
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: GBS3rx07cDF6cOHYjz0dhlPsodiPscEo9bhPC8u9I0U=
Subject key identifier: 6F:39:34:4D:DC:7A:8C:8A:D0:A7:C0:AB:6A:CB:F9:FF:5E:81:4A:83
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01976C98A227360A1965640B8D74E5B38DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 12DF
Signing time: Sat 14 Jun 2025 04:00:31 +0000
Manifest this update: Sat 14 Jun 2025 04:00:31 +0000
Manifest next update: Sun 15 Jun 2025 04:00:31 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: bPwVAD6RgBqIxjBmUU56kQApdgMIKIOtkMrQfQPMNcs=)
2: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (hash: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a2:27:36:0a:19:65:64:0b:8d:74:e5:b3:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jun 14 04:00:31 2025 GMT
Not After : Jun 15 04:00:31 2025 GMT
Subject: CN=6f39344ddc7a8c8ad0a7c0ab6acbf9ff5e814a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:34:90:1c:b1:ca:ca:fa:3f:2e:fb:e6:d7:
0c:69:92:0a:27:e9:70:d2:12:63:c6:87:9b:8a:20:
d4:9c:88:10:13:3c:59:58:04:a7:78:a0:23:d7:86:
5c:b9:93:0d:ab:03:e2:7f:85:1e:33:ac:e1:55:21:
6e:51:cb:17:1a:a6:1d:b8:a1:1a:50:72:b3:86:38:
9f:db:1d:6f:ca:fe:71:c1:a4:84:65:82:21:19:b5:
c2:bd:c0:57:c0:57:46:fc:a0:c8:cd:10:d4:03:f7:
b0:00:30:00:e2:be:52:47:f4:db:21:ba:22:b8:95:
e3:d9:f7:46:b3:0a:00:db:75:d1:4f:bc:8e:e4:ab:
41:12:09:a3:c9:f8:ef:80:91:2c:dd:8f:a7:e3:7f:
28:45:08:7d:a6:a1:fd:a9:49:ef:a4:e7:32:8e:59:
17:66:79:de:5a:45:c4:47:83:c5:a5:0f:10:8b:10:
de:a8:61:8c:bb:39:dc:d5:0a:84:64:dc:e9:23:05:
ea:cc:ba:a8:ef:b4:a1:53:ca:ca:9f:6f:6a:14:7b:
ce:44:97:47:d4:66:cf:28:ef:1e:d4:c9:e9:c1:bd:
6e:ef:19:af:c9:b9:ea:69:12:ec:04:34:2f:a2:51:
8d:de:60:e9:4f:39:7c:3b:3d:8f:d9:20:76:b7:4d:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:34:4D:DC:7A:8C:8A:D0:A7:C0:AB:6A:CB:F9:FF:5E:81:4A:83
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:29:6d:f3:ad:2e:17:28:e1:43:71:a8:11:5a:2f:71:0d:84:
80:0c:92:0b:a8:72:67:78:bd:b0:e9:58:69:5f:08:ec:56:13:
0e:21:11:31:30:be:a2:a5:30:ce:06:47:ad:7d:82:3a:d4:97:
48:39:c4:20:08:9e:11:67:c0:4d:14:c5:d9:7f:d8:fe:ae:c3:
0e:ed:17:05:c5:41:4d:1e:aa:5f:f9:ad:81:90:c6:4c:78:46:
6f:ac:32:2f:0d:36:d2:10:e0:d2:0c:d2:2c:ab:49:ba:af:7a:
b5:a4:ca:f3:e4:7c:90:84:5e:10:26:c0:4e:80:60:a1:b9:47:
b8:78:14:8f:52:84:2d:bf:02:79:00:bb:0b:38:a7:65:08:98:
f0:4b:4d:69:28:2f:cd:03:ff:4d:44:04:30:81:68:17:11:07:
f8:59:ce:e4:a9:77:60:3d:f3:9b:56:a8:c6:f5:96:08:59:e6:
89:c7:f5:8c:99:42:6c:88:04:6e:eb:8b:e9:8a:d4:18:83:e0:
ac:69:e6:2b:57:29:ec:a1:2b:1e:7d:ea:eb:87:ce:6d:1d:be:
c2:68:7b:c0:c8:d3:22:5f:57:c6:df:60:b8:b9:96:43:70:13:
56:76:b5:75:0a:f3:96:6d:1d:e0:b0:ac:69:de:2c:bf:08:32:
a7:6f:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:31:08 2025 by rpki-client