Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File: E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier: 79FL+3KFfF5o4pjK6s7Gup7irnzK1DT47PV83befoQ4=
Subject key identifier: 4F:9C:12:DB:FA:61:75:F4:F3:BA:AC:81:79:D7:39:9C:08:CB:65:9A
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 01974742776F203AC08BEC673D4EEB6E141A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number: 04A4
Signing time: Fri 06 Jun 2025 22:00:27 +0000
Manifest this update: Fri 06 Jun 2025 22:00:27 +0000
Manifest next update: Sat 07 Jun 2025 22:00:27 +0000
Files and hashes: 1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: ca1444UGpmKje0IvHQ8QF4Lwg7zzaAHcLbRGToJplPU=)
2: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (hash: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=)
3: zStWlFKn8ajT-k4L_oV1Ttw-akk.roa (hash: XiRaOikrwOz45cDAwYif8C491fxrqYPE1ziMmxijlPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:77:6f:20:3a:c0:8b:ec:67:3d:4e:eb:6e:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jun 6 22:00:27 2025 GMT
Not After : Jun 7 22:00:27 2025 GMT
Subject: CN=4f9c12dbfa6175f4f3baac8179d7399c08cb659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:39:48:43:c5:93:c6:aa:d0:ad:f8:63:ed:
28:ac:c6:19:6b:44:fd:43:1c:eb:3a:16:66:20:5b:
ed:a3:51:45:a8:c5:60:07:a2:24:fb:c4:71:d7:03:
e6:29:c3:d1:fc:7a:06:a5:86:72:f5:c7:dc:91:fd:
5b:f9:ec:db:48:57:0c:61:44:54:f0:1f:8c:56:47:
25:25:24:eb:bd:31:89:6b:6a:73:de:fc:57:c0:0c:
7c:d1:1b:ff:c4:c8:77:ce:85:40:af:b5:2f:83:35:
ff:e7:39:ea:69:61:57:b0:9a:3e:43:ee:52:d5:7f:
08:be:68:80:ab:4c:ef:00:c7:00:8e:28:ac:a3:a5:
dc:27:c6:41:a7:d2:33:80:eb:93:d2:ce:6c:56:ae:
1e:b2:de:b3:73:71:21:f5:80:2a:97:35:72:51:61:
65:bf:72:87:bb:df:54:a4:f0:ff:95:7f:3a:63:ad:
49:13:54:9e:0f:86:73:ab:48:bb:2a:19:40:40:72:
fc:16:c7:56:bb:46:1c:26:c1:9b:ec:63:cd:65:f7:
ef:19:53:f0:51:d6:6e:05:24:38:b5:9d:78:14:03:
9a:fa:5c:36:69:78:d3:98:aa:1d:1b:c8:bf:9e:de:
45:5b:24:44:84:ac:9c:f2:04:f3:71:76:c0:08:88:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:12:DB:FA:61:75:F4:F3:BA:AC:81:79:D7:39:9C:08:CB:65:9A
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d9:0a:e3:4c:9d:9f:16:f8:1c:c2:44:76:c4:19:19:35:b2:
16:62:70:d9:4b:42:c4:97:cc:90:d7:3f:74:b1:36:e6:5e:a6:
6f:44:2a:2b:cd:d3:43:11:1b:0e:81:5c:d1:6d:e0:40:42:a7:
b9:e7:87:99:2f:57:69:f7:3c:07:1d:fe:43:ea:37:6d:8a:b3:
88:c7:70:6a:b6:d3:46:fe:89:36:4c:88:76:0c:53:62:ed:d7:
c2:ab:e6:34:af:50:91:a2:4c:1a:54:6e:76:9f:26:99:fb:a5:
e1:86:90:78:43:13:9b:9b:40:cc:90:ec:ee:c9:67:83:48:c6:
29:2a:7f:e4:29:00:ea:4e:68:7c:d6:ee:ae:33:77:43:eb:ca:
d5:5f:a8:be:2d:88:4a:56:63:82:1b:54:d9:5b:80:bb:0e:64:
5c:a2:76:7a:e1:0d:c5:77:35:be:4c:32:06:f8:c3:d0:03:da:
50:53:6f:01:49:5e:f3:c9:93:71:da:e9:4c:f8:d8:7e:56:42:
5e:ae:f5:0c:f0:93:3c:16:48:8c:a4:6b:f9:40:7a:1a:60:74:
10:aa:4c:38:b3:5e:b0:4b:df:84:b3:d1:ac:c0:e1:59:25:0a:
59:0e:43:5b:35:dc:08:ab:40:c2:1c:91:39:4c:32:4c:a9:1e:
f9:cc:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:44 2025 by rpki-client