Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: HhE0RpCpWD8mfVZsVZ57EIXTLHYUFAIBCe7M47uyMgM=
Subject key identifier: 99:93:51:02:E0:44:99:3A:A2:51:61:8E:C9:5B:5B:0B:DB:C9:FA:44
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01974AE878E0064DD6B33C920978A759141F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 1040
Signing time: Sat 07 Jun 2025 15:00:38 +0000
Manifest this update: Sat 07 Jun 2025 15:00:38 +0000
Manifest next update: Sun 08 Jun 2025 15:00:38 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: DCV6reDQAnjCSkyxg3HAJfiTHCR2FZZ2swAoa+0Ksok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:78:e0:06:4d:d6:b3:3c:92:09:78:a7:59:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jun 7 15:00:38 2025 GMT
Not After : Jun 8 15:00:38 2025 GMT
Subject: CN=99935102e044993aa251618ec95b5b0bdbc9fa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:5e:d0:f3:05:90:37:f3:de:a4:1b:91:65:
7b:ce:cd:c6:be:fc:f6:00:79:3a:40:06:15:ca:6e:
41:0d:3a:3c:5f:45:e5:23:bf:09:6d:95:43:8a:ca:
ff:da:de:3e:51:95:59:99:98:d9:23:d0:5c:4b:fd:
d8:7a:97:b7:57:08:f1:3d:ae:14:44:32:fc:72:98:
7a:45:e8:e2:7b:a6:ef:12:3c:32:55:db:4f:ac:5e:
94:70:66:4f:63:16:e5:db:24:e4:30:67:9d:15:bf:
26:cb:ef:76:84:00:04:76:e2:e5:3a:14:31:0e:7c:
06:21:c6:14:f6:3e:35:7f:22:88:bb:01:56:5e:ac:
20:11:36:d4:73:d2:a2:c7:2e:8a:bf:4d:ff:d6:f7:
fa:8d:df:7b:b2:0f:78:de:e8:2a:e1:79:f6:3c:05:
d3:b5:a9:25:4f:f7:d5:17:ab:40:45:a9:4b:74:fe:
11:43:f5:e9:5b:a7:6a:4e:70:cf:b6:cc:44:b0:7c:
16:28:d8:14:66:7e:6b:19:b3:e3:ed:68:7e:ce:b0:
7d:5e:bb:ec:33:00:bd:1f:af:fe:4a:cd:9f:af:b7:
63:6b:e8:f0:73:a1:cd:a5:ed:22:81:19:59:54:bd:
a9:4c:e4:c1:33:d3:04:75:cf:3d:b4:3b:eb:10:8f:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:51:02:E0:44:99:3A:A2:51:61:8E:C9:5B:5B:0B:DB:C9:FA:44
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:51:09:bd:e7:a7:cb:12:b0:11:25:ea:60:e2:c2:4c:83:36:
d0:52:38:e9:f7:a3:fb:2e:2d:fa:42:1c:88:25:39:35:49:5e:
86:56:ba:b2:fa:73:7e:61:24:27:54:a1:37:ef:1c:66:c4:2f:
e1:e5:93:62:08:bc:44:32:ae:3b:f7:c3:2b:6b:b3:a1:8e:ee:
0b:3b:ae:e1:f2:db:19:30:11:24:b7:85:0c:54:8b:43:b3:8c:
2a:07:0e:00:ea:8f:86:ca:b5:cf:24:74:45:94:4e:5e:39:eb:
7e:70:b7:d5:df:7c:81:d7:53:35:cf:09:2d:69:57:be:92:49:
13:5f:06:c4:9a:0f:12:20:4a:ac:52:4c:67:a3:1c:b0:e1:c5:
3c:3e:e3:6a:7a:bb:61:d7:17:96:4a:47:30:79:8c:31:0a:c8:
4d:f8:00:fe:41:93:d3:64:f9:a2:4c:39:2c:f2:c5:c8:95:e7:
85:b4:42:10:9f:d3:cd:47:56:59:9d:d5:2d:d8:e0:f9:61:01:
e1:2e:75:a2:dd:1f:df:2a:2e:9c:16:7c:d7:99:3e:97:68:9a:
74:8a:8e:a8:2b:0b:cf:ac:a4:0e:20:a8:e9:6d:ec:6a:99:29:
0c:48:ed:86:1a:a1:a9:7f:bf:68:cd:d7:b8:2e:94:88:45:e5:
05:62:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:32 2025 by rpki-client