Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: UTxOCckAkv7olqWt7zuZGqWKg7/EoDVzw+KKbjLzmRo=
Subject key identifier: DD:30:88:11:3C:61:15:18:4A:73:FC:FF:08:58:EE:D7:CE:BE:BC:3E
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 01974C3247440C2DF5479BEBB3FCA1F1D1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 0470
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: LaAC0BTect+vi0co1f0OEMGJUNk5AKaSprdCISdqSk8=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:47:44:0c:2d:f5:47:9b:eb:b3:fc:a1:f1:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=dd3088113c6115184a73fcff0858eed7cebebc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:db:99:07:01:ee:b0:4e:1f:01:52:4d:9a:
f3:f1:cb:5a:61:ae:26:e4:13:31:f1:47:74:0c:e0:
5a:e4:5e:96:5f:ee:bd:82:7a:c2:91:cb:77:1c:4c:
cb:ca:74:71:89:42:7b:68:58:03:b7:09:fb:42:64:
7e:66:ed:50:80:42:d4:56:61:d7:47:c9:e8:ff:02:
00:2d:27:f5:f7:65:df:f0:32:1d:83:37:95:d5:5d:
80:47:05:f6:6f:76:3f:17:12:ce:2f:6a:3d:06:ad:
37:c2:e1:74:57:2c:e2:a3:15:f9:f2:2e:f5:1e:7f:
9f:e8:89:5f:d9:f0:c4:19:1e:89:86:98:65:57:09:
1f:fa:87:c8:a2:25:1c:26:aa:5f:7c:5c:19:94:b8:
a2:8e:15:46:6f:9f:d0:30:7d:dd:d4:50:9e:a0:29:
63:95:27:26:92:5d:51:53:a9:6c:b7:ce:4c:b0:ee:
ea:24:25:03:eb:fd:6b:84:32:ac:01:47:14:0f:fe:
64:e5:cb:a1:a7:70:a7:18:86:44:20:fc:58:ba:0b:
f7:e0:82:36:be:61:aa:b4:57:10:0d:2e:da:af:c9:
3f:96:cc:40:40:b9:1e:8a:1d:f4:7e:75:8e:f2:d3:
d5:c6:eb:a4:a9:6a:a4:5f:7e:75:8d:b1:68:62:56:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:88:11:3C:61:15:18:4A:73:FC:FF:08:58:EE:D7:CE:BE:BC:3E
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9d:bd:93:e3:24:92:cd:82:8c:f4:47:e1:e3:17:54:87:cb:
49:5f:80:73:49:7c:c4:b4:c3:46:a8:e0:4f:a7:65:ea:8b:07:
d0:68:ae:d7:b3:6c:4d:75:4c:67:e0:98:28:63:80:b8:e1:90:
0b:2c:d4:88:e9:51:50:1e:8c:1d:d3:1f:8b:3a:fe:73:43:d9:
e0:69:12:09:4e:71:86:fe:fb:c1:de:36:86:ff:d1:d4:7c:39:
e3:6a:3e:4a:07:11:4a:b6:87:03:bc:e1:99:19:9d:cf:da:0a:
79:4d:7e:7e:38:f9:f8:fc:e2:60:7e:93:99:75:1b:c0:9d:65:
7f:57:e8:e5:9b:78:77:bb:89:19:85:bb:d0:43:26:5a:63:dd:
14:a0:ed:df:13:36:f2:80:59:92:44:c2:7e:51:33:c9:ac:fe:
ed:18:5d:25:62:37:ec:36:9a:87:15:49:1a:2b:3b:1e:99:2e:
1a:fc:40:e8:24:1e:b2:59:27:e5:25:0e:c0:f1:b2:0c:7c:83:
c7:ae:2c:6a:aa:46:12:01:72:b2:30:15:0a:71:27:3c:c0:54:
c1:e6:8f:af:c4:67:94:ff:d5:70:7e:20:a3:f3:b0:e2:f0:38:
ca:14:a6:e5:95:70:60:67:82:40:7b:58:e6:22:74:cc:e0:4c:
33:7c:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:41:51 2025 by rpki-client