Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: NTUb/TiSR5apiTZcs94ITL/d5gkbXv+lVP+2RY5OIj4=
Subject key identifier: D7:73:F0:2B:B7:35:F8:01:59:E8:A1:24:CC:D5:54:02:00:90:01:E0
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 01974AE92C465437B6E1D39B3F53C4E43248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0922
Signing time: Sat 07 Jun 2025 15:01:24 +0000
Manifest this update: Sat 07 Jun 2025 15:01:24 +0000
Manifest next update: Sun 08 Jun 2025 15:01:24 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: MDtq0JSIoxM0gJjVJ0Fjbd5Ou+9s1qW2+WSg5nbLey0=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:2c:46:54:37:b6:e1:d3:9b:3f:53:c4:e4:32:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jun 7 15:01:24 2025 GMT
Not After : Jun 8 15:01:24 2025 GMT
Subject: CN=d773f02bb735f80159e8a124ccd55402009001e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:a9:98:cd:91:e0:aa:f6:cb:32:56:21:36:
03:a7:8e:80:a3:31:f0:2f:99:04:9a:5c:4f:dc:b3:
de:e0:2d:d5:9f:40:72:d1:d0:4c:90:ff:6b:ec:cc:
0c:e8:06:19:75:a9:58:5a:80:a2:2b:56:e4:a7:a7:
9b:70:17:19:64:e5:fb:b3:08:58:38:7c:13:fe:db:
7f:1f:0e:9b:7f:28:6c:8f:7f:99:f2:a8:56:5a:d8:
78:70:e6:bc:b4:ce:a8:f9:ef:a5:da:d3:17:20:5b:
9b:52:99:05:85:38:af:f2:da:5d:b7:a6:37:20:37:
fe:f8:c0:d3:ed:ce:05:ce:d6:a2:8d:21:04:cf:0f:
64:74:4d:c3:46:07:d3:c4:09:7c:e5:bb:c5:27:96:
cd:53:d8:7d:09:b4:ac:af:1b:f2:78:e5:02:7b:e0:
c6:24:be:2f:ea:34:b0:16:db:20:e9:84:9f:11:f4:
07:6f:d4:b0:83:09:3f:68:29:ec:8d:1f:2b:4b:31:
4f:76:78:97:31:05:26:2b:c4:16:22:21:4e:e5:b6:
f2:46:23:fe:c1:47:d6:1c:b1:07:70:42:42:91:9b:
3c:f7:54:70:87:cc:a9:99:f8:ff:d2:d0:ac:a8:c4:
b5:55:9e:9d:3a:d6:cf:f7:be:7a:13:df:80:35:4f:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:F0:2B:B7:35:F8:01:59:E8:A1:24:CC:D5:54:02:00:90:01:E0
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:e8:44:af:42:ee:09:b7:5e:21:22:89:bc:97:a4:6a:bf:
f9:73:0b:3e:2c:43:c0:67:43:2d:26:7e:41:3a:83:31:01:4d:
d7:7a:6a:1c:05:4d:d8:5e:86:f2:4d:c1:6a:46:a2:65:7f:a4:
05:fb:1f:fe:03:49:e1:fd:74:01:ae:db:93:19:db:6d:7b:db:
66:eb:3f:35:d3:7a:7b:2e:f7:57:78:59:a0:ad:dd:12:23:6f:
f7:05:bd:3f:e8:95:f8:f2:d1:8c:1a:71:5b:0b:ab:ec:a6:3b:
48:f4:67:06:ac:cb:63:c5:58:ec:3e:50:3c:78:3b:4c:ab:76:
d8:18:d7:bf:ac:3e:ad:0a:ca:f8:f9:74:57:f1:1f:37:15:15:
64:de:a4:ae:67:81:32:23:7f:02:3f:5d:67:3f:b0:a0:8a:4a:
9f:6b:00:1d:bd:ca:4f:d7:e3:1a:bc:8c:00:43:63:7c:23:a2:
4b:10:0d:16:b2:78:42:0f:21:86:c6:88:8a:d6:98:e8:5f:6b:
d6:89:e9:bb:41:ac:fe:50:44:b4:84:8a:b1:25:f7:cf:79:fb:
8f:46:72:a4:41:53:67:8f:4d:72:f0:fd:84:ca:d1:89:68:0f:
47:e1:93:28:03:97:2f:ce:82:5e:60:6d:66:d1:f3:eb:e7:11:
24:65:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:47:52 2025 by rpki-client