Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: VXr7Jb9sdqrGlLTNFZvv2WObgFndU5EqY/lKzmZxGZI=
Subject key identifier: 00:19:90:B7:6B:1A:97:CE:7B:E1:9C:65:78:77:3D:19:C3:B7:D0:6C
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01974DB2A0F23E6F665703DE94AA0FBD9D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 1450
Signing time: Sun 08 Jun 2025 04:00:41 +0000
Manifest this update: Sun 08 Jun 2025 04:00:41 +0000
Manifest next update: Mon 09 Jun 2025 04:00:41 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: Qt6Jz0Mpq+Q4hHAOR1PwjxPyjvplHR3ahE4Dtstfg9E=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a0:f2:3e:6f:66:57:03:de:94:aa:0f:bd:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jun 8 04:00:41 2025 GMT
Not After : Jun 9 04:00:41 2025 GMT
Subject: CN=001990b76b1a97ce7be19c6578773d19c3b7d06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:8f:d6:83:81:5a:4f:5c:2a:50:b4:7e:65:
6f:71:0d:ee:ae:b3:68:1f:7a:18:90:9d:dc:64:1c:
d9:c2:96:3d:f3:cd:f9:d0:75:49:12:ee:b4:23:6f:
be:d2:65:35:c2:a8:94:48:60:07:b0:8c:ca:8e:58:
cf:bd:bf:26:77:a0:24:31:76:66:fb:2f:ab:16:94:
c4:8a:b1:f9:bb:a6:88:a2:a2:c8:85:17:a8:0b:78:
01:0f:90:38:2d:0b:f4:d3:e2:e8:74:0f:40:9a:0d:
55:ac:08:c9:f4:67:8f:40:82:60:1f:84:a2:ca:10:
07:91:0b:25:e2:33:a4:ca:2a:1d:62:5c:45:e1:ce:
c8:10:97:d1:51:2f:d5:66:17:48:3b:25:77:bf:ec:
03:be:8a:27:6b:ee:50:41:59:f0:e7:6b:b8:64:ad:
a9:d1:0e:87:84:a9:ef:fe:c3:d6:8b:7d:98:c4:eb:
aa:00:64:d6:d8:05:b0:97:b4:22:b5:ca:f5:ea:c3:
2c:b7:46:61:cc:89:18:84:f4:da:bc:f1:74:c3:fc:
c9:d2:98:33:84:f8:20:41:dd:4c:c9:71:59:3f:ed:
0b:27:48:8c:7a:af:7f:83:39:79:68:37:ec:37:40:
7f:c9:84:02:47:88:8a:c1:67:39:63:80:6c:e1:4f:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:90:B7:6B:1A:97:CE:7B:E1:9C:65:78:77:3D:19:C3:B7:D0:6C
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e5:11:9b:c1:fd:70:39:01:f7:35:ae:1b:56:56:42:cb:63:
6f:64:9e:db:11:92:72:0b:37:7c:c3:20:c2:e1:98:c6:4f:b5:
1b:95:b1:8e:25:dc:cf:35:f3:19:ae:19:33:5a:8c:0f:8d:15:
14:e0:08:ab:3c:87:a3:0c:d6:a1:7b:ec:30:cf:39:b7:34:2e:
8a:8f:57:48:d0:62:c2:07:c8:3a:43:5b:4b:f8:72:86:87:5c:
4f:c2:0b:1a:16:ea:2e:c4:31:ed:a2:6c:34:9e:be:77:97:2c:
58:b4:92:69:0f:90:4f:d5:3c:66:c5:2f:02:d0:7b:f4:37:6c:
0f:42:fc:ea:b0:aa:92:88:dd:50:58:e8:2b:07:f2:55:ff:c9:
79:4d:bb:0e:78:73:c4:31:d3:da:2b:41:65:2b:6b:d3:28:f7:
15:2c:a0:a9:7f:a2:c2:bb:04:dd:53:53:63:cd:f7:50:c9:91:
eb:e5:e0:87:81:fd:7f:95:81:f6:15:9d:98:26:9e:4f:68:ce:
27:58:cb:02:f6:94:e7:67:a7:22:11:24:5b:7b:3b:4b:70:83:
0f:dc:ef:06:64:d0:3f:c8:6d:34:3c:ff:46:8c:36:e3:61:95:
0c:69:e3:6c:70:64:e8:3f:0c:1a:a4:33:a0:92:c3:c8:3b:8d:
96:ed:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:26:33 2025 by rpki-client