Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: /9CIbKpe6H8Yl9gu+9oUrKiChAc3bX+zFbCf7AfuPsE=
Subject key identifier: 3C:F4:D7:E4:2B:19:17:9E:D6:FD:22:C2:EB:37:73:02:4E:60:2A:20
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0197470BA0DF8D022E033DAA158425B01891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0F39
Signing time: Fri 06 Jun 2025 21:00:33 +0000
Manifest this update: Fri 06 Jun 2025 21:00:33 +0000
Manifest next update: Sat 07 Jun 2025 21:00:33 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: 1quGP4XgWCi9bqObdo/EUb7HXBq2F/b1wlwNGA2agBE=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:a0:df:8d:02:2e:03:3d:aa:15:84:25:b0:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jun 6 21:00:33 2025 GMT
Not After : Jun 7 21:00:33 2025 GMT
Subject: CN=3cf4d7e42b19179ed6fd22c2eb3773024e602a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:84:fa:ed:04:a2:8e:c8:79:ae:99:87:10:
64:73:37:b7:2e:7b:56:96:5c:68:11:5d:49:97:d6:
fb:ab:21:06:cd:c9:fd:66:6a:3f:e5:d8:e9:9c:75:
d1:70:cc:f6:d6:59:c6:0c:80:3f:01:30:15:4d:c3:
f9:9a:3d:9d:2a:de:9d:37:e6:35:29:8d:64:17:59:
18:bb:33:c5:a5:dd:2d:73:ea:b6:fd:8e:4d:57:d4:
a1:a1:d2:21:9b:cd:c9:a3:bf:8a:53:ca:cb:8d:00:
82:0f:23:1d:e8:31:8a:df:8b:00:8e:e1:4c:a4:60:
d6:97:8a:99:71:05:e0:ba:0b:dc:9a:28:c0:bd:e6:
88:fc:90:7c:c4:fe:31:fc:b0:37:d4:7b:9b:0d:05:
05:f0:cf:80:81:5a:17:10:c6:92:9c:06:e6:19:19:
54:9c:70:a4:f1:75:51:9d:7f:20:0c:d2:2e:89:ae:
61:03:cb:29:88:67:34:70:6c:fa:d1:2e:d1:82:a1:
c5:46:87:5a:1e:fb:7e:6f:fb:48:f3:ab:90:83:53:
29:94:a3:09:c5:f3:b4:ae:40:38:90:9e:63:c7:53:
3a:f1:bf:07:a7:98:04:e4:99:73:af:2c:1f:35:ff:
20:05:ec:84:2e:9c:41:1d:a5:b1:8f:f6:4d:ce:8a:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:D7:E4:2B:19:17:9E:D6:FD:22:C2:EB:37:73:02:4E:60:2A:20
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:be:83:22:9c:22:85:6b:ab:7a:f9:30:08:4a:e7:ba:55:
ee:02:03:34:b1:d0:fd:ba:6f:de:e0:d7:86:86:f9:3b:88:b4:
84:1a:62:02:d4:05:60:22:60:07:68:45:5e:e4:5b:33:c9:55:
cf:1e:a6:58:d9:43:8c:80:56:8d:6f:5a:1b:10:c5:99:27:6b:
4b:f2:bb:8b:11:cb:6e:37:1b:6f:58:29:e4:3e:38:0f:e4:07:
ed:4d:f2:ae:cf:50:11:19:ff:55:54:42:26:72:0a:52:30:7c:
da:95:72:46:4f:d1:e8:18:81:92:f9:c1:ec:33:80:80:b0:ff:
44:54:77:93:67:08:a8:7d:52:69:48:dd:ba:95:8f:f2:1d:fa:
27:a2:ec:35:64:af:d5:c2:5e:3b:54:fe:03:ec:bb:d7:9b:99:
de:56:63:5d:01:3e:01:74:6c:74:9e:22:e5:f0:b0:71:2f:f7:
11:cf:3f:e9:f8:15:9e:a8:ee:de:eb:43:78:67:eb:a2:7c:ce:
f5:ab:ca:3a:07:fe:48:cc:15:cd:7b:9e:ad:c9:5d:48:83:f6:
e4:63:df:c1:86:1c:4f:b0:dd:f3:85:d9:c1:7c:e9:ef:dd:54:
66:00:83:d7:aa:27:85:c2:58:b2:d7:ee:3d:0b:f9:c4:a4:46:
ed:f7:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:13 2025 by rpki-client