Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: aksOWlBlO0pCAICYDgFD3DXwD3KO9psCotRj2DOA+hM=
Subject key identifier: 28:98:B3:9D:45:B4:EF:1D:8D:3B:8F:2E:A2:C3:C1:77:5F:BA:36:2A
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019749685EFA935DDC7BBDDE3BBDAA98684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:01:06 +0000
Manifest this update: Sat 07 Jun 2025 08:01:06 +0000
Manifest next update: Sun 08 Jun 2025 08:01:06 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: xPQMbry/w3mmWEMA+qeRQBPeZdmKNfqrYhK/BJtt7DM=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5e:fa:93:5d:dc:7b:bd:de:3b:bd:aa:98:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Jun 7 08:01:06 2025 GMT
Not After : Jun 8 08:01:06 2025 GMT
Subject: CN=2898b39d45b4ef1d8d3b8f2ea2c3c1775fba362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:95:63:d7:c1:e0:fb:f9:ee:a7:05:01:77:
19:b4:e1:a6:df:13:07:97:42:c8:2a:7d:5e:e8:62:
f4:ce:40:fd:50:69:d7:55:5c:6e:f9:7f:63:e5:72:
5c:bc:49:d4:20:a6:86:9b:c9:4f:fd:ca:eb:58:9a:
bd:08:bd:bc:ac:d9:8c:1b:0b:a8:20:19:7e:bb:52:
d4:1d:e9:e3:e7:68:f0:82:c3:a6:3d:c6:fe:94:4f:
19:ea:00:98:ff:1f:da:e7:7c:94:cd:4b:0e:19:68:
a5:ab:bc:7b:32:d1:ad:ee:d2:44:f9:82:de:98:68:
37:2d:51:0e:44:77:14:44:34:0e:04:7d:0a:9d:6f:
8b:94:b7:21:c4:6a:ed:9c:92:75:66:37:9f:1c:96:
48:ec:80:2f:19:a1:b8:a9:10:8b:01:dd:17:f0:96:
b8:15:81:ef:4f:4e:8f:19:88:6b:0e:6e:e7:e0:72:
98:a2:57:30:c9:91:6c:39:a0:07:0b:42:c4:41:b3:
79:2e:3b:83:b2:ec:e3:0b:29:62:41:bd:41:b6:3f:
28:32:7d:1b:33:b2:ff:fb:48:62:03:f7:c2:85:37:
9d:52:50:94:4b:e2:be:ee:70:3d:b9:9b:e5:70:89:
d7:40:14:a8:00:88:b7:4e:c6:83:77:6e:a6:dd:6d:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:B3:9D:45:B4:EF:1D:8D:3B:8F:2E:A2:C3:C1:77:5F:BA:36:2A
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cb:d7:7e:c2:60:c3:44:5c:4d:68:22:95:ec:03:66:c1:04:
37:05:2d:95:52:03:61:ee:75:bc:cf:44:0e:d4:43:1e:83:b1:
0c:03:63:90:13:c8:5b:43:a1:58:72:d1:a1:85:c2:82:1f:a6:
0c:19:9f:0d:06:4f:1a:14:33:b2:b6:73:5f:49:1f:62:6c:2b:
11:d8:f8:a4:63:4b:c7:a9:ad:b5:09:7f:9a:28:ad:82:b3:57:
08:4e:4e:68:0c:10:e3:1d:5d:22:cf:ba:0c:c3:c4:14:12:b8:
1b:77:11:34:15:4a:2a:c7:da:f2:ab:e0:80:8c:d0:a5:60:be:
7d:49:ed:df:5d:b1:26:09:d0:67:21:2d:57:3d:8d:2b:ab:a1:
0b:84:3b:3a:66:cf:cd:3e:3b:8a:f8:3b:bc:a8:d6:66:4d:e5:
95:ac:39:74:94:95:67:75:4c:a3:61:ea:80:f2:0d:f3:37:67:
de:b4:48:4e:7b:e8:6b:b4:89:2e:78:7a:98:97:64:5d:61:a0:
30:62:c4:04:f7:5c:87:b6:75:31:a9:ff:bd:43:7b:81:ef:76:
b7:da:d4:05:f3:81:06:b4:75:33:37:3f:63:4d:cb:7e:b5:f1:
03:7e:4f:ae:e6:35:47:e2:9f:b4:41:76:56:30:fa:f6:2c:91:
f4:b4:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:50:50 2025 by rpki-client