Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: z081Zl9MJcSCnQbyg4eYi20sJJ91Zl0iH7PqZHSMdJY=
Subject key identifier: 29:2D:6E:6A:96:08:40:BE:BE:E7:EF:21:EA:AA:DA:52:C5:11:21:5D
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 01974C68C7C1AFC1690C4C8E9D1551F4B067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0729
Signing time: Sat 07 Jun 2025 22:00:24 +0000
Manifest this update: Sat 07 Jun 2025 22:00:24 +0000
Manifest next update: Sun 08 Jun 2025 22:00:24 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: hBtZ8cIsVwdhPvTc2r4oWvxkuLexJFe0Rzl6ZuZcdvA=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c7:c1:af:c1:69:0c:4c:8e:9d:15:51:f4:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jun 7 22:00:24 2025 GMT
Not After : Jun 8 22:00:24 2025 GMT
Subject: CN=292d6e6a960840bebee7ef21eaaada52c511215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:06:57:8d:78:64:d0:72:3d:50:2e:fe:4b:
9c:56:ce:58:09:8a:b2:fe:ed:56:4c:f5:ee:2d:98:
06:d4:f9:ee:75:e5:8f:00:7a:58:51:ba:e1:c5:35:
48:b5:be:af:15:55:11:f0:c3:6c:e1:a0:82:e5:df:
c7:c8:5f:af:ba:91:34:4c:0b:94:bb:81:0a:62:90:
91:cd:00:8a:66:3a:13:aa:cd:12:e1:f1:e0:dd:94:
fb:51:3e:cf:18:8a:78:26:0b:d5:b6:06:37:3a:6e:
1f:ef:d8:2b:e8:9d:83:d4:05:9b:02:a9:90:f8:da:
93:49:b8:e1:3e:e7:1a:6a:9c:83:94:f2:b5:1c:d0:
6a:1d:b6:59:b7:05:51:e8:21:54:e0:26:f2:ec:5d:
95:0c:e7:3e:8a:6c:70:01:af:5a:8a:3d:0d:de:ca:
76:e0:0d:63:10:b0:ea:58:de:37:be:47:04:37:01:
cb:15:bb:38:0f:b7:b4:e4:42:5f:47:6a:04:23:00:
78:e0:48:be:df:f3:73:d0:79:94:37:ab:c4:b1:de:
e4:e0:ba:8e:cc:d4:dc:fa:df:cf:e1:94:1f:67:6a:
bb:1d:89:e5:2d:f5:c4:83:22:75:59:d0:64:72:e7:
48:08:5e:0c:eb:55:e1:0f:a5:81:9d:62:04:c0:b0:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:6E:6A:96:08:40:BE:BE:E7:EF:21:EA:AA:DA:52:C5:11:21:5D
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8e:84:f4:a5:83:35:bf:55:03:33:6d:ee:7d:8e:d4:c6:66:
e8:57:e3:55:e7:fa:a8:04:73:00:30:01:69:04:1f:8f:15:5f:
39:05:37:78:a3:63:f2:7f:7e:76:08:d7:23:5b:ae:84:99:1d:
9f:8c:a5:06:69:66:11:75:cd:7b:51:85:5c:25:9c:02:26:ed:
98:09:cf:35:19:3e:51:4c:70:8e:a6:71:0e:e7:32:97:c6:bc:
91:a2:fd:06:53:35:90:2a:14:ce:a6:d9:20:b5:82:c8:5f:9b:
82:89:4f:5e:5b:d1:76:db:31:6c:74:4b:75:bc:d2:e6:ea:96:
ee:43:32:e0:11:97:7b:56:4e:aa:e5:8e:85:07:21:2b:0e:42:
da:cf:12:10:7d:dd:7b:85:4b:99:9f:20:75:9c:77:f8:b5:38:
b6:5d:c8:a1:0d:e2:f8:0d:ad:92:3d:c9:eb:8b:b2:90:60:72:
ad:60:8c:54:af:33:cf:9f:51:d7:72:1d:dc:61:66:31:5a:23:
b2:bf:4c:a6:af:43:81:54:3e:39:a6:ba:20:83:d7:3d:49:47:
2e:16:b2:12:0e:b1:a7:75:5d:2f:b4:f7:dd:c2:b4:73:50:1e:
c3:98:50:e0:aa:6e:33:29:9b:8b:3c:43:3c:cf:c2:bc:d3:a9:
a6:5e:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:34:23 2025 by rpki-client