Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: sV8zKCIJls8d0OZMcwMDDicCh58dpCdgzLZYDqm0v7Y=
Subject key identifier: EA:85:22:9C:FC:8F:96:D4:69:F9:20:98:B7:30:73:43:9B:75:E3:E5
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 019759123ED3185630AB4856E636519660C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 117D
Signing time: Tue 10 Jun 2025 09:00:57 +0000
Manifest this update: Tue 10 Jun 2025 09:00:57 +0000
Manifest next update: Wed 11 Jun 2025 09:00:57 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: jeCts/Q3QLBMtxlQe3OYdp+3ai/x6Xrf64fQGffsgAE=)
2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:3e:d3:18:56:30:ab:48:56:e6:36:51:96:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Jun 10 09:00:57 2025 GMT
Not After : Jun 11 09:00:57 2025 GMT
Subject: CN=ea85229cfc8f96d469f92098b73073439b75e3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:a2:46:a8:0e:9a:de:bf:96:0e:75:13:09:
0f:14:5d:6f:b8:a4:60:6b:5c:de:74:67:3d:e5:02:
9b:85:f1:a6:a9:0d:be:47:93:fa:39:ec:23:cc:56:
48:3a:79:03:4c:ff:a6:85:df:5b:7a:6d:28:03:e2:
45:9c:2c:83:46:a4:b0:e1:c1:65:6d:6d:6b:f5:93:
2f:4a:32:26:fc:bc:d5:9a:b4:2a:1a:32:3a:9e:9a:
16:ea:01:3c:ed:22:d6:a6:01:22:50:73:c9:b1:d1:
5a:19:eb:80:d9:1f:48:5d:aa:77:57:0a:fe:54:c0:
22:87:1a:42:7e:6b:d7:5b:fb:04:29:ba:76:3b:37:
a2:26:35:53:7d:89:1d:7c:64:12:7f:5f:16:5d:27:
d9:5a:d3:22:f7:fe:12:3a:9b:cf:49:b8:eb:d7:92:
f3:60:4a:4f:a1:d5:31:89:5b:e8:5d:25:f0:fb:4b:
3e:3d:8a:86:30:65:87:bb:07:eb:f6:22:18:8a:47:
62:b4:27:ba:82:ad:51:1f:6c:aa:8c:4d:15:a3:74:
8c:30:6b:b0:04:28:2e:06:21:51:a3:4f:50:15:96:
06:22:9b:49:f7:69:44:3b:0f:ac:72:dc:c0:19:56:
c2:7f:33:cd:0c:f8:83:a0:08:e8:5e:04:5e:0d:48:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:22:9C:FC:8F:96:D4:69:F9:20:98:B7:30:73:43:9B:75:E3:E5
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2c:ac:23:38:fa:85:ec:20:f7:0e:0d:bd:aa:69:6d:9b:49:
de:e9:5c:99:03:d2:c8:61:75:fb:3a:41:c7:cc:0a:b0:33:c4:
e8:91:c8:01:b3:99:cb:b6:33:6f:3b:f7:c1:78:a4:b7:fe:1e:
0b:a3:c7:40:f2:86:18:d4:39:ab:c3:78:f3:8d:90:89:1c:88:
f4:f9:7e:50:20:f3:28:1a:33:f5:44:22:85:4c:b3:4a:e1:8c:
5b:39:34:d6:b9:ea:1e:d8:55:dc:c1:11:e3:70:91:bd:2e:c8:
ef:5d:3d:b3:33:19:7d:1e:06:89:22:94:de:c0:3c:ae:a5:fa:
e1:42:c2:94:03:cd:7f:a2:15:51:b9:c2:5c:65:d6:e9:61:d6:
9d:fb:b8:89:2a:03:8c:ca:e0:c3:e7:11:81:ea:9c:69:a2:81:
f6:33:ac:f7:11:e3:0c:52:6c:04:a5:82:b8:52:02:3c:d0:84:
cb:54:97:5d:85:97:29:d1:b1:93:84:c4:99:de:12:ab:d1:f3:
01:e1:4d:be:e5:4c:87:62:04:8e:ad:aa:a0:a5:db:4b:b6:a1:
56:14:c2:d7:74:fc:02:23:1e:91:0d:2b:28:68:ac:e0:1b:e2:
1f:7e:44:77:cc:98:4e:50:32:5c:69:bc:9e:70:8e:75:38:b5:
55:4e:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:05:03 2025 by rpki-client