
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: ASciQJonXGJkB6Bb9DZPxX7tB3qMAShuM2WOtvGNvwU=
Subject key identifier: 35:FD:59:63:D2:CD:25:2C:48:42:F9:65:FD:FE:E6:9E:6A:99:37:89
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 01974B560C56E317B5113E07E30797A3038B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1411
Signing time: Sat 07 Jun 2025 17:00:19 +0000
Manifest this update: Sat 07 Jun 2025 17:00:19 +0000
Manifest next update: Sun 08 Jun 2025 17:00:19 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 3ALal8XjLG1+kOmjZaXvfK8fNB/NEX3nq0EHvCCc8SQ=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:0c:56:e3:17:b5:11:3e:07:e3:07:97:a3:03:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jun 7 17:00:19 2025 GMT
Not After : Jun 8 17:00:19 2025 GMT
Subject: CN=35fd5963d2cd252c4842f965fdfee69e6a993789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:f4:e5:c8:e6:5d:22:03:ab:f4:30:f9:14:
c8:f3:da:3e:30:42:f5:e1:c5:5c:cf:c2:3d:b0:18:
96:36:ad:ea:e8:94:1e:a1:0c:6e:89:bb:97:ff:4c:
a8:92:62:15:a6:56:c6:4a:4c:fa:94:b0:fb:ec:b5:
94:e1:8d:3a:8d:f4:91:a8:92:b2:42:bf:c6:c2:5e:
6e:fe:09:56:65:23:f2:2a:6d:ef:37:97:bc:70:0f:
1f:8e:d8:3f:d4:4c:28:1f:94:56:fc:a4:39:ea:2f:
1d:f4:18:74:e8:ea:b8:07:3a:f9:5c:cf:65:e3:21:
5c:55:f2:8b:51:db:c0:d3:51:64:10:55:35:4d:3f:
be:a1:0a:a4:11:31:fb:4b:d5:3b:a4:a0:a1:ac:2a:
2b:fb:b7:fb:36:6a:2e:b1:7e:60:9c:28:98:d1:20:
c8:fc:c7:cd:28:c2:94:3c:55:02:84:b3:3f:49:37:
fb:59:86:75:02:c5:be:c1:2d:f7:2d:09:05:27:6d:
3a:d2:a1:02:56:b5:5c:a5:d5:2a:d2:fc:b5:83:37:
0a:6e:52:e5:7f:55:11:2d:62:23:51:2e:1f:41:b3:
7f:71:50:fa:8f:f9:b7:71:17:d3:4b:03:11:2b:02:
86:41:7a:42:b2:09:5b:81:7e:2f:14:ab:ba:ce:52:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FD:59:63:D2:CD:25:2C:48:42:F9:65:FD:FE:E6:9E:6A:99:37:89
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2b:d1:30:97:9e:3b:67:2b:ec:53:7a:0c:59:fd:1d:77:8f:
d1:e6:20:b9:39:ff:47:f6:1e:54:e4:8b:55:76:da:13:de:5a:
c1:ac:68:b6:76:ef:63:b0:34:d8:7c:b5:00:c6:f4:ec:3c:fd:
70:0a:47:ab:95:be:d7:1b:4a:8b:f6:e8:b1:7c:c7:8b:42:2b:
eb:79:c0:8a:95:f3:e5:0d:bf:00:df:85:54:40:9d:24:b5:f1:
03:db:36:fc:24:ed:2b:58:1e:30:e9:0d:81:38:6f:74:30:f4:
37:d1:73:7e:fa:2f:8c:8c:be:5f:19:11:32:74:50:96:3b:59:
2a:a7:26:b6:71:78:92:16:db:65:fc:3e:e5:16:a9:76:19:40:
f5:f6:48:87:6a:91:54:2e:2b:17:2f:3f:d4:e2:ea:09:ce:3d:
53:df:ef:df:0e:49:de:90:ca:1d:0e:22:83:d8:18:c0:5a:9c:
9d:98:3f:18:dd:b5:84:ba:e3:38:31:78:5c:2e:20:e7:d9:f6:
98:09:f4:2b:0d:1e:83:a5:f9:82:fd:75:12:b1:0a:9b:69:21:
72:df:5d:a8:94:27:4d:be:35:28:af:85:ee:b3:b9:fa:28:e8:
22:1b:59:63:ea:c0:5e:22:38:45:1d:d7:de:ee:8f:6f:d3:4e:
6a:a6:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:50:53 2025 by rpki-client