Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: 6eenL0qP+UZqK8Vj8s3kvnJr730nKjMeqawtnxIME9g=
Subject key identifier: B3:46:CE:F2:3F:93:B4:69:12:DA:5E:8D:F6:D0:E7:C4:68:5F:42:3C
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01974A0D0073084A041BF2087C456903FB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 1020
Signing time: Sat 07 Jun 2025 11:00:55 +0000
Manifest this update: Sat 07 Jun 2025 11:00:55 +0000
Manifest next update: Sun 08 Jun 2025 11:00:55 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: GtOpbCLRB4FuqsMisQKkgtNqud48fht09DISyJRSKxs=)
2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:00:73:08:4a:04:1b:f2:08:7c:45:69:03:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jun 7 11:00:55 2025 GMT
Not After : Jun 8 11:00:55 2025 GMT
Subject: CN=b346cef23f93b46912da5e8df6d0e7c4685f423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:54:a2:47:07:1e:6d:01:0c:31:9c:f7:ca:
3b:e6:59:e5:f9:02:32:42:77:9c:14:b7:12:0b:d1:
ad:b8:d5:d4:3c:bd:0e:2c:90:e2:3b:57:58:e2:5d:
f4:a4:ba:80:96:48:e5:fd:c6:8e:a6:6e:51:02:3a:
fa:77:f5:7d:3d:fb:1d:c0:91:22:f9:c1:7c:ac:d3:
19:15:be:51:c1:c6:a3:10:e2:66:f0:f6:71:f1:ce:
76:91:6a:68:b9:a9:58:53:f6:8d:c2:4c:14:c3:78:
54:6d:24:7f:91:94:50:2f:1a:dc:59:17:3f:51:cf:
09:12:81:33:8e:6c:ee:b5:d6:01:ac:56:3a:b2:14:
15:54:b2:89:b5:ba:e8:42:03:63:89:fb:4d:38:5d:
8f:ef:08:59:25:29:3d:0b:57:34:da:ad:63:98:00:
8d:22:ee:f6:15:7d:eb:cb:85:92:1c:94:f7:27:b8:
23:51:fc:55:16:eb:71:f8:16:df:01:45:84:95:fb:
84:05:77:d2:d6:6f:fe:e2:68:1a:38:8b:68:82:0a:
cf:84:ec:8e:dc:6d:62:a5:d3:4a:27:65:bd:e6:3c:
9d:94:ed:79:65:8f:00:a1:76:e5:c3:f9:fb:20:b2:
6f:8b:06:3c:72:68:1b:4d:28:23:36:86:b6:b3:5c:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:46:CE:F2:3F:93:B4:69:12:DA:5E:8D:F6:D0:E7:C4:68:5F:42:3C
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:db:b0:e9:ca:ac:d2:a8:2d:5e:f8:1f:98:9f:3d:c9:97:0c:
e6:ce:7a:87:4e:c9:b2:20:5f:84:91:24:f0:0c:d9:cd:78:6a:
5e:86:dc:9c:6c:08:33:5f:a3:57:e0:c7:e5:75:d7:5d:24:8e:
f5:c1:71:b2:7b:16:3c:d8:48:0b:1e:79:2f:b1:7d:66:52:13:
b8:d6:12:cc:6d:ac:86:0f:40:1c:65:f0:16:98:d3:5b:20:9c:
38:a9:96:12:81:80:b0:99:6f:11:c5:53:32:a2:36:9e:34:c1:
7d:25:e6:ed:a7:3c:8a:a7:02:4c:9a:28:dc:68:62:a5:d2:c9:
30:da:45:10:38:a0:f0:cb:d2:45:11:9d:2c:da:59:16:8f:61:
c6:5f:19:fb:65:3a:f3:38:10:66:1b:81:88:5b:c5:67:a8:55:
e4:3d:6c:61:ad:cf:1c:e2:08:30:7a:78:4f:fb:5e:84:47:12:
0f:cd:ae:46:0a:37:9c:b2:03:df:3b:86:18:3e:5a:35:6d:0d:
4b:8f:8f:8b:78:b1:f7:65:eb:30:16:3a:84:c1:35:c8:c5:74:
36:41:c9:17:ab:51:ee:15:36:7b:7f:4b:d1:9a:ab:62:98:96:
ab:ad:7d:5c:99:57:b4:d8:e7:a3:cf:e3:98:c9:34:e8:42:37:
2f:d6:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:28 2025 by rpki-client