Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: qBpgBAjFJfID7IsjCRoK+yHZEnnY04c+tyZQIbfYC8Y=
Subject key identifier: 40:E6:51:C5:03:89:AE:B7:19:15:B0:0C:8D:B5:4E:A6:87:82:E3:5B
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 0197488BF9616BF9E4C025BC425A7BF5B6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 02A5
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 1h4yQbewrTkotqI6ud/RmupW7BSqLfDk/H1Yf2aLCgo=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f9:61:6b:f9:e4:c0:25:bc:42:5a:7b:f5:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=40e651c50389aeb71915b00c8db54ea68782e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:f5:d9:ca:2a:db:61:12:5a:3a:50:cf:6d:
b2:a4:ed:84:ad:34:e1:f3:6a:8d:53:e5:3e:2e:a5:
62:ac:d8:45:e6:5b:49:a6:71:ba:df:54:65:e8:fb:
69:63:45:8b:04:05:c5:fe:a3:c4:1c:61:64:18:1b:
cf:64:00:0c:6b:9b:ae:7d:b1:37:0c:fe:ba:e1:52:
c5:7d:a2:78:d4:7e:7d:da:fb:39:7f:79:eb:11:8d:
cc:17:18:fd:d0:a1:fe:5e:2f:64:9f:9e:dc:0e:92:
a3:98:1c:8e:c5:08:51:d1:07:d9:7a:81:da:62:04:
c6:ff:7a:d9:15:cd:a6:ed:f3:ee:5c:f4:1d:cb:72:
87:0c:e4:56:7a:66:d0:70:57:44:d7:14:1f:39:e1:
35:9e:75:b8:40:d7:48:51:bc:b8:a3:df:17:99:ba:
9d:d0:7e:28:1d:2e:1a:7b:d9:0e:4e:11:12:39:f9:
85:4f:56:d4:62:f3:13:71:b2:29:1b:b3:9f:51:9e:
16:78:34:5c:f4:5d:74:f3:a6:7a:b1:67:12:b7:ba:
f9:90:4f:43:6a:ed:97:24:8c:4a:35:14:81:28:cb:
8b:00:45:be:8e:b3:52:cd:17:8d:6f:7f:96:cf:fe:
61:83:c9:b1:13:17:5c:3b:d3:d1:2a:f3:f0:6a:27:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:51:C5:03:89:AE:B7:19:15:B0:0C:8D:B5:4E:A6:87:82:E3:5B
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a3:8f:0e:ed:06:ab:fb:13:cb:f8:e5:63:2f:0b:12:be:c8:
80:84:f6:cb:6b:9a:dd:37:ef:89:fa:da:56:be:df:ec:2d:76:
ec:f4:cd:a3:a0:23:e1:3e:0f:c3:8c:2b:8a:92:f0:2c:93:a7:
17:4e:65:8b:68:75:9d:59:cd:71:39:93:53:72:20:fb:dd:21:
bd:2c:a5:aa:53:e4:63:84:7a:f0:69:c7:57:2d:6f:c0:27:e4:
27:d5:82:a8:71:e7:3d:4b:fe:0d:32:59:11:46:39:d0:47:8e:
4f:53:07:fd:2b:a9:da:d5:c6:17:29:ba:23:25:17:ac:d4:ac:
28:b4:a6:74:0e:a0:41:f9:80:c3:90:eb:34:c7:c7:04:60:00:
1c:c6:7a:09:f9:a5:35:ee:c4:46:e8:61:ba:4c:8e:a1:4d:df:
61:4e:82:46:e2:87:31:e3:f8:9b:21:b5:b0:8f:d3:b2:78:08:
61:8f:c6:27:c5:6c:57:62:cc:b8:d8:96:5e:47:46:cf:a4:ad:
a9:90:55:96:d4:c6:fb:40:28:53:9d:1e:6e:18:e3:04:93:52:
49:61:5f:71:3a:c0:26:d0:fd:0e:e4:a5:6d:7d:b7:5c:15:c5:
cb:2b:4b:fa:0d:59:3e:09:88:6f:9e:45:49:b2:4d:70:47:c1:
e3:17:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:04 2025 by rpki-client