Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: GKlsbo+nXAvsCMpdjaLEbG5MD7SgBtzXdw0r451tP+o=
Subject key identifier: 37:B6:BB:A1:64:30:E7:0D:6A:15:8B:AC:98:E2:68:A6:CB:3F:0C:F4
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 01974B8DA870BE8029D7E8D9A93DED0D87E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 0E2F
Signing time: Sat 07 Jun 2025 18:01:04 +0000
Manifest this update: Sat 07 Jun 2025 18:01:04 +0000
Manifest next update: Sun 08 Jun 2025 18:01:04 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: yuqdvRa8msZ94WLUJzYGRzGtvMnVaKqPbPoFxPne/y0=)
2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:a8:70:be:80:29:d7:e8:d9:a9:3d:ed:0d:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Jun 7 18:01:04 2025 GMT
Not After : Jun 8 18:01:04 2025 GMT
Subject: CN=37b6bba16430e70d6a158bac98e268a6cb3f0cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:d7:7e:1d:28:d5:f0:05:9a:8a:71:d1:fc:
c4:fb:ab:0c:db:b9:9d:a6:b0:cd:fa:98:6b:65:64:
d6:29:6c:db:a2:7e:3c:d8:7f:8c:f0:97:b8:20:4e:
f5:b6:de:07:29:52:b3:98:af:e7:80:52:0d:56:3d:
5e:81:cb:cc:92:8d:d4:72:32:80:8c:15:cb:be:32:
43:bc:32:ac:2b:61:eb:34:07:dd:47:f2:56:47:80:
9c:82:80:01:e3:74:15:30:8d:51:14:a0:f5:23:48:
9e:65:84:87:16:4d:40:45:71:30:e2:5f:d3:11:06:
35:8e:50:f7:19:5d:52:74:ae:69:cd:c6:84:e6:ca:
e8:d0:a5:05:f2:d5:60:8b:c8:a0:4f:e9:49:a6:2a:
b4:09:d8:b4:ce:2e:00:2e:32:4a:75:70:45:66:39:
da:47:c0:05:32:f6:a7:3d:97:23:28:81:b2:6b:10:
de:42:c5:71:d2:f7:d1:73:1c:14:bd:7f:15:a2:75:
1b:2d:c7:50:15:45:3b:79:f3:3a:fe:28:be:42:9f:
0c:30:79:19:8c:69:ec:4f:7d:6b:fb:98:5c:d3:d1:
1e:3c:03:19:fd:10:a5:a6:b1:c2:e4:33:be:fa:7e:
ad:6c:27:6a:24:91:44:fd:92:0a:14:c5:de:f8:35:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:BB:A1:64:30:E7:0D:6A:15:8B:AC:98:E2:68:A6:CB:3F:0C:F4
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:28:9e:66:ce:d0:ce:d4:96:3f:4e:c9:d7:6a:5e:74:99:
c7:72:45:76:e3:08:ad:48:14:6b:b3:12:2b:79:bf:b3:f6:1c:
e7:15:96:dd:65:ce:a4:2c:3b:e1:0c:9c:1b:b6:c7:ed:44:f4:
38:07:f0:50:59:1d:8b:dc:ad:e8:c6:3e:44:68:92:d6:b2:6f:
4a:6d:80:ab:59:77:90:15:17:d3:55:92:fe:01:02:6d:8c:9a:
71:db:87:0e:bc:98:e1:1d:9b:be:76:1e:61:d5:c3:29:9b:5a:
c1:0a:3b:4f:7f:b3:12:25:b7:1a:c8:a3:85:79:f8:f7:2c:4f:
86:81:d0:d7:f7:ad:57:9e:dc:f2:bf:cd:e0:18:ed:62:f1:ba:
58:89:06:da:f3:c9:e4:96:84:a8:17:b1:87:e4:60:ed:1e:31:
48:66:4c:5a:26:71:e4:a1:cc:44:fb:4a:bf:fe:69:ec:bf:21:
be:e6:e4:08:05:15:68:95:68:67:5f:0f:e1:44:f8:ab:c3:ce:
18:bd:39:21:7e:df:9c:12:f3:c5:3e:ee:37:50:21:e9:09:f4:
e7:cf:cf:cf:b8:cd:28:6a:43:4f:68:8e:9a:32:53:4e:bc:96:
e7:ca:b8:ef:ed:7b:b7:f5:78:0e:ce:a3:89:88:bc:17:30:b5:
25:26:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:28:21 2025 by rpki-client