Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: /ZV/KhuvN1contAmls0jVat5WkefZ07LjJQmx5uZA/8=
Subject key identifier: 4D:89:D6:B8:2C:7E:6B:47:BA:45:CA:A6:D3:F4:9D:97:CD:25:95:B4
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 0197575A43A0B982645DAA32987E34AAE07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 12D4
Signing time: Tue 10 Jun 2025 01:00:22 +0000
Manifest this update: Tue 10 Jun 2025 01:00:22 +0000
Manifest next update: Wed 11 Jun 2025 01:00:22 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: j4+oEX3OsqMqCPp5zfHsYiaxUQzJZk2sNYA4N+L6YZo=)
2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:43:a0:b9:82:64:5d:aa:32:98:7e:34:aa:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jun 10 01:00:22 2025 GMT
Not After : Jun 11 01:00:22 2025 GMT
Subject: CN=4d89d6b82c7e6b47ba45caa6d3f49d97cd2595b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:67:8b:08:9c:9e:cb:cf:d5:a4:db:75:0b:
0c:b4:68:6d:ba:34:ac:3e:7c:55:4c:64:58:14:41:
50:b1:16:b3:fb:ad:5f:ca:e6:fa:dc:4a:60:bb:8e:
79:3e:c0:de:25:99:f6:67:aa:19:19:60:dd:b3:68:
52:3e:b6:93:50:f7:3d:70:9c:8b:7a:f7:f3:b8:0c:
1a:ab:5e:85:20:d3:d2:7f:e5:c0:f9:11:a5:82:1d:
4c:ef:0d:0a:df:38:66:81:75:9f:d6:35:a7:25:0c:
a2:fb:59:05:23:5e:9e:89:51:74:a9:9b:f6:e6:c6:
9d:cd:78:a7:5c:73:f5:28:ca:4a:3a:cd:7a:b4:ca:
c4:98:44:80:01:16:20:40:02:0b:07:84:48:b6:53:
3e:99:7b:e0:ef:c6:d5:81:b7:67:f8:6c:bf:c6:07:
f0:dc:07:27:ee:34:bf:c8:a6:f2:eb:b4:3c:8e:b7:
7e:7e:e9:e9:55:3c:d3:c0:8c:39:06:ab:fb:37:d9:
5a:41:d0:3b:3f:61:20:71:dc:cf:4a:7c:51:2e:45:
eb:2d:b1:6c:54:7d:09:9d:24:6b:07:8c:b0:aa:59:
6c:be:55:0b:e5:5d:a1:ca:9f:b5:b0:c6:c1:9e:cf:
75:2a:3f:a2:78:ed:fc:74:f0:89:90:60:2b:74:74:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:D6:B8:2C:7E:6B:47:BA:45:CA:A6:D3:F4:9D:97:CD:25:95:B4
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b4:3c:ce:0f:7b:83:65:fe:46:01:5b:78:24:3e:45:40:67:
4f:c0:4d:ca:4f:44:04:01:73:41:21:03:c5:60:3b:91:76:58:
c8:0a:e3:19:3d:79:d0:ca:db:72:01:87:ad:c4:f9:8f:b4:d2:
da:4c:80:85:88:6f:01:2b:e8:3e:42:a8:27:af:34:83:96:64:
50:8f:6e:4f:42:63:9c:9f:ec:ff:83:1e:78:42:98:5d:2e:cd:
46:67:46:84:8f:7f:b2:9c:ac:72:f3:d7:98:bc:70:7e:19:16:
0c:db:10:af:8d:6c:49:a3:ff:cd:81:b8:2e:93:ac:98:d8:67:
ec:c4:80:84:64:6a:fa:3f:46:e8:a1:55:c7:71:57:0f:8d:d3:
c7:4f:b0:25:18:fa:3b:c7:29:8b:ed:27:78:73:38:23:6f:e6:
d1:9f:4b:32:80:58:d6:0a:10:1c:6f:55:6d:92:d9:e5:fb:2c:
8e:c9:de:bb:8e:dc:9c:61:34:7a:72:88:da:39:a6:3b:94:9e:
28:5b:9e:03:e4:2f:11:d5:30:17:10:a7:b5:c4:32:00:8a:a3:
31:73:2b:8c:12:69:2b:14:99:e0:98:77:b8:ca:ac:58:85:f7:
ad:ea:28:06:c7:88:e6:0a:8a:8f:d1:ff:4d:62:0f:6b:d5:7b:
f8:76:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:50:58 2025 by rpki-client