Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: ioEWAN1sseSkXO7IX8LdlYJ6sVZKp9ahaev4qQM9hhc=
Subject key identifier: 40:EC:42:45:89:67:04:D7:04:E4:2F:91:87:DB:B1:84:65:31:A7:BF
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 0197481E6ACD08FC6FDBCB23FF5FCEE3EDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0EE2
Signing time: Sat 07 Jun 2025 02:00:42 +0000
Manifest this update: Sat 07 Jun 2025 02:00:42 +0000
Manifest next update: Sun 08 Jun 2025 02:00:42 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: g8mJWJ5HdK4G27z+EpR8dErMsX4jALvbn4mMlmlE0+g=)
2: ZPNM7KgQKfcGyvV7_2daewtnAlI.roa (hash: gCwHJt9KCFIRPasHifDhV1IvkNRzDs0fMniT9GCnavA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:6a:cd:08:fc:6f:db:cb:23:ff:5f:ce:e3:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jun 7 02:00:42 2025 GMT
Not After : Jun 8 02:00:42 2025 GMT
Subject: CN=40ec4245896704d704e42f9187dbb1846531a7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:ef:01:4f:d0:b6:45:41:96:66:5e:7c:ea:
9d:86:fd:a0:81:12:ff:d5:c0:da:be:e3:fa:d8:c6:
bc:1f:71:8d:27:10:7e:0b:75:25:04:7d:a9:91:1b:
9a:cc:7a:f2:74:09:f4:e5:2c:a6:98:0c:7e:7b:23:
90:c5:be:40:7f:c3:32:fa:ba:2b:1e:8e:ce:a5:90:
80:41:e1:7f:e8:aa:d5:65:f0:15:7f:63:e6:6c:22:
15:4d:66:4e:24:89:3a:dc:de:3b:d2:ad:d1:64:83:
98:13:a3:06:27:f6:cc:a4:e8:55:cf:1a:df:e2:b4:
e5:0a:40:23:ad:2f:ef:ab:74:f8:0f:39:ca:e3:68:
2a:c4:71:d2:10:70:11:4b:16:ae:97:c5:5b:9a:34:
e6:52:df:8f:61:c6:48:a1:78:8d:88:07:b3:24:a1:
e9:78:aa:d5:2c:14:f8:99:5b:68:02:ea:5d:a9:50:
07:cd:1c:2e:a4:75:10:7d:c4:88:48:99:bd:0e:1f:
53:2d:0a:67:8a:0b:af:2f:ec:61:9c:45:fa:1f:34:
17:f9:5f:0f:c4:01:75:b5:e8:93:b4:e2:56:65:d7:
b3:60:dd:c5:c3:fd:df:27:00:0f:6d:27:bc:95:f4:
a2:1f:ec:d3:de:77:a2:50:8c:72:46:42:24:da:a8:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:42:45:89:67:04:D7:04:E4:2F:91:87:DB:B1:84:65:31:A7:BF
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:67:ca:35:07:b4:11:7b:15:ad:23:4e:0d:0a:2b:59:c4:
0d:54:b7:cc:6f:4e:ce:a9:2a:60:1a:f3:db:20:b1:9d:26:44:
96:d2:e4:5c:ed:a1:0f:5e:11:59:61:a5:c4:56:3e:b6:37:ae:
12:9b:30:e2:ae:89:00:04:3c:6f:1b:5a:37:88:96:e6:a2:5e:
7e:56:9b:f7:73:16:c1:49:88:71:a3:86:2c:18:e4:54:39:a4:
3a:31:f0:ea:ec:d2:d8:50:e9:1b:62:cc:bd:ed:3f:05:db:d0:
d3:51:28:e4:e8:c2:02:61:e4:48:54:ca:c5:2e:93:d6:7f:48:
2d:98:dc:f0:36:a5:c9:a2:13:58:fc:98:bb:f2:b2:0b:dc:db:
78:0d:4e:b4:dd:8f:1a:81:a3:ba:b4:fd:42:ec:88:30:52:74:
f3:03:5b:4f:f7:f5:61:0f:3d:ca:5c:c4:ec:1b:02:e4:a5:1b:
6b:17:ed:c0:8c:2c:3c:b1:04:47:41:b9:a1:fb:47:17:e6:26:
c8:48:0e:a2:5f:df:e6:46:32:51:03:67:11:e2:f0:89:39:54:
d8:eb:61:eb:b0:fb:30:da:3b:8c:14:a7:eb:33:6b:04:88:da:
f5:c8:d8:d3:0d:db:49:81:52:b7:14:b3:8e:f4:01:70:33:a2:
9c:47:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:19 2025 by rpki-client