Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: 00ZFTplDySKUBuy/RxI7/DpYPM3QMklI1GkN4jCPTVw=
Subject key identifier: 6E:C2:D3:4D:77:13:07:1E:06:32:B8:74:AF:10:90:DE:5F:2E:A1:01
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01974EC5D49519048A5772540E65BB6CEC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0704
Signing time: Sun 08 Jun 2025 09:01:17 +0000
Manifest this update: Sun 08 Jun 2025 09:01:17 +0000
Manifest next update: Mon 09 Jun 2025 09:01:17 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: hddeYuWMFnmQkj/r4XUdAg0PiOqLy+zv8n7t6UwagvY=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:d4:95:19:04:8a:57:72:54:0e:65:bb:6c:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Jun 8 09:01:17 2025 GMT
Not After : Jun 9 09:01:17 2025 GMT
Subject: CN=6ec2d34d7713071e0632b874af1090de5f2ea101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:3d:ca:13:31:fd:ac:c4:8d:ff:93:6d:2b:
39:08:7f:c8:22:f4:f2:52:7d:4a:31:77:fa:e3:bf:
78:ad:f4:b5:7a:46:4a:b9:20:dc:cc:e5:dc:b1:1f:
45:c0:ac:25:42:da:2a:7f:58:02:5f:e5:8b:86:0d:
60:da:26:7d:5c:86:3f:59:1e:3e:10:9a:c7:31:ee:
0b:38:7d:cf:d0:30:41:93:43:b5:e0:27:00:bd:df:
a2:bb:80:1c:43:58:e9:55:2f:89:cc:17:c3:2b:e8:
99:66:93:4e:9c:a0:e1:d1:d0:08:0f:da:dc:f0:03:
98:1c:06:e2:7e:c9:52:7b:9c:57:69:9d:e2:99:ee:
5e:4e:4d:5a:aa:93:fb:52:db:12:2c:5c:db:80:e5:
3c:26:de:cd:95:ea:9c:50:6e:76:20:62:09:73:50:
e9:02:60:ad:dc:49:f3:aa:ab:cf:0d:00:e3:52:1a:
01:ae:87:69:e7:fb:d9:ad:e1:2f:b7:54:02:e8:93:
d6:fe:55:4b:06:7d:f4:2f:bd:b6:a6:9b:51:55:16:
dc:f4:43:1a:3d:5a:0f:ae:87:3e:ac:34:63:ff:95:
9f:eb:aa:40:e0:df:24:4b:80:d9:c0:a9:8f:fc:df:
e8:43:0d:d8:ec:cc:50:dd:05:26:53:e7:35:78:5c:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:D3:4D:77:13:07:1E:06:32:B8:74:AF:10:90:DE:5F:2E:A1:01
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:7b:71:53:48:82:33:18:e1:2d:30:26:a4:67:55:a2:7b:
4a:0e:d9:f9:65:ec:68:8d:5c:25:b5:50:ef:85:b5:ca:97:23:
ee:c7:3b:ea:2d:2a:4d:70:27:19:3f:a5:d3:f3:46:45:25:a5:
b0:ff:26:d6:d2:bb:15:fc:f4:03:4c:cf:a1:32:91:ff:49:1f:
b3:53:0f:eb:5a:a8:ba:e2:48:c9:6f:22:b2:9e:21:6a:b7:a8:
d5:91:58:b1:a7:cb:22:a9:91:58:dd:50:9a:09:ee:7a:12:74:
fe:a1:f0:63:37:e8:00:7c:b0:b2:6a:5e:b8:eb:78:01:14:9f:
16:99:cc:db:e1:f7:b0:6f:09:d4:ae:73:8f:d8:6f:2f:f1:f8:
33:0e:02:84:a1:8c:10:ac:1a:5d:e6:34:a4:28:bf:3a:56:3b:
0d:2d:9d:1d:23:14:3f:fd:7c:c8:fc:b9:e4:e9:72:34:d7:c5:
ec:ec:9d:ca:76:39:50:be:25:96:dc:f9:2c:9c:de:38:d2:f6:
1f:bc:a3:c2:b1:91:18:f3:ee:4c:4b:15:1b:c3:16:5b:42:ed:
86:c3:b6:df:35:1b:cf:bb:49:d4:32:10:51:da:6a:ff:39:c6:
0b:6c:8d:49:18:34:c1:42:6b:c8:ae:e8:97:8c:4b:2b:c9:2f:
98:49:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:29:54 2025 by rpki-client