:9f:70:bb:82:57:56:4e:f1:52:f9:90:e8:cf:58:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:3B:4C:FB:DE:23:25:3D:42:59:21:C8:F3:8C:30:02:3C:BC:08
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:9b:4a:07:03:bb:88:80:f7:79:f2:19:bb:c9:c5:d9:26:
04:91:99:21:ee:0b:29:07:17:50:4d:aa:ee:cc:44:ef:13:fb:
43:4f:86:e4:dd:f4:69:48:da:9b:6f:b7:10:59:8c:9c:d7:57:
82:87:ce:6d:3a:6b:03:95:84:5c:04:a1:2f:dc:d6:45:9e:ef:
91:be:52:16:7c:d3:da:0d:50:bc:13:94:3e:6f:e0:f0:c3:25:
7f:0e:6e:4e:13:e8:c2:d7:15:7f:5e:8a:44:87:81:bf:e3:70:
39:b6:3e:96:f5:a0:56:ca:b4:1e:30:c9:33:1c:24:f7:cc:26:
7a:a5:2b:f0:b5:37:35:31:68:6f:97:49:b0:86:7e:c9:f0:d0:
6f:0b:4b:c6:4b:a5:4b:ae:c4:dc:d1:ca:2d:ab:59:86:cf:48:
69:39:60:6a:4d:97:dd:f8:84:d7:c1:b5:11:38:53:a4:69:38:
57:af:ab:f0:c9:df:c3:dd:e1:d4:cd:83:0c:4e:72:3c:dd:4f:
b8:8c:f2:b5:e1:3f:a7:48:88:96:8b:ef:57:8a:71:db:0b:ff:
d3:3a:1c:c4:4e:a7:f1:ea:aa:95:8f:64:b3:a7:01:09:c5:ff:
1c:97:d7:7c:19:d8:a4:c4:68:b4:a3:54:96:4b:81:9d:0b:7c:
07:c6:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:10 2025 by rpki-client