Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: znvpMch8onRgnxcQ/ExhdIdKMVkcgRKy+jikQCq+aJY=
Subject key identifier: 23:62:25:2B:8C:5D:71:0A:3C:FD:BE:0A:DD:2D:6F:4D:E4:45:50:A9
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019749311D330BC66CBFB8841821896B09FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 0448
Signing time: Sat 07 Jun 2025 07:00:44 +0000
Manifest this update: Sat 07 Jun 2025 07:00:44 +0000
Manifest next update: Sun 08 Jun 2025 07:00:44 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: KDSgmblUqBjn3AkhpVUk1565dBAVoOcJOxKzlYJ+01Q=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:1d:33:0b:c6:6c:bf:b8:84:18:21:89:6b:09:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Jun 7 07:00:44 2025 GMT
Not After : Jun 8 07:00:44 2025 GMT
Subject: CN=2362252b8c5d710a3cfdbe0add2d6f4de44550a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:cb:9f:ce:d6:9b:8d:0e:3c:2c:e9:6f:61:
79:8d:32:83:26:cd:b0:22:ea:3b:2d:a2:42:68:89:
7d:82:04:f5:d4:4d:ea:42:02:4f:c7:a6:dc:a3:ae:
a7:86:55:32:db:9c:05:77:8f:b3:bf:b5:e6:5d:f9:
8e:87:63:59:ab:0d:eb:5b:4d:83:86:1c:22:ef:b2:
4a:c7:9f:72:dd:33:70:14:d6:90:83:1e:72:67:59:
e9:ef:5c:d1:a6:3a:29:4a:47:c8:44:9c:ea:bf:b0:
08:a1:48:72:5f:07:fd:79:bc:11:1c:d0:c2:93:8b:
38:18:ee:22:83:6b:b9:96:b8:16:bd:55:ea:5f:07:
94:2d:b8:40:fd:7c:ee:29:9b:5a:65:5f:c3:6d:c6:
0f:52:39:a4:6d:72:9a:57:e3:9f:fe:53:99:c3:a1:
aa:91:e8:c9:c3:11:c9:48:f7:1c:dc:95:c4:cd:d9:
f3:93:a9:e1:fa:30:35:a0:a5:0f:22:b4:56:3f:91:
29:9a:4c:b1:02:bc:6b:4d:13:e3:03:a1:c8:94:98:
e9:bd:a8:d3:16:61:07:f7:2c:96:2c:cd:ea:3c:bb:
70:cb:e2:c4:b0:a2:fd:4f:87:3c:e9:c7:9d:b4:fd:
3e:7b:ad:25:45:50:76:d2:75:c3:29:7d:f3:ae:f6:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:62:25:2B:8C:5D:71:0A:3C:FD:BE:0A:DD:2D:6F:4D:E4:45:50:A9
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f6:d8:20:a6:c0:42:d7:c4:66:62:74:bf:ce:68:43:1e:5e:
71:e2:c0:84:ed:0b:7a:82:a3:2f:db:c1:1b:0a:aa:20:e6:0c:
66:60:45:47:2d:ba:d8:0b:cf:e6:9a:7d:8f:ac:d3:2f:96:32:
9b:a5:00:6d:4f:58:ff:e5:d1:2b:4b:54:8c:19:d3:bb:f1:be:
f7:a8:a3:8d:44:9b:d9:b1:82:b4:17:17:fd:32:83:1c:7c:b8:
89:08:75:69:23:a9:64:49:f7:80:ae:db:82:3c:00:fd:d8:b1:
f8:9e:ef:36:48:28:1c:34:40:a6:15:db:56:1c:f7:44:fe:9d:
af:6e:46:b3:3b:a3:21:cb:9b:79:92:0d:1a:eb:21:5b:73:b8:
34:0f:7f:6a:bd:b5:1c:ea:1b:b6:96:69:be:06:0f:69:61:0d:
d9:9f:7a:c0:30:62:b0:e3:13:81:e6:0b:96:d9:86:ff:a7:f1:
d3:eb:7d:99:46:84:92:04:d8:9c:7a:ba:ff:3a:24:97:a1:44:
b8:af:1c:e1:45:aa:97:d6:2f:73:e3:9d:68:2a:05:9b:c6:ad:
a6:87:1c:61:b7:c5:f4:23:58:81:77:24:4d:05:59:26:49:a3:
3c:5a:99:90:f4:10:09:89:62:44:e0:bf:26:5c:c4:b7:13:2b:
01:16:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:03 2025 by rpki-client