Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: gji4PqZ+X/U1fFnodgZpo1PEQ09NVqIFfa+inPhkbqM=
Subject key identifier: B0:C3:9A:A7:D5:94:58:22:22:F9:B3:6F:27:59:E2:DA:67:D5:0A:4D
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 01974F6A2773530C27712C468C3C7F73D3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 1254
Signing time: Sun 08 Jun 2025 12:00:46 +0000
Manifest this update: Sun 08 Jun 2025 12:00:46 +0000
Manifest next update: Mon 09 Jun 2025 12:00:46 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: 5Z/Uqw7M87mP3H3lwkYTrMQVXPN5QA9XW4VqCG84t4M=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:27:73:53:0c:27:71:2c:46:8c:3c:7f:73:d3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Jun 8 12:00:46 2025 GMT
Not After : Jun 9 12:00:46 2025 GMT
Subject: CN=b0c39aa7d594582222f9b36f2759e2da67d50a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:9a:8c:79:e5:98:be:3b:63:25:f0:59:dc:
d7:03:ee:66:34:d2:3d:93:24:a7:37:02:dd:b6:13:
20:3b:5f:e0:94:30:3c:43:e9:00:7d:cc:be:b6:f0:
a2:9a:02:12:58:85:27:93:18:5b:73:fa:80:b7:d6:
c4:3f:84:ad:b6:f3:a4:d2:ad:28:db:60:d0:06:d2:
00:29:fb:fb:77:ee:cf:19:20:c0:05:dc:12:ba:e9:
a9:2f:ff:48:31:c7:48:63:cc:4d:03:2c:30:33:5e:
c7:40:56:be:f9:b7:6b:c9:dd:9f:ba:9d:53:b4:54:
84:4d:4c:9c:42:68:fb:bc:97:41:96:cd:94:d4:32:
ee:d0:c4:6f:00:17:7c:c9:1e:9c:91:cc:a2:a6:be:
62:7f:d8:70:66:6c:72:7d:da:d5:5d:77:b0:8a:7d:
2b:ef:14:27:2e:ed:55:a0:fd:f6:c5:6c:a9:24:32:
2d:cf:23:eb:35:3e:4c:7f:d4:e0:cd:ec:95:48:8a:
6e:6b:f3:ed:01:b3:f8:7b:88:46:6a:2d:23:d0:f3:
df:96:41:46:f5:0b:2f:06:f2:1e:18:1b:ed:94:38:
30:ac:3f:85:ba:d3:38:b8:79:49:40:44:bd:38:29:
af:3a:db:ac:2e:7b:12:59:95:66:05:63:85:19:dd:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:9A:A7:D5:94:58:22:22:F9:B3:6F:27:59:E2:DA:67:D5:0A:4D
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:1b:04:20:04:fc:2a:3b:1b:ff:28:08:5f:dc:65:bc:ed:
90:1e:84:ea:e0:71:6d:35:f9:66:fa:2d:57:c4:96:ef:69:ed:
ce:68:61:c8:a1:af:85:c7:12:e2:65:50:87:bf:75:24:24:d9:
1a:c9:60:a7:02:85:63:ea:41:65:58:4c:7e:4d:59:2c:6a:11:
03:4c:59:27:27:0f:6d:57:88:7b:92:24:24:9b:1a:df:fe:2c:
0e:f4:16:02:b4:a1:07:7e:6a:11:70:db:21:82:c7:92:c5:90:
a3:e3:7b:35:06:d1:8d:8c:08:0a:d3:7d:c8:ec:b8:fa:95:55:
5c:e1:96:4f:b9:e1:aa:b5:7b:03:f8:7d:b9:a5:77:98:98:8f:
c5:76:d6:7c:3c:e9:6b:ef:3a:bb:da:be:ca:9d:47:c2:02:a1:
f7:f7:6a:95:3d:b8:e4:4f:39:ba:55:1f:fc:f7:b0:70:57:83:
19:e9:48:2c:08:74:43:28:d4:35:6d:48:4e:2b:da:a1:06:2b:
e2:d5:c0:2a:b8:7d:aa:43:39:72:06:48:cf:7b:9f:fb:96:40:
fa:fd:b2:fd:e2:bb:a4:4c:29:d6:5a:85:b7:9d:19:23:e3:db:
d2:19:5b:26:c6:51:64:cf:7e:24:04:28:52:e3:95:08:78:87:
fb:12:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:45:36 2025 by rpki-client