
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: e0bDcdAJxC9nsDN+tPjsWXYr70KjgUl8oHqW6LZh0ZE=
Subject key identifier: 4D:4E:4B:19:A6:62:7D:FC:37:BE:09:2A:CE:AF:97:20:4D:CA:D7:0A
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 01974EC52324C88050B86AD9946D782F1604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 0600
Signing time: Sun 08 Jun 2025 09:00:31 +0000
Manifest this update: Sun 08 Jun 2025 09:00:31 +0000
Manifest next update: Mon 09 Jun 2025 09:00:31 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: ze6JN23S4dunjctChClSv0c59QcGi6O1UIIvNy46CuA=)
2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:23:24:c8:80:50:b8:6a:d9:94:6d:78:2f:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Jun 8 09:00:31 2025 GMT
Not After : Jun 9 09:00:31 2025 GMT
Subject: CN=4d4e4b19a6627dfc37be092aceaf97204dcad70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:33:30:47:f8:2b:41:b5:83:e3:e8:93:96:
2f:ac:45:42:6e:d9:fd:02:56:77:ed:26:a6:24:98:
19:b1:3e:bf:b9:8e:6c:65:14:d8:7f:e4:55:5e:92:
cf:58:f8:ea:72:47:48:c8:11:2a:fb:d7:b0:e3:8b:
83:1e:5d:2a:3c:8c:6e:0f:b3:b9:5b:76:6b:e2:a5:
03:85:bc:1f:d7:44:b9:bb:1a:31:62:6c:ef:2a:ea:
83:12:e2:c2:ec:9a:b1:31:c7:10:8e:68:bc:94:be:
63:23:24:7d:fc:e9:74:8a:48:18:ae:a8:27:79:cd:
ec:94:2e:bc:6c:ee:f8:c0:9e:b4:3f:de:85:3e:1d:
3f:cd:03:28:3e:de:6d:db:02:ed:e0:2e:94:eb:90:
61:b5:fe:06:a3:90:a2:ce:24:5d:d1:12:6a:3e:03:
d9:4c:e1:3c:f5:65:dd:f8:04:8e:b9:ab:e1:3a:2b:
e2:47:46:ce:0c:a1:31:43:bf:de:b2:82:50:68:b1:
17:9d:62:8d:03:24:8e:c8:5c:3f:a5:77:5d:0a:c4:
07:bd:ca:99:5c:83:c2:6d:00:5e:26:04:0d:53:82:
6a:05:c1:17:68:40:67:19:1d:ca:9b:4a:94:e1:a2:
b8:dd:7d:96:4f:8b:71:d4:64:0b:6f:d8:aa:02:e0:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:4B:19:A6:62:7D:FC:37:BE:09:2A:CE:AF:97:20:4D:CA:D7:0A
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:c4:3a:3a:e0:07:dd:64:8c:85:6d:4d:31:f1:08:d5:bd:
5b:66:c7:07:d7:98:02:b3:d9:e8:20:6d:b8:e8:44:a7:86:9b:
35:ee:95:c1:6e:fa:94:07:66:f5:55:f2:b2:80:52:17:db:a2:
19:22:35:15:e2:53:8f:1b:91:e0:c5:ce:17:c9:1b:5d:ab:63:
9c:ad:e0:e0:8e:8f:bd:1d:ad:98:1c:7f:05:f0:2c:ad:c2:b2:
f8:80:c9:15:bd:e8:dd:7c:60:6a:2b:a6:99:3b:9a:05:63:ad:
47:51:fa:72:6f:64:6c:47:3c:b4:a5:2b:c0:54:40:ed:56:be:
34:8e:4e:bf:90:79:90:db:ee:69:9a:cc:81:5f:af:e2:78:bd:
fe:07:4c:77:74:f2:9d:9c:2f:71:45:e9:5c:3f:9c:be:a1:5d:
59:8d:7c:96:74:0a:1a:c4:5e:9e:44:64:69:f6:f5:ef:53:45:
8a:eb:7b:16:29:c2:de:d7:0d:a0:89:4a:15:2d:3f:98:fe:a3:
c6:64:34:c8:78:8e:cf:58:10:76:6e:0d:16:28:e9:31:b6:3b:
d3:c9:94:37:53:0f:89:48:20:e6:a4:ff:7a:36:0a:76:d1:83:
ac:07:e0:11:f2:b6:aa:15:58:a5:3d:be:a3:81:38:ae:ad:82:
fe:ab:4d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:08:55 2025 by rpki-client