Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: Yf4dWAnQTgkWqj+sSd10BMD7DQbrjOityruxjqnm234=
Subject key identifier: A3:02:A0:2E:A9:DF:1C:F2:8A:10:5A:AB:38:FA:B2:BE:92:08:2F:26
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 01974742C65695E44797E7E9B9F1F95626D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 08D6
Signing time: Fri 06 Jun 2025 22:00:47 +0000
Manifest this update: Fri 06 Jun 2025 22:00:47 +0000
Manifest next update: Sat 07 Jun 2025 22:00:47 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: R7d+C7wNNeBpTorg4DRIU+0B46BaRhycuNdIXUI9ZZs=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:c6:56:95:e4:47:97:e7:e9:b9:f1:f9:56:26:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jun 6 22:00:47 2025 GMT
Not After : Jun 7 22:00:47 2025 GMT
Subject: CN=a302a02ea9df1cf28a105aab38fab2be92082f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:56:7d:c6:89:df:e3:59:25:1e:a9:79:8b:
8d:04:c9:97:1a:a1:93:b6:e0:f3:2b:13:b5:50:5c:
71:9d:04:d5:d6:90:3f:4e:4c:7f:8b:44:69:48:1a:
c3:a4:d9:18:90:01:59:77:4b:c0:56:45:56:c0:d4:
3a:ce:7e:36:0c:ec:f5:35:bb:e0:1d:1c:b3:62:87:
4b:d0:8b:8e:aa:dc:ee:b0:70:d6:3c:c8:60:78:80:
ca:5a:ea:d9:08:7f:11:76:1b:57:3e:57:fe:3f:a0:
cb:d0:a0:0c:1d:3c:4f:f2:03:df:49:e7:89:af:c4:
4c:52:d3:8b:72:7a:0d:ce:84:02:32:6f:55:18:34:
15:b9:60:94:e6:21:94:22:96:94:f0:72:8a:2f:8e:
10:05:56:46:53:0e:01:b5:c0:d8:9e:78:c6:c5:56:
67:bd:2c:77:31:da:ac:cb:30:d9:6d:f2:48:33:12:
c1:cc:e6:c7:03:7e:05:28:d8:38:7b:9a:b4:06:db:
25:54:ae:fe:1e:7e:26:8d:b5:c0:bc:9d:96:42:bd:
78:9d:a2:4c:00:e9:8d:09:a4:b1:22:66:d7:e5:41:
30:ef:43:89:05:38:c1:15:ac:2e:44:5a:4c:47:e3:
94:e5:76:37:f2:c2:d7:7b:5e:55:ac:fc:f8:dd:2e:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:A0:2E:A9:DF:1C:F2:8A:10:5A:AB:38:FA:B2:BE:92:08:2F:26
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8e:66:d7:b8:6a:2d:22:12:d1:c9:a8:3c:1d:0e:69:79:40:
1a:1c:62:2b:88:fd:56:38:81:93:92:47:14:0b:82:19:48:5c:
27:4b:c0:3d:0f:c4:d0:de:6d:65:81:f1:04:58:2b:51:b9:d4:
4e:ad:c4:b1:46:74:e6:25:79:a7:34:9d:d1:e8:2e:1b:e4:a8:
d9:47:b0:94:b1:6e:49:28:d1:af:1d:cb:43:7c:f8:cd:e1:49:
17:bd:99:da:ac:fe:b2:95:cb:2e:f4:03:8e:01:48:9a:4b:c8:
f2:1f:62:5d:67:5f:c6:61:0c:8e:90:d8:1e:91:53:80:c2:7e:
a2:59:62:9b:b4:f7:9d:08:60:5b:64:24:e7:0e:c6:be:1b:a0:
96:e8:6e:c6:3a:41:44:c2:59:f1:df:30:74:93:1f:16:b9:cb:
b3:55:60:5a:cc:c8:0a:b2:d2:24:c8:a0:28:25:5f:d5:af:ba:
83:50:f8:e4:94:1c:1a:8a:70:88:4f:6b:2d:28:2f:69:90:7e:
92:b7:67:34:56:21:39:9a:bf:aa:86:de:1b:f5:23:3d:1f:84:
fc:be:2b:a1:74:36:81:d5:d6:13:d0:fa:16:9b:de:58:67:c9:
a5:b5:eb:87:b2:b2:58:e0:2a:d2:b2:b8:b1:7c:7f:f0:cd:86:
d3:c1:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:00 2025 by rpki-client