Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: uxRSuji42qGI3F6CeQwZawgRqo3XIwpMAFWkFazHbFM=
Subject key identifier: 05:86:42:55:D4:24:C0:C5:9A:60:15:C2:A3:0A:4E:BD:A0:6D:F4:F8
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 0197567EA4C0179C94C5E518D0E544B73CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0649
Signing time: Mon 09 Jun 2025 21:00:29 +0000
Manifest this update: Mon 09 Jun 2025 21:00:29 +0000
Manifest next update: Tue 10 Jun 2025 21:00:29 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: 4R0SNfyuQZfSbFpSMJusFQn3aXqs4+9EHbX5OhLmRDk=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:a4:c0:17:9c:94:c5:e5:18:d0:e5:44:b7:3c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jun 9 21:00:29 2025 GMT
Not After : Jun 10 21:00:29 2025 GMT
Subject: CN=05864255d424c0c59a6015c2a30a4ebda06df4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:cf:2f:55:41:05:64:72:4a:78:b0:3a:c0:
8b:16:6f:35:ab:3f:e1:33:86:62:0c:54:e2:4f:bc:
dd:6d:ea:6f:ed:f6:81:6a:bb:34:3e:b9:bc:1e:3e:
e4:4e:59:76:f4:d0:f8:ba:45:ee:6e:42:bb:4d:9d:
ac:1d:2a:13:d5:d3:8c:a3:e9:78:73:e9:37:36:e9:
b4:50:55:c0:4c:ba:5d:30:4c:b5:d5:d8:8d:6a:e1:
5c:a0:35:9b:a9:55:b7:e0:20:86:b7:1a:7d:2e:bc:
20:b4:15:04:82:46:c7:fe:e1:ad:00:13:dc:c4:c9:
5a:1d:a6:f4:a7:45:3b:a3:53:da:75:29:31:fa:a9:
d4:4e:a5:a8:81:2f:58:67:da:7d:9a:87:22:bf:98:
b7:e1:93:bb:84:5e:6b:d1:ec:95:f8:2a:98:75:4f:
e6:d7:43:50:34:6e:83:4e:2c:a7:80:c4:a2:75:f9:
07:ae:b3:e2:f8:cb:55:70:bd:b3:35:f8:13:b4:34:
1b:23:99:9d:ad:f0:ed:21:49:5a:d6:40:e0:d7:20:
07:b7:c7:a6:80:40:df:70:f7:ec:bb:b8:44:4e:05:
a0:88:bd:5a:ee:d6:a8:ff:2c:5c:2e:8a:98:ae:2d:
06:27:74:5e:67:a5:ee:0c:d8:19:1a:25:96:6d:a1:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:42:55:D4:24:C0:C5:9A:60:15:C2:A3:0A:4E:BD:A0:6D:F4:F8
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d9:0e:74:d6:a4:c8:7b:39:44:08:7c:18:3d:db:17:b0:b4:
06:84:9f:56:6e:3b:62:f3:88:ae:61:1e:0b:d3:5f:e0:61:10:
1d:78:58:f0:13:68:b3:bc:83:34:10:bd:00:82:20:7b:ae:db:
7c:8d:57:7b:64:86:be:da:99:32:91:dc:ab:13:ea:44:9a:0f:
21:d2:97:85:86:d8:73:9f:4b:44:6b:91:e3:1d:c7:aa:4e:56:
79:40:29:4f:cb:54:e7:da:49:a2:cd:ad:24:de:2a:ab:23:c8:
96:39:2f:14:ad:ef:08:30:1d:58:1c:82:21:ae:e1:fd:4b:3c:
37:30:69:2a:e0:09:bb:2a:ba:b0:7d:a5:19:65:5c:04:15:33:
c1:b8:d6:46:31:95:66:0c:d6:4d:3e:7a:ee:ce:80:d6:9b:a3:
ab:7d:c3:30:ad:6f:fb:6e:39:9c:a5:83:cf:e7:1a:d1:1a:15:
4e:db:c8:02:94:ff:49:d9:3d:8d:ae:6a:c6:3e:ed:19:56:5a:
66:48:c2:76:c4:f9:89:e8:0c:4d:26:46:b4:ee:66:a3:b2:35:
d3:08:cf:cc:0b:38:f7:8d:95:ef:5b:19:ca:ea:62:bb:f0:81:
35:a1:ea:5e:8f:55:ff:4d:4e:22:77:6b:b5:85:a8:4d:cf:d3:
72:01:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:41:01 2025 by rpki-client