Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: nG3CigZBFlWbspsLTFZkr/tkZOXjnmg0IMsr/xovdbs=
Subject key identifier: EB:73:0A:6A:FD:07:57:DB:4E:8B:12:80:4F:B7:A2:97:75:D2:89:7D
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 0197597F96C0F9CF663D5B710DFC0E25BD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 11:00:23 +0000
Manifest this update: Tue 10 Jun 2025 11:00:23 +0000
Manifest next update: Wed 11 Jun 2025 11:00:23 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: mooQMoMffWlZu0Nqa0Y8Act1jeBuiGcctn/gfO66ryQ=)
2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:96:c0:f9:cf:66:3d:5b:71:0d:fc:0e:25:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jun 10 11:00:23 2025 GMT
Not After : Jun 11 11:00:23 2025 GMT
Subject: CN=eb730a6afd0757db4e8b12804fb7a29775d2897d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:80:2b:69:74:8d:e4:7c:23:0f:2e:0d:e6:
e7:51:21:5f:7f:e2:46:02:5b:26:84:8b:b9:80:99:
6b:a5:b0:5f:ad:0d:d4:40:93:68:1f:ef:6d:8a:06:
81:cb:9c:29:32:19:60:c0:f2:76:ae:04:bc:56:b7:
f1:c1:29:ca:03:84:8f:a6:16:0d:a6:b1:c5:fd:5f:
47:d5:71:f1:61:3c:45:54:3f:cc:a7:4f:65:3c:b6:
0a:17:8b:73:be:14:e6:08:6a:bc:d0:ae:95:ea:f0:
3b:e9:8a:1d:28:91:12:de:58:00:c5:78:89:07:50:
d9:be:39:c4:48:cb:68:f7:54:d3:dc:c0:1f:d4:a9:
2c:12:95:b7:71:b8:95:2d:f7:a3:f1:d9:96:38:2d:
c5:91:97:36:74:03:f5:45:aa:9a:32:b0:b1:83:f4:
f1:70:4c:76:ff:21:7c:20:79:80:27:bc:6c:f7:ac:
3a:c5:21:dd:9c:c8:c3:17:96:d3:92:41:65:ff:87:
81:c7:16:61:c1:68:c0:c0:5c:10:41:71:9d:2e:d6:
54:99:25:80:07:85:d6:52:3f:25:c8:71:ad:38:f8:
8f:b1:c5:4e:d6:53:0d:f8:2a:5c:c8:5d:73:c8:f7:
38:3e:0e:71:32:74:f7:49:73:cc:18:9c:64:5d:88:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:73:0A:6A:FD:07:57:DB:4E:8B:12:80:4F:B7:A2:97:75:D2:89:7D
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:73:b6:0a:5f:cf:fb:ca:a2:3d:89:b6:99:34:11:50:74:90:
44:df:bb:e0:d9:45:c2:6d:2b:50:c9:32:06:f8:cd:c5:9d:0b:
4a:4a:16:fb:4a:6a:b0:5e:9a:3f:b8:98:6b:4a:46:01:24:1f:
36:13:76:37:42:3c:5e:06:49:1a:ce:c2:10:b4:6f:34:a6:19:
26:99:d1:c6:d2:ea:ea:d4:cd:28:9e:a7:36:7c:95:36:8b:20:
e9:ba:28:9a:94:03:ef:bf:b9:87:49:8b:a1:06:66:5c:21:2c:
69:c1:cc:16:45:ca:81:e0:ac:80:24:1c:a3:31:04:fc:2a:3b:
de:71:38:3a:91:53:04:aa:44:87:40:e2:be:94:fd:6f:09:d0:
5c:52:61:6d:00:f7:c5:4a:02:96:4a:63:47:9a:66:e7:b7:65:
bf:6c:c9:76:f6:74:9d:fb:8d:8b:0a:24:32:bf:8b:28:e5:de:
44:d2:ab:eb:50:08:5d:96:82:91:ad:82:f8:61:25:2f:50:7d:
58:b8:f5:3a:fe:6e:dd:b7:a3:e7:96:de:b5:c5:ce:60:99:e1:
05:9d:ba:ec:a9:8d:4d:7d:8f:cc:54:fa:d1:7e:dc:92:bd:23:
1d:e4:ed:71:4e:91:dc:4b:de:75:b8:be:50:ff:c8:80:20:9c:
48:d9:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:52:37 2025 by rpki-client