Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: ZyTtzw6I58SqzPFhdvg7qhCV1A7Z34AV5C6boz30r7k=
Subject key identifier: 89:B7:F0:38:53:8B:CD:34:F6:94:DE:D2:F1:BB:4A:87:0B:76:CB:08
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01974B1FA912A810BA7F31A46124C212FC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0368
Signing time: Sat 07 Jun 2025 16:00:55 +0000
Manifest this update: Sat 07 Jun 2025 16:00:55 +0000
Manifest next update: Sun 08 Jun 2025 16:00:55 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: Z0Nmqci5Dlc8a6Nw3Xd2OYJpgqQ6OLlR51+k+Cnwh10=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:a9:12:a8:10:ba:7f:31:a4:61:24:c2:12:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Jun 7 16:00:55 2025 GMT
Not After : Jun 8 16:00:55 2025 GMT
Subject: CN=89b7f038538bcd34f694ded2f1bb4a870b76cb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:db:52:98:d8:66:ac:a6:22:33:bd:22:93:
7c:c8:ff:54:7c:9b:6b:8d:ab:63:74:25:45:46:e5:
75:86:82:ee:cb:80:56:74:3e:be:9f:40:81:af:87:
04:e8:09:61:bd:d6:73:29:6d:a8:93:e8:16:02:ab:
01:cf:26:d4:25:ae:25:f8:42:7a:ee:71:4c:b5:49:
c6:1c:12:95:09:8e:20:e7:d5:e4:32:51:51:9a:f5:
06:fe:7d:1a:61:14:19:13:b3:9f:ce:35:1e:5e:d2:
a7:f2:be:77:ec:01:70:5c:85:c0:9d:89:5d:01:92:
96:c6:57:55:27:35:25:6d:38:ac:a6:f5:bb:66:15:
30:02:42:8e:6e:e3:2f:d9:33:c3:e5:7c:43:e1:70:
85:6a:59:ee:52:a3:84:95:5c:cc:d4:b8:c7:bc:47:
0b:5e:62:cb:90:24:14:30:68:60:b1:07:45:3f:ac:
13:da:65:42:b7:6f:66:c6:74:92:84:50:87:8e:b8:
02:aa:d9:5e:a4:ef:6b:48:69:39:87:ab:b9:39:c8:
ea:0a:ad:07:e6:6c:87:fd:9e:b1:cc:55:ce:3c:a7:
96:e2:85:20:f9:77:e3:5e:a6:f2:29:7e:c0:a2:e1:
dd:d2:f2:41:92:69:ea:38:ac:b6:33:ca:63:96:55:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B7:F0:38:53:8B:CD:34:F6:94:DE:D2:F1:BB:4A:87:0B:76:CB:08
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:22:a2:b2:73:b8:1b:c5:39:61:f9:c0:2d:0b:ee:c3:f3:59:
8f:db:1f:e2:8c:f8:7b:08:28:cf:e9:47:bc:d2:22:98:08:c9:
4d:c4:ff:58:e4:68:68:72:ca:a1:46:c5:a5:6c:52:ba:05:be:
c0:a8:e5:74:f2:81:e5:f3:67:81:02:df:b5:31:cc:31:8e:85:
2b:e3:64:88:7c:67:a1:0c:f5:9a:55:8b:01:0d:f4:71:68:37:
57:5d:a4:16:63:44:53:e2:b0:fc:90:78:23:64:15:51:b3:68:
75:d5:80:76:ff:5a:24:10:48:be:a6:07:84:8e:fc:5b:1b:3b:
df:32:6d:23:c3:1f:0c:90:6c:e2:a5:24:5a:c6:87:5f:4a:8d:
e4:f7:fa:fd:0a:64:60:f0:f4:f4:e7:d2:ee:f2:c2:c2:42:a7:
0a:2c:ca:c3:7d:03:41:76:6f:5a:4c:03:b6:08:ff:e1:47:24:
f2:80:08:ca:26:2d:19:44:03:e2:18:ef:a1:0f:50:d5:fa:e3:
8d:e7:3a:9c:eb:5f:b7:57:f8:dd:8e:d2:f6:ad:13:25:a2:73:
bd:e3:3e:95:be:53:56:3e:92:d8:48:78:55:c3:fe:18:f4:14:
02:d5:f0:a7:4e:51:95:2f:58:61:44:22:a8:ab:c4:39:4e:d5:
40:6b:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:03 2025 by rpki-client