Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: 41w2g3Dg1F6XUCMngu0X0UhCzpqin8PZVcWYvmQcozg=
Subject key identifier: 00:6F:94:AA:47:EA:EA:89:6D:1D:1A:BE:48:30:6E:67:96:43:7F:DA
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019749681A1407C4684471BC37A4F09C9624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0E29
Signing time: Sat 07 Jun 2025 08:00:48 +0000
Manifest this update: Sat 07 Jun 2025 08:00:48 +0000
Manifest next update: Sun 08 Jun 2025 08:00:48 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: DBVzCrWHuBa6B942cYCV6H66PaKFpUKmVMGjAHFggjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:1a:14:07:c4:68:44:71:bc:37:a4:f0:9c:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jun 7 08:00:48 2025 GMT
Not After : Jun 8 08:00:48 2025 GMT
Subject: CN=006f94aa47eaea896d1d1abe48306e6796437fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:ad:ab:d5:e9:cb:45:17:f4:91:40:b4:b7:
5b:e2:55:c8:b7:77:c7:62:4e:62:09:f4:ae:2a:2a:
d0:0c:46:c2:a1:da:9b:41:a6:7f:c8:2e:2d:ab:7a:
d5:70:96:e2:9f:e4:9c:2e:e7:36:ca:c6:dc:5d:f1:
c1:2e:21:71:21:38:37:5e:ee:b1:53:ed:b2:e2:9f:
6b:9e:2d:1b:3d:6a:c3:68:d0:dd:22:c7:23:1f:51:
50:69:35:aa:87:70:45:52:c9:4e:59:95:8d:31:ee:
1f:43:4d:45:59:fa:7c:03:52:2d:39:6b:3a:29:7d:
67:d4:a7:1d:4c:4c:ee:3a:db:76:55:9e:b7:d6:8f:
b5:a2:07:6c:4e:35:77:ed:43:26:84:58:33:54:d1:
4a:8d:dc:9a:51:5f:4c:b8:93:a4:c2:3b:9d:b4:90:
74:ab:54:01:bc:f0:b0:79:34:ac:4c:fa:f0:f3:79:
35:d9:2e:f0:4c:90:9d:d6:13:3c:94:7c:bf:c4:20:
7e:19:30:42:05:6e:80:b0:e6:1c:08:3b:85:2a:21:
09:74:5f:04:fb:4f:c6:db:b0:88:ec:5c:de:29:08:
15:d8:66:a7:89:c3:57:41:7c:0a:0f:5d:1b:bc:95:
94:4c:2a:d0:e3:e7:71:34:66:98:e8:e9:4b:4c:f3:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:94:AA:47:EA:EA:89:6D:1D:1A:BE:48:30:6E:67:96:43:7F:DA
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:05:d6:46:31:88:a5:80:b6:8d:7c:0c:c1:b2:7f:87:de:
1a:4f:65:36:fd:6d:f4:f9:86:e8:80:bb:d2:6f:41:ae:ee:ec:
7d:e4:c7:6a:17:8c:4b:73:cb:42:b7:40:af:ce:c0:a1:d5:a1:
10:6b:c5:c7:89:ed:6e:48:dd:85:32:f1:a1:b1:54:f3:13:87:
51:a9:f4:a2:fd:b3:41:50:df:25:fe:b6:32:8b:85:7f:35:ad:
45:b6:73:d6:96:5b:d7:ec:69:2c:9b:2c:12:43:43:25:de:86:
88:00:d9:7f:64:1b:a9:b5:53:02:a1:2d:c5:3b:3c:29:cd:b7:
48:55:ed:08:05:bb:b7:98:1f:89:cb:e9:fa:35:b4:13:3c:35:
53:cb:fb:57:b7:20:9e:b0:12:4f:00:e8:54:0e:b4:c0:54:26:
2f:72:62:c5:9d:8f:80:f0:0f:b5:ad:ef:a4:d4:f3:98:9d:73:
77:18:f5:3d:be:3b:32:a1:13:cc:d2:cd:72:01:25:2c:f0:17:
e9:8a:f6:23:48:72:ff:93:af:92:b9:f6:0d:92:5d:2a:e3:50:
0e:02:ed:63:3e:e3:0f:88:60:c6:1b:c8:91:28:63:a8:2d:82:
7a:87:5c:f1:36:67:6c:a9:74:57:c3:75:1b:7f:6c:84:d1:37:
8d:91:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:09 2025 by rpki-client