Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: CbY/QokxiEvCiKqeS5UH6WsPyLuMhXMuXudlLkK5khw=
Subject key identifier: FC:0F:16:64:B0:90:CA:AF:F9:6D:1C:49:D2:15:4B:59:BF:E3:06:D2
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0197549101E833C4D9AA84E10B9C2781422D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0A9C
Signing time: Mon 09 Jun 2025 12:01:18 +0000
Manifest this update: Mon 09 Jun 2025 12:01:18 +0000
Manifest next update: Tue 10 Jun 2025 12:01:18 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: pq6GnQjx+DN7Mwex4LFIv2gfof75NwIisGh5f1mB3tg=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:91:01:e8:33:c4:d9:aa:84:e1:0b:9c:27:81:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jun 9 12:01:18 2025 GMT
Not After : Jun 10 12:01:18 2025 GMT
Subject: CN=fc0f1664b090caaff96d1c49d2154b59bfe306d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:57:90:6d:4d:1d:d7:b7:88:64:a0:04:b0:
09:d6:9f:78:2c:84:fe:4e:2f:c2:dc:96:b5:34:85:
c0:29:df:3b:cc:49:7f:da:9a:fe:aa:5a:3c:e4:88:
a3:c9:6a:7d:1d:b8:75:1b:00:ce:ad:8c:8f:6a:40:
cb:0b:f7:0a:d8:5a:15:03:ae:3d:7f:57:bc:c7:b7:
d1:19:da:f3:87:f5:35:6c:09:b4:e5:6f:20:13:d8:
05:4d:d1:df:0c:e2:de:fe:09:99:15:f1:2f:42:ce:
d0:46:c7:11:e7:a9:77:8e:64:ee:59:1d:6b:ae:38:
76:bd:1a:27:03:db:f0:f5:ad:e6:c2:b1:e6:4d:eb:
dd:b1:26:04:9e:0c:3a:bb:9c:df:fe:cc:70:2a:0a:
61:b8:7c:76:0f:2f:f5:dc:49:f3:bd:db:47:0b:7b:
e7:c7:79:d3:11:b2:aa:a7:63:c8:d1:71:ed:10:33:
4c:4b:6e:6b:2f:96:b1:cd:ee:84:a0:24:6c:66:b9:
3d:0c:c2:de:a6:11:83:cc:63:3a:5a:6e:c2:4f:b3:
df:5c:42:aa:b7:9f:5b:df:a0:6c:5c:bb:a8:e4:40:
b8:78:30:fb:5c:cf:4c:8e:3c:ce:e5:df:d5:c4:f8:
15:1d:29:13:0d:e9:f1:fe:73:73:af:e3:e9:b8:a1:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:16:64:B0:90:CA:AF:F9:6D:1C:49:D2:15:4B:59:BF:E3:06:D2
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:61:fb:c5:45:f9:79:67:99:86:00:95:8e:9d:82:5f:c8:27:
fb:ef:04:31:56:31:eb:91:a7:38:c3:28:da:3c:bd:08:09:02:
43:c8:94:00:90:c3:a4:87:d4:35:8a:56:8c:31:9d:ef:bd:2a:
d2:75:c1:ae:c0:30:41:7e:97:36:90:ce:29:d7:54:dd:eb:6d:
4e:17:ef:f0:82:35:27:47:d5:d9:c5:76:55:01:9a:99:6e:23:
1e:96:f4:8e:9b:25:e8:5e:07:f5:2e:cf:32:0e:c1:2b:87:15:
78:19:e6:b6:6e:97:e5:d1:07:d2:94:8a:fa:86:6e:ff:7c:5b:
72:f0:bd:2c:12:13:d7:5a:59:e2:31:9f:a6:0b:4b:92:4f:8a:
06:28:fe:ba:76:f5:83:57:5f:e4:b9:dd:1f:f2:b6:ac:8e:b4:
28:b5:8d:4e:3e:6a:8a:a7:f5:4d:10:8c:92:91:43:17:9d:8b:
7f:98:13:f3:08:37:2b:ea:83:e2:53:98:65:47:18:33:d8:56:
e4:08:d4:60:48:ae:19:f6:e4:8b:3a:13:10:bb:a1:cf:ab:5b:
b6:ee:35:80:bb:17:96:69:b2:fa:7d:55:53:84:bb:77:54:c9:
1b:4d:a4:a7:68:3c:46:30:6a:af:af:78:59:c3:a1:ce:c7:6b:
d0:ef:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:51:20 2025 by rpki-client