Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: LOeuAnfxnTJRmPbHQNHJzVnsXVO4NiH0hCijhFfULiw=
Subject key identifier: C0:0F:E5:99:AE:5E:35:78:E2:1E:7E:0A:CE:FB:08:B8:CF:85:2D:A6
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 01974A0CCEEC58BF0786BBC1097550B24DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0E1A
Signing time: Sat 07 Jun 2025 11:00:42 +0000
Manifest this update: Sat 07 Jun 2025 11:00:42 +0000
Manifest next update: Sun 08 Jun 2025 11:00:42 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: g9eATGAGAEJ8V0GZtCfZ9FUsS33axqPtRvdTV10Hrus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ce:ec:58:bf:07:86:bb:c1:09:75:50:b2:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jun 7 11:00:42 2025 GMT
Not After : Jun 8 11:00:42 2025 GMT
Subject: CN=c00fe599ae5e3578e21e7e0acefb08b8cf852da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:00:d6:d0:72:ad:71:e6:eb:4d:33:30:83:
da:fc:67:36:ec:23:c0:19:3e:86:89:69:4e:2d:fa:
6e:1f:fd:61:8b:1f:2d:da:84:5e:32:4e:be:d1:64:
24:19:ef:60:fd:99:a0:fa:ed:5d:9e:23:ac:52:86:
2b:36:9e:2f:38:e4:ab:1c:48:86:b2:6a:2f:f4:d8:
e1:c1:18:b0:9c:4d:b9:f9:88:f2:bc:c5:2c:dc:0f:
6f:19:c2:66:57:1a:b4:db:7e:bc:da:65:f8:02:92:
b4:8a:02:6b:1e:7f:6a:b9:65:33:1a:24:c8:6a:92:
3d:11:0b:4b:97:53:1c:1c:85:55:18:9f:32:c5:1b:
b1:b6:0b:84:41:ba:0d:a8:f1:9a:a4:ba:f7:fc:41:
84:3b:42:de:d5:a5:9b:6b:f8:53:75:a8:57:b3:b3:
3e:07:89:b9:7a:9a:f4:b5:63:58:8e:e7:a7:2f:e9:
5c:fd:07:75:2e:52:03:3d:67:95:8e:d9:fe:da:18:
23:34:63:dd:82:80:06:19:ea:04:95:94:36:cd:4a:
92:bb:14:cf:f9:3f:e1:12:20:9d:34:4d:fa:77:f9:
1b:8f:4d:40:57:5a:e4:8d:98:da:3d:a6:34:0a:da:
14:9f:f4:70:5d:d5:d3:61:26:fb:1f:83:44:e0:c8:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:E5:99:AE:5E:35:78:E2:1E:7E:0A:CE:FB:08:B8:CF:85:2D:A6
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:8e:66:89:f8:ce:6d:0b:d6:31:23:5a:7b:85:b0:2d:88:
05:22:52:b6:6f:cb:e0:5c:32:95:73:fe:21:f8:3a:a6:0f:4a:
e9:a8:ac:ce:87:65:c5:42:4d:41:ca:ee:a6:98:83:42:1e:28:
ff:7e:5a:23:22:68:dd:d8:2e:84:6d:00:05:69:c9:c0:09:55:
5a:b9:86:e7:d9:36:16:89:ec:49:4c:b0:00:26:5a:a2:e9:93:
1b:21:28:3d:09:11:c0:cc:c6:4a:b7:ce:c9:dc:4e:ca:ad:7c:
17:21:c7:80:8c:87:c3:10:71:c9:77:30:dc:01:14:af:de:b2:
c2:fa:9f:c3:89:46:b0:42:ea:ae:25:47:d9:52:46:0f:c4:39:
9c:e5:33:cd:2a:6e:f4:8c:fd:a3:71:63:0f:08:48:94:e9:c0:
1d:96:ab:72:22:09:06:2f:21:43:9e:63:e9:ec:8d:2b:39:b5:
f4:6f:fe:79:1c:f7:de:a6:64:be:27:2d:09:ff:7f:9c:c2:f8:
35:41:94:f6:12:3f:d0:a1:db:1f:4c:3b:d9:66:3c:98:ae:fd:
3f:8d:ed:dc:5c:39:78:18:63:c4:f5:7c:6a:5d:7e:25:18:7e:
a7:83:73:d9:a1:cf:12:3a:b0:70:0c:62:36:08:7b:18:0b:22:
ab:92:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:29:35 2025 by rpki-client