Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: kqFRcdFZ5PZHh1B0A2HIxo5gK//Lx5Lk+UGtRcWHNX8=
Subject key identifier: 0E:41:40:49:C3:0C:34:5B:D0:B8:6D:7A:06:C6:B9:3F:57:17:70:E9
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 01974A7A7498BEE6619D46658EB5D5C43102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 10A5
Signing time: Sat 07 Jun 2025 13:00:28 +0000
Manifest this update: Sat 07 Jun 2025 13:00:28 +0000
Manifest next update: Sun 08 Jun 2025 13:00:28 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: AEi5wW+k+8vUjP1Zu7pjku7Rg/QfdN/WynvYGkUM2Rw=)
2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:74:98:be:e6:61:9d:46:65:8e:b5:d5:c4:31:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jun 7 13:00:28 2025 GMT
Not After : Jun 8 13:00:28 2025 GMT
Subject: CN=0e414049c30c345bd0b86d7a06c6b93f571770e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:c6:e4:1d:6e:35:9a:9e:d0:92:76:42:9f:
2e:a2:b6:96:a7:0f:f9:0d:4d:40:96:4d:37:83:d8:
fa:fb:f1:e0:2f:56:ff:53:7c:10:6f:c3:72:96:29:
57:1e:0f:7b:ad:0c:59:44:f7:6f:15:cb:16:a0:e4:
45:1d:fc:40:5e:98:17:6c:3d:f8:f9:17:3e:10:49:
d6:59:55:a4:aa:fd:1d:59:38:fc:c0:23:e3:ab:e7:
12:ff:01:47:f9:2f:b5:48:67:c0:f4:d2:5c:f5:0a:
ea:98:30:de:5d:b4:8b:23:ea:a1:c1:3d:de:2b:cb:
25:41:21:82:10:86:c1:85:ee:eb:e3:42:59:ea:0b:
25:da:da:4c:46:4a:9b:8b:85:70:25:1c:74:5b:da:
b8:e4:62:b4:40:f1:f4:28:5c:86:4a:70:ff:63:6c:
33:10:3c:46:ef:10:f1:31:82:4f:3e:0d:81:79:7a:
d0:0a:e9:14:99:54:70:81:fe:0f:a1:c8:cf:a1:eb:
0f:e4:ce:c6:ae:ec:25:2f:6c:05:1e:87:6a:00:4f:
d1:e0:a9:89:60:53:74:41:8b:2e:54:98:a7:aa:6b:
0b:cd:3d:9a:64:65:38:95:d3:89:d0:c9:0d:6d:de:
5c:e2:b4:c1:cf:85:e5:b6:6e:d6:cb:5b:51:95:ad:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:40:49:C3:0C:34:5B:D0:B8:6D:7A:06:C6:B9:3F:57:17:70:E9
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:7f:0e:5e:c8:6e:65:1b:74:50:b5:47:00:61:43:7e:4a:
37:9c:a8:24:81:a3:71:90:9e:bf:88:e2:c3:26:2d:31:2d:01:
91:13:46:9c:58:db:6e:7d:3f:79:89:05:53:e8:d9:b7:8c:77:
af:01:3c:09:28:63:17:98:41:ab:e3:4a:62:77:19:8f:20:99:
bd:ac:33:ed:16:1c:f3:a0:97:b4:cc:32:d7:1b:08:4d:5c:fd:
56:e6:f2:4e:cf:3d:54:77:02:e6:bd:34:38:91:7d:b9:5a:5c:
c6:a3:60:c4:7a:2c:41:dc:e2:86:8c:2f:15:a5:51:cc:6a:c0:
df:2e:d5:ca:1d:c4:8b:2e:2f:de:25:5e:87:23:48:6d:e6:04:
0a:e6:e2:45:05:e4:5c:5c:a6:a0:26:9a:a6:10:97:e7:f3:a8:
db:0c:90:aa:1b:2d:61:20:d1:98:7f:41:7d:6c:93:1a:d4:2a:
e3:91:6c:fc:e9:c5:d3:5d:bc:5d:35:b5:80:7d:b4:29:00:e8:
3b:45:4a:18:5c:6d:9f:9a:9e:21:46:7e:86:83:af:41:cf:56:
41:26:e6:6d:92:03:f9:fc:02:e6:c7:4c:7d:45:8e:82:f1:e2:
df:89:30:f8:d5:66:58:ae:47:7f:f3:bd:21:68:40:6a:30:31:
e5:e3:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:42 2025 by rpki-client