Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: LnWpsdXb/vhfufhYXm3K2kk8EmpG7U4E8VYb9eG1t10=
Subject key identifier: 54:34:AD:A1:4B:16:96:90:C4:50:3A:A0:A7:3B:79:10:30:48:5B:B4
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 01975D93447BFEC17CE1BDA655D7B9E479D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 068F
Signing time: Wed 11 Jun 2025 06:00:21 +0000
Manifest this update: Wed 11 Jun 2025 06:00:21 +0000
Manifest next update: Thu 12 Jun 2025 06:00:21 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: MDCbJVkgmry0kel1pPyDUUo+5wYI2fKMS0lX5FRmk3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:44:7b:fe:c1:7c:e1:bd:a6:55:d7:b9:e4:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jun 11 06:00:21 2025 GMT
Not After : Jun 12 06:00:21 2025 GMT
Subject: CN=5434ada14b169690c4503aa0a73b791030485bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:19:18:8c:cf:c7:42:b9:48:be:38:93:24:
1c:9d:ab:02:bd:9c:53:1d:84:a7:49:c7:ae:ae:92:
86:da:07:b2:9a:89:fa:ed:57:e7:f0:91:8e:a5:69:
2c:7e:9a:3d:ed:4c:62:82:7a:8f:9e:93:0c:0a:27:
1f:83:a2:18:2a:5e:9f:e4:2c:9a:6b:0d:ca:fe:bc:
e3:1e:95:26:03:3a:4f:a9:61:85:27:fc:bb:52:67:
0d:84:1f:94:77:62:eb:c2:5f:49:ef:b1:69:d4:5e:
11:f4:5b:90:22:dc:cc:c4:dd:80:cb:79:5f:c5:87:
92:e4:dc:66:b0:d1:64:f1:23:d2:8c:23:64:9e:62:
0e:f2:39:06:bb:bb:55:08:3a:60:93:c7:33:ba:56:
b1:b1:ff:72:99:6b:2a:1d:3c:a0:a7:77:74:35:cc:
2e:c4:a9:4f:86:a8:03:f4:c4:ad:57:a8:09:eb:57:
07:88:83:b7:ff:44:f3:7b:d4:ae:c8:e7:97:f5:18:
91:ca:70:62:40:ad:7e:46:51:d0:47:bd:1f:60:b0:
35:fb:0c:8d:20:d1:b0:de:f8:76:03:03:3b:32:05:
ac:71:3b:ab:4e:e6:6a:d0:c4:69:c7:43:3a:ce:d9:
be:06:aa:82:3f:a7:16:1d:43:57:e1:44:05:ad:bf:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:AD:A1:4B:16:96:90:C4:50:3A:A0:A7:3B:79:10:30:48:5B:B4
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8b:5f:4d:bf:27:bb:81:f7:ec:9a:37:cb:b4:e9:7d:72:e5:
ed:2b:c4:ec:f4:e3:bb:05:53:0b:5e:4c:77:d7:73:8f:3e:6e:
90:91:91:9a:40:38:77:31:1c:e2:e7:99:22:01:31:eb:c9:35:
1a:5d:4a:91:25:6b:a0:db:b3:83:e1:d6:67:ae:71:e0:a4:c1:
a8:7d:4f:07:82:c9:80:48:34:78:a3:41:b0:6a:44:e5:12:48:
c3:07:4e:8c:a1:7a:f6:c5:b3:ab:53:61:5c:51:e9:85:0f:87:
e7:ca:7b:d8:3c:a7:3b:23:94:46:d6:1f:82:f8:54:ff:3b:6a:
f5:9c:f9:ee:03:27:c9:ff:e9:8c:2b:01:ed:2a:94:07:e7:9b:
fa:68:71:a6:c4:cd:c7:eb:2c:3d:be:2c:87:11:ff:9e:7b:39:
63:c3:26:e4:da:ec:fd:5b:eb:22:ef:03:20:51:84:7a:ac:9f:
0a:27:c3:16:0b:bc:b1:4a:6b:95:b5:ab:1b:a9:e8:5b:3a:f2:
00:d8:e7:8c:8e:16:6d:5d:1d:63:d0:9a:9d:df:d7:2f:20:18:
b7:eb:a3:35:04:c4:d0:70:8b:cf:13:1e:37:d3:23:b5:94:d9:
97:1c:e3:a7:7c:2f:c4:7b:58:c9:05:30:46:53:a3:56:25:5d:
36:0f:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:26:29 2025 by rpki-client