Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: bJW1PdwMU2RyGwhJZO/Li+CVxZ9PTVxIN39p9zKk/VI=
Subject key identifier: D8:85:68:8F:13:2D:AB:EE:92:91:75:A9:22:82:59:2F:C4:ED:81:D2
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019747E7A77A0ACE5ECDD50E3432752FFDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 1289
Signing time: Sat 07 Jun 2025 01:00:53 +0000
Manifest this update: Sat 07 Jun 2025 01:00:53 +0000
Manifest next update: Sun 08 Jun 2025 01:00:53 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: 3B7jQpdjbqJPNF/tWoHEvg+j5XVS5QmmDwbnH4YSd4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:a7:7a:0a:ce:5e:cd:d5:0e:34:32:75:2f:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Jun 7 01:00:53 2025 GMT
Not After : Jun 8 01:00:53 2025 GMT
Subject: CN=d885688f132dabee929175a92282592fc4ed81d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:48:9e:96:5d:eb:cd:29:ca:2d:8f:8b:f7:
b9:69:a6:e6:dd:31:48:17:a6:f2:1a:3b:4f:b3:e3:
d3:f8:31:18:6a:00:03:68:a9:99:d5:fa:65:05:fa:
ad:a1:4a:09:d6:02:74:99:9f:e7:23:6e:b3:78:ab:
c4:9c:c1:f4:d0:39:e4:07:d8:8c:1a:33:38:91:13:
01:dd:51:fd:52:25:73:b6:66:13:66:22:e3:aa:ab:
07:44:c7:53:9e:f5:71:46:23:19:e4:78:3c:15:a4:
16:02:ff:5e:ce:3d:b2:d1:fe:d8:c2:eb:43:a7:41:
dd:bc:ff:8d:30:d8:ef:2f:92:e8:fa:3e:47:bb:e8:
90:69:a3:95:27:78:8b:8b:50:26:0d:32:91:38:df:
7e:db:a8:1a:80:da:3f:d0:92:0d:b6:56:0d:d2:47:
04:f0:ac:c5:3d:51:fa:89:ae:b8:fa:a7:97:d2:cb:
22:ef:be:8b:65:75:a3:90:7c:4b:53:85:27:34:71:
6b:e2:86:91:09:06:aa:ea:2c:3d:c2:da:70:16:40:
a2:25:b4:d8:92:7f:9f:2d:51:98:84:81:78:92:d2:
11:a0:7d:79:40:7f:dd:24:1b:9b:7a:ac:66:ec:bd:
9e:b6:6f:b5:60:87:de:64:e9:23:bb:47:de:35:6a:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:68:8F:13:2D:AB:EE:92:91:75:A9:22:82:59:2F:C4:ED:81:D2
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5c:ea:9a:34:53:c6:76:51:ca:29:6e:3d:52:5f:7e:7a:97:
8e:87:b4:46:a2:9a:39:8f:27:a5:ef:3f:ca:4b:91:5a:2f:e6:
ae:06:56:49:cd:9e:f1:d6:c0:e2:43:b8:26:4c:8d:f4:f4:26:
93:19:28:04:95:13:f5:5a:70:ba:cd:57:df:ee:25:65:fd:39:
d0:7b:d5:26:f6:ef:2b:8e:85:5a:b1:fc:71:f0:5d:81:8f:72:
2e:86:c7:12:9c:43:c6:b2:69:8d:57:a4:81:6d:e0:f4:39:eb:
c6:5e:c2:82:56:ac:d8:3e:84:f2:c9:f9:b6:c8:c6:fd:2a:d1:
2c:30:40:cf:46:dd:22:30:66:a7:8a:54:58:d6:83:63:67:5c:
68:75:c4:c2:cf:83:be:f2:11:39:b5:93:3c:e3:da:90:d8:e1:
78:c5:98:60:41:8e:fc:e4:30:16:ed:ee:9d:30:3c:e4:39:8c:
c2:46:e3:90:87:5a:a7:96:9b:00:d6:7a:27:97:13:b1:2e:39:
be:2d:b1:d2:29:16:5d:57:32:fc:6c:26:96:cb:18:e5:55:e7:
4d:ea:37:89:fe:b6:20:9a:51:83:86:98:3a:fa:17:bc:b5:e6:
d0:61:da:a0:79:7c:ea:a1:27:ec:b0:82:83:ff:44:a4:5b:52:
60:75:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:00 2025 by rpki-client