Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: +832yrlOxlL26n2Yh7NI42An/gywvSO7v7T56EoyRfE=
Subject key identifier: F9:73:51:D0:1B:5D:4E:71:C3:05:56:61:87:64:D3:94:85:5C:80:DA
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 01974A43D8E056F6C6D7FE0FEF72FAC07A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 05A8
Signing time: Sat 07 Jun 2025 12:00:49 +0000
Manifest this update: Sat 07 Jun 2025 12:00:49 +0000
Manifest next update: Sun 08 Jun 2025 12:00:49 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: QxWEmAfS3xmhaEd+q85gs4HaV+RvKshRfDuVGTEekQw=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d8:e0:56:f6:c6:d7:fe:0f:ef:72:fa:c0:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Jun 7 12:00:49 2025 GMT
Not After : Jun 8 12:00:49 2025 GMT
Subject: CN=f97351d01b5d4e71c30556618764d394855c80da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cd:96:0c:8f:f9:6a:5c:28:15:21:8d:e6:c0:
59:db:e8:8d:a4:54:d4:ce:9a:63:7c:f6:db:17:c5:
f3:e9:51:c3:f9:19:f1:b8:33:e0:f8:bb:4e:1f:2c:
50:4a:2a:3f:29:b1:b1:ae:f4:5c:90:7d:c5:60:be:
12:6a:c5:8d:f3:49:3c:db:2b:4a:18:1e:4b:b2:11:
f3:da:b7:4b:da:fb:46:27:95:26:54:ac:8b:85:3d:
cf:15:95:b2:a1:ef:04:d1:f9:ae:9c:13:9f:6e:4e:
97:37:fe:cb:31:02:a2:42:5d:c0:fb:72:aa:2b:86:
a0:7d:d2:f9:b1:e3:1b:31:11:b7:ef:4b:3a:ee:78:
7b:51:22:d7:94:97:e8:4d:74:bc:5a:b4:57:df:56:
bb:a7:0e:97:52:13:55:3c:a9:b1:a8:97:36:5f:ea:
90:ab:fe:79:45:7e:c3:22:08:1d:a8:79:01:28:e5:
bd:3c:30:ea:96:4f:c0:ab:22:47:d6:52:b2:ae:5b:
2a:aa:1a:87:76:e7:2a:25:e6:ce:e5:c8:3e:ac:a1:
b5:4b:2e:0d:ab:15:38:e8:0f:3c:52:54:c9:d0:5a:
ef:0e:7f:29:97:64:26:82:50:a7:71:f5:90:7d:be:
8b:6d:35:28:95:90:5d:cd:fa:cd:79:f9:d6:72:6a:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:51:D0:1B:5D:4E:71:C3:05:56:61:87:64:D3:94:85:5C:80:DA
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:64:bd:15:d6:61:f9:33:9f:c7:ec:44:ca:1f:32:37:00:
be:1f:5f:64:ec:93:83:70:41:31:df:0c:d0:4b:a5:ba:2c:8c:
81:b2:19:f2:4a:5d:57:e2:29:40:86:79:fa:45:24:0e:d5:c8:
4a:db:4e:f2:17:66:11:09:fb:6c:53:7c:67:f5:4b:ed:90:ff:
82:a5:1c:cb:7e:61:a1:65:1a:c4:99:0b:c4:ca:60:67:76:88:
60:42:b6:b1:05:65:44:59:9b:8d:be:21:ca:0d:84:a6:cf:1d:
b7:9b:c0:3e:71:6a:c7:3b:27:20:cb:f4:e2:cd:87:0f:10:c0:
0f:6e:2f:0f:fa:59:49:3a:64:d4:1a:ad:84:9e:71:07:e5:e6:
78:a0:65:b7:b1:62:f2:4d:d2:aa:da:d1:91:68:7a:7e:22:55:
84:2f:47:aa:59:9f:8d:a9:9e:4d:05:f0:03:9d:86:01:42:2d:
b5:8b:16:e8:ca:36:cc:dd:8b:11:09:d4:e3:7b:6e:21:c4:3d:
6f:3b:74:a3:8f:ea:90:17:ae:0e:02:1d:6d:60:53:22:f9:03:
60:86:2b:e7:68:41:99:42:15:04:f5:c1:5c:a1:32:3f:f2:b0:
f9:9a:ba:85:36:e2:43:2f:51:e5:5d:9c:24:08:06:59:38:96:
2c:1a:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:43 2025 by rpki-client