Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
File: e4huM5cQFPDjX65u41WpXuU_E5c.mft (raw, json)
Hash identifier: 3KcpQRNF4NdwYUni6Ky5sniHm0hetkjS10iqvUQJEws=
Subject key identifier: DF:92:80:DB:4C:BB:A7:9F:3D:59:F0:86:56:F7:B8:92:33:A6:62:0F
Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Certificate serial: 01974AE94E905099EEB227F491E7BC90185D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
Manifest number: 0AA4
Signing time: Sat 07 Jun 2025 15:01:33 +0000
Manifest this update: Sat 07 Jun 2025 15:01:33 +0000
Manifest next update: Sun 08 Jun 2025 15:01:33 +0000
Files and hashes: 1: X1TlKjqQxQOIUE9nmZNVP4vjBXo.roa (hash: YEcDQS5RtxJGLo4gojN6ANb19cB9cM3e9I1XVwuKzs8=)
2: e4huM5cQFPDjX65u41WpXuU_E5c.crl (hash: mrMKUJzUqOTC+BEC2XOj2VtXan6qc753Brm9zDxrNdc=)
3: pbPgbOFAYYSbv86NqTphvTqH-ss.roa (hash: 2bo0N8otfq6/P5RuOu/G2vL2kcq6chqi1fFShZ0tEtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:4e:90:50:99:ee:b2:27:f4:91:e7:bc:90:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397
Validity
Not Before: Jun 7 15:01:33 2025 GMT
Not After : Jun 8 15:01:33 2025 GMT
Subject: CN=df9280db4cbba79f3d59f08656f7b89233a6620f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:47:4e:3e:b3:9d:c5:53:65:4e:b8:02:79:
a3:63:9a:0c:9f:59:8e:39:b2:48:9e:62:9c:14:46:
02:66:2f:4d:c7:d7:b1:a0:ba:da:48:ac:0c:6e:fa:
c3:77:fa:cc:43:9a:0a:c5:e7:ac:8e:a9:64:17:1f:
4f:3d:4a:17:be:68:be:e5:a5:75:d0:9d:14:74:92:
c4:a2:ae:8c:26:f7:bd:e5:d7:39:94:76:81:1c:98:
ac:97:13:ba:15:35:25:2b:54:d4:19:c5:bc:7f:7a:
e0:87:4c:96:d0:53:07:74:28:43:b1:8b:66:84:42:
52:d3:d5:68:3b:27:c1:d2:a0:e5:17:c1:0e:57:2d:
e0:9f:8c:a6:56:0b:75:c8:c2:4c:22:2b:fa:27:24:
f5:57:69:9d:c0:da:a7:4e:4d:35:fd:96:4d:ee:aa:
58:a5:89:7e:f7:7e:16:21:71:bc:f0:94:b4:c1:36:
7f:7c:e9:12:60:cc:bb:08:fc:75:28:6a:d5:c3:a5:
4b:52:e7:f1:7d:b1:a9:ad:42:d4:85:62:f6:2e:9d:
09:7a:a0:47:61:80:90:32:a7:2e:fd:e9:19:00:42:
06:6e:75:c0:08:ff:f8:1c:51:e5:7b:79:50:d5:42:
10:91:f6:6e:3a:c9:cb:73:90:5c:89:f9:15:94:1d:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:80:DB:4C:BB:A7:9F:3D:59:F0:86:56:F7:B8:92:33:A6:62:0F
X509v3 Authority Key Identifier:
keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:70:e4:be:ee:41:87:76:d8:57:c4:09:dd:89:53:aa:c8:7c:
2c:92:c4:13:2d:12:4a:30:31:4c:58:56:e9:fa:19:b0:5b:dd:
39:e4:b3:e6:65:82:d0:ba:20:b2:cd:86:62:04:fa:fb:80:f1:
6e:66:fd:67:b6:73:f3:09:4e:c7:98:05:26:f6:20:99:c7:00:
43:6c:6f:7a:10:a1:c2:b4:96:ea:3a:c7:90:7f:75:22:bd:5b:
ed:17:60:fd:65:e8:f9:ce:e5:11:bd:19:33:b7:55:59:39:8a:
e0:38:16:73:67:11:82:99:95:13:4f:6d:ee:86:71:c3:17:ea:
d4:d2:6a:eb:18:32:8b:49:81:43:70:bb:77:ec:bb:b6:90:99:
b0:a0:7c:da:88:d0:57:cb:93:20:69:17:3c:9f:74:54:0f:9b:
34:6a:fc:d2:9a:e1:b8:2a:67:82:ef:2c:fb:41:e2:2a:81:d9:
5c:8f:85:ab:28:e5:a1:38:12:e7:15:09:35:78:5d:a7:00:9f:
58:ec:be:7d:f4:56:14:88:ec:62:41:6c:77:8a:90:0c:d7:ae:
f8:9b:30:73:22:f2:dc:4c:d4:b5:2e:d0:a4:ac:df:cf:67:4f:
7e:ef:8b:2f:a7:46:14:93:d8:d1:56:8e:05:d2:58:d3:bc:86:
50:50:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:05 2025 by rpki-client