Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: 1EfQGOxy/e0XIlyW/zSuC4hHsM2MBrPX9Ea6ABXaOX0=
Subject key identifier: A6:39:F4:5C:99:95:C0:B5:66:D5:1E:4A:5F:3B:D8:FF:D9:2B:F7:05
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 01974968105A2E796570F1A283A34CAB2CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 14D0
Signing time: Sat 07 Jun 2025 08:00:46 +0000
Manifest this update: Sat 07 Jun 2025 08:00:46 +0000
Manifest next update: Sun 08 Jun 2025 08:00:46 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: kF+NvuWJ91tixbIW4aIWyoNEpoqosySSmmwQrojg7Ro=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:10:5a:2e:79:65:70:f1:a2:83:a3:4c:ab:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Jun 7 08:00:46 2025 GMT
Not After : Jun 8 08:00:46 2025 GMT
Subject: CN=a639f45c9995c0b566d51e4a5f3bd8ffd92bf705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:7d:7c:12:67:48:2a:f0:2c:46:1b:f6:4e:
a6:43:64:8e:3a:2e:ac:ed:44:70:75:00:af:c0:87:
e2:9d:b1:ef:a4:0a:c1:05:61:f2:ec:9b:8a:b6:7c:
5e:5f:b0:d4:3b:92:88:48:de:b4:c3:d6:17:d6:99:
b5:91:18:f9:29:0c:5e:a8:48:2a:11:64:3d:a0:39:
73:0e:36:a1:33:3c:f8:57:15:5c:27:96:ec:79:db:
8f:57:29:9d:2b:75:43:60:0a:a5:18:f3:55:a0:25:
d7:fe:bf:ac:84:c0:79:e4:fd:a8:71:fe:78:4b:b2:
ad:a9:ba:16:b3:77:db:44:6c:01:3e:e0:fd:61:52:
58:b5:e7:92:c7:59:35:5a:8e:f9:fe:2f:ce:4b:b2:
d8:2d:e1:6a:08:2e:57:1f:36:e6:62:23:54:c1:63:
13:c8:c6:fd:b3:94:64:7a:24:89:b2:8b:0e:03:19:
96:ea:9a:f9:15:92:fa:23:20:db:fa:63:9b:fb:94:
52:08:7c:0a:e7:c2:f6:e8:f4:bd:59:02:67:4b:e0:
99:45:ce:d0:85:2b:b5:c6:fe:b9:44:1f:ac:ea:19:
cc:97:64:f8:8e:ba:16:0a:c2:17:59:69:d7:af:6e:
eb:f5:75:d3:06:c9:f1:57:7b:42:e8:50:e2:cb:f4:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:F4:5C:99:95:C0:B5:66:D5:1E:4A:5F:3B:D8:FF:D9:2B:F7:05
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0b:75:34:45:be:ce:d3:a0:cc:b5:1d:3f:57:fa:c6:7b:42:
83:41:c4:15:ec:25:2f:39:47:a5:8b:47:22:4c:bf:de:b1:76:
31:2f:6c:5b:12:44:80:35:26:30:64:e0:11:52:d7:68:75:8b:
fc:26:b9:20:8e:e5:68:c9:60:40:5e:83:7c:15:76:70:5e:58:
87:d7:cd:22:37:37:8a:47:b1:46:04:cd:46:0c:48:ce:b3:1e:
8c:cd:03:2a:a4:70:19:05:89:5c:5a:26:1f:dc:e4:20:a7:1a:
70:d4:cc:74:79:81:71:13:8e:d0:08:48:11:0a:d3:cc:04:00:
f1:38:c4:e9:2d:dc:5b:18:67:a3:3d:af:92:10:61:d6:99:9a:
1c:17:39:5a:0f:96:c0:f3:f1:dd:56:72:e8:7f:ac:59:fe:b1:
85:10:47:9e:89:19:5e:a8:ff:72:e1:7a:8a:36:48:e9:4c:6c:
af:41:30:0a:7b:d0:24:e7:6e:c6:dd:49:91:39:53:69:51:25:
26:99:87:f3:88:a8:6b:1a:ee:1f:3f:67:0c:2a:7d:ad:b9:ff:
3d:ea:a5:e9:b5:1e:e2:59:51:a8:da:f7:f4:17:1d:06:50:a8:
3d:d5:32:26:40:90:61:01:a2:e3:9d:c6:d5:9d:c3:ed:24:5e:
b0:b0:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:22 2025 by rpki-client