Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: Ap6HEZNTUhPorUL6Bg9dq1gupxg6iinLcdCx5Qb+Nhg=
Subject key identifier: CD:09:9F:D5:85:11:8F:3E:44:88:24:AC:9A:A9:8C:AA:83:F4:77:50
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 01974B565EC9DBBBFCD4C80068322DE530A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 11A1
Signing time: Sat 07 Jun 2025 17:00:40 +0000
Manifest this update: Sat 07 Jun 2025 17:00:40 +0000
Manifest next update: Sun 08 Jun 2025 17:00:40 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: fY5b4GQTLnKNw1+QcZ4ze8ahB1efnwPvmklRhreoBSo=)
2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:5e:c9:db:bb:fc:d4:c8:00:68:32:2d:e5:30:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jun 7 17:00:40 2025 GMT
Not After : Jun 8 17:00:40 2025 GMT
Subject: CN=cd099fd585118f3e448824ac9aa98caa83f47750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:1a:5f:e7:89:96:8a:6a:7a:a5:3c:df:72:
7a:c5:72:72:65:7b:33:08:9c:5f:d3:56:31:5c:0e:
30:b8:5a:0b:d3:3a:69:ae:6e:db:3d:58:87:50:af:
79:eb:28:5f:d3:a7:af:ff:c4:6e:6e:c7:9c:af:1d:
fe:63:04:79:23:91:ca:15:41:ab:70:b8:ec:6e:c7:
e3:18:05:a6:13:22:c3:8d:76:c5:83:85:50:b8:7f:
56:07:2f:96:e0:75:51:76:c5:27:1b:21:9f:0e:56:
74:b3:34:cc:c3:75:f4:3c:90:12:db:b8:35:3e:37:
2a:dc:7c:82:a7:7a:1f:17:d7:d4:c8:49:b4:89:2a:
02:4b:68:13:0b:5f:7d:db:89:f1:f9:d2:ed:1e:44:
c4:35:b9:de:b1:44:ee:b6:6b:47:d6:f3:20:28:13:
5d:a1:d6:5a:e1:33:38:21:1f:ed:7b:77:7d:81:12:
db:14:3a:9c:88:70:6a:b9:c7:96:6d:2d:74:68:5d:
8a:24:12:c6:cd:4a:5b:dd:cd:cc:e5:67:db:99:12:
4e:2f:2b:6c:29:b8:26:39:08:83:7e:31:04:f5:72:
2e:e1:d4:7f:a2:0d:18:2c:a4:35:2a:84:c4:de:37:
3b:90:a8:03:d7:77:61:5c:49:f0:cd:c9:21:20:d7:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:9F:D5:85:11:8F:3E:44:88:24:AC:9A:A9:8C:AA:83:F4:77:50
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:c3:b8:76:d2:13:a2:c1:4c:c7:73:99:d0:c3:27:09:fb:
84:fa:cb:e1:47:6a:a5:ee:db:99:67:97:a8:2f:be:29:bc:06:
35:47:9d:19:b0:4f:4f:51:e5:8c:09:7f:c2:5c:f7:e0:a0:d6:
53:c5:79:4d:b9:17:27:ea:f2:a6:96:1f:5d:82:74:c6:f1:7b:
a8:8c:ca:17:2a:0b:b8:14:f6:78:34:73:df:16:e6:0c:40:98:
69:5a:79:24:fd:3d:6c:09:45:23:db:24:2a:c8:17:22:6d:97:
1e:d3:15:19:4f:4a:56:29:a5:9b:f8:9d:5b:30:e5:0a:e1:6c:
4e:69:15:e4:ab:2f:ca:49:3b:44:51:37:64:17:30:bd:22:bd:
79:42:6a:54:e5:34:25:69:3b:95:e4:ef:08:81:fd:30:2d:36:
20:bf:7e:89:0f:57:5d:4d:aa:be:c2:76:2e:09:63:0f:86:b9:
84:7b:45:5a:04:4a:cd:0a:e4:f8:3a:f1:8c:50:46:05:e7:6f:
38:ba:08:61:34:a3:28:db:d7:2d:e9:0a:5b:54:b6:c4:ad:e2:
81:7b:d8:c3:a2:bc:32:09:54:b5:c4:94:4d:cd:40:6a:de:b2:
da:c7:de:71:dd:80:15:1f:ca:81:db:1c:66:2b:23:05:ed:c3:
92:6d:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:28 2025 by rpki-client