Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: Zsnu86gDbmVoaCPwKodYoUddtSXkKdOLfZAM29BAaq0=
Subject key identifier: 02:61:8C:8A:D0:BE:A0:8D:F9:A7:DA:4E:7D:08:EA:43:4B:8D:B8:79
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 0197586D896FEA9E77871C1C04B9EE3A0ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 064A
Signing time: Tue 10 Jun 2025 06:01:02 +0000
Manifest this update: Tue 10 Jun 2025 06:01:02 +0000
Manifest next update: Wed 11 Jun 2025 06:01:02 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: WobYb4JMH58cuEYhcYpEmtrm/87XY5DvRckTHyZMZxE=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:89:6f:ea:9e:77:87:1c:1c:04:b9:ee:3a:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jun 10 06:01:02 2025 GMT
Not After : Jun 11 06:01:02 2025 GMT
Subject: CN=02618c8ad0bea08df9a7da4e7d08ea434b8db879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:21:84:e2:14:0f:da:3c:73:35:e7:7d:fe:
da:6b:f7:43:66:a3:ea:4b:9e:0e:41:7a:b9:9f:e4:
b2:b7:47:ff:b0:00:fd:a5:4d:d0:2c:ee:80:ae:88:
d0:1f:a6:88:66:ca:88:33:e6:fb:de:8e:fd:f0:dd:
93:42:49:24:4b:fd:ed:2b:cb:2e:cf:a5:85:d7:73:
cf:db:7c:c9:42:c6:06:b1:9a:1d:23:8c:ba:d8:13:
16:62:54:cf:13:c5:4f:6f:aa:06:6b:0f:da:93:9b:
bb:b3:c0:25:e6:e8:d6:cd:e7:86:83:27:23:71:c8:
b5:d1:72:08:b6:79:5d:20:50:c5:3a:ea:aa:29:9c:
85:f0:ab:c1:83:e9:07:ca:c5:40:18:8b:ce:7d:b6:
1b:84:41:b8:79:18:cf:95:69:10:25:e6:44:5b:02:
3c:5b:95:8a:a5:52:58:ee:13:e5:55:76:99:97:40:
35:ff:b0:12:06:09:d8:5f:6f:30:ce:b6:e8:3e:47:
1a:05:a5:a3:0f:6a:c2:97:53:42:17:36:12:00:dc:
d8:99:8d:2b:64:23:89:9c:e7:ba:66:cf:4c:00:c9:
92:07:c6:4e:be:e8:e1:3f:dd:b7:ca:77:2b:d6:87:
07:d6:6c:52:77:0b:1b:c2:62:81:9d:05:96:21:68:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:8C:8A:D0:BE:A0:8D:F9:A7:DA:4E:7D:08:EA:43:4B:8D:B8:79
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:ad:75:a0:35:bb:fe:ac:48:47:5f:2c:05:b1:1d:ef:f9:
e1:a4:10:43:73:3a:fe:68:24:29:aa:36:8a:f7:18:4a:59:5e:
d5:de:a9:42:82:6c:a8:5d:86:8c:0d:67:45:b6:26:f4:7f:0c:
a4:49:a1:e9:ff:93:bc:1e:70:45:14:a6:55:4d:c3:27:4a:ff:
92:38:14:cd:b2:fe:16:e5:55:0e:25:4e:19:40:87:69:6d:5b:
3f:09:2f:d1:ab:93:5b:cf:65:78:5c:67:48:0c:b8:e0:f5:ec:
b4:cd:8f:2b:76:19:ec:44:7b:84:d6:7e:8f:41:56:76:36:68:
d9:cf:49:49:df:e0:b7:00:54:3b:d4:e7:6c:99:9d:cf:1d:bc:
9d:9b:0f:42:00:d5:f5:f9:15:e4:9f:6f:48:88:b3:63:4e:79:
41:bc:94:3f:de:37:6f:43:d1:90:b3:6a:3d:9a:d0:02:a7:56:
81:be:e5:f3:cf:72:cd:c1:68:ad:e7:b5:3e:5c:90:be:04:49:
10:42:03:76:e5:37:fb:49:55:3b:f9:72:a0:61:f5:ec:b4:5d:
98:55:a6:fe:ca:df:89:60:f2:3e:ac:29:07:ce:af:cd:5a:75:
8a:cb:e6:c1:ff:15:cb:d2:5a:86:ad:e2:b2:17:4e:92:bb:c2:
5e:4f:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:53:15 2025 by rpki-client