Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: wy5znEwR/XhoCWDoQkfb6Xu9V6EI6elM2gFk0eDnDDM=
Subject key identifier: 49:65:BF:8D:AD:45:47:33:AE:DF:30:0E:09:9E:72:7C:AC:4B:BD:F5
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019765F1C9115BF6F0783DD7343FBC83EEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0AA5
Signing time: Thu 12 Jun 2025 21:00:33 +0000
Manifest this update: Thu 12 Jun 2025 21:00:33 +0000
Manifest next update: Fri 13 Jun 2025 21:00:33 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: VQwiYlqxB9ahk+3Mpg7me8oDwQ6oOTWucfDQgVGVVU4=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:c9:11:5b:f6:f0:78:3d:d7:34:3f:bc:83:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jun 12 21:00:33 2025 GMT
Not After : Jun 13 21:00:33 2025 GMT
Subject: CN=4965bf8dad454733aedf300e099e727cac4bbdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:67:f1:8d:4d:6e:37:a0:63:4d:57:5d:cd:
79:57:98:e9:90:71:2b:5b:70:dd:5b:39:f0:9e:d5:
8b:fb:9a:86:7c:05:00:91:22:8c:5f:8d:0e:72:3e:
12:e8:cf:e2:a7:45:87:60:43:d0:de:33:d2:71:09:
a8:d5:96:c6:d1:17:14:b8:a1:a1:97:42:d0:f4:93:
fd:ff:2c:01:6e:e5:02:8a:b9:43:b9:08:36:29:cc:
a6:9c:dd:37:a2:83:a1:fc:9b:47:44:ac:4e:17:38:
13:82:87:82:ce:15:d1:64:14:81:bb:a2:35:b4:8e:
5e:9f:d1:e7:5e:78:00:de:74:7b:d1:0c:d4:24:e4:
4a:a4:a7:45:10:46:0b:2c:1d:37:f4:29:3f:95:b7:
b7:08:55:9a:ac:05:99:88:ee:cb:ac:92:f7:e8:de:
22:82:c6:55:3c:58:02:0c:e8:46:e7:d1:aa:e6:67:
b3:52:5a:e1:0b:e0:eb:3a:a7:38:11:5c:e6:67:b0:
21:26:39:bc:ed:d6:c3:86:4f:60:bf:c2:06:20:e5:
a8:82:47:ae:a6:0b:a5:0e:c1:75:42:b8:b0:c9:57:
ca:40:b4:21:f7:f5:ea:b3:8e:d3:aa:e6:ba:b4:09:
72:b8:35:cd:65:4d:b3:f1:3c:01:92:e4:8a:87:c2:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:BF:8D:AD:45:47:33:AE:DF:30:0E:09:9E:72:7C:AC:4B:BD:F5
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cc:e3:03:99:69:29:94:44:05:9b:45:9a:42:22:a0:23:be:
68:8f:41:42:80:de:bc:1a:38:27:db:79:77:c5:5e:d1:6f:15:
01:80:62:fd:0a:01:e7:a8:c0:11:30:9f:4e:e2:0b:91:d2:90:
69:e3:84:db:fc:9a:23:b3:58:6b:54:e5:a8:10:28:2d:a8:1d:
89:4e:cb:1e:5f:73:15:42:57:70:10:ee:90:ac:2a:2f:52:b9:
b3:f3:81:72:0a:c8:15:0f:b3:ec:a8:fc:f7:cb:74:69:97:d8:
48:c4:46:7e:6f:40:a3:02:50:3d:7f:39:c0:7d:b9:e6:38:a5:
07:49:8a:1b:fe:70:9f:5b:94:b5:a1:8c:64:05:70:21:f9:a1:
a0:44:c5:1d:fe:b8:0e:98:2c:f9:ea:ce:34:be:92:a4:c1:76:
0a:52:55:0e:09:76:f7:d0:05:cb:98:b6:b8:2e:1f:e6:c5:9e:
72:2b:bf:8d:c4:c8:09:37:6a:90:11:97:16:8b:05:d7:b0:a8:
a5:a1:37:ba:72:8f:1d:9e:39:a2:fd:50:33:05:31:96:1f:02:
34:97:e1:8f:7f:6f:8e:0e:2e:5d:98:ed:25:7c:f1:ff:11:da:
bb:35:c9:c4:5a:21:26:7e:5f:c8:79:31:51:4e:bb:d6:41:98:
c6:0f:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:43:44 2025 by rpki-client