Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: H2zuxVBXLXT6QOD73YixMta9I0EsuoxH3zXctPJjBU4=
Subject key identifier: DE:89:45:6F:D2:34:73:8F:40:A4:1D:40:54:94:24:E7:C9:4E:DF:9D
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019747E77840339961AEC9A7F668F4129CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 03A4
Signing time: Sat 07 Jun 2025 01:00:41 +0000
Manifest this update: Sat 07 Jun 2025 01:00:41 +0000
Manifest next update: Sun 08 Jun 2025 01:00:41 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: fZ6xhPcYPcWdk+NWapzMkPKX36uL1kxJmzfnD1rdEkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:78:40:33:99:61:ae:c9:a7:f6:68:f4:12:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jun 7 01:00:41 2025 GMT
Not After : Jun 8 01:00:41 2025 GMT
Subject: CN=de89456fd234738f40a41d40549424e7c94edf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:c4:bd:07:69:a8:f8:94:9f:a2:48:e1:d7:
bf:ac:dc:f5:cf:e5:7f:8b:1d:88:d6:1d:65:ba:3b:
1d:73:3b:8e:97:a8:16:32:7d:d4:26:8a:99:ac:ed:
c7:f6:b9:57:a2:c9:ea:38:e2:48:ba:c8:66:d4:1c:
4c:e2:ac:89:88:2c:1c:e5:5b:70:a2:6d:7e:3f:01:
b3:46:91:ef:1d:18:b3:7f:b9:c6:3f:6b:69:62:df:
d8:a3:a0:95:a6:bb:9a:b0:88:b0:53:67:df:1e:c6:
42:63:a3:73:42:78:bd:95:5a:98:7d:cd:b8:cc:e0:
4c:d0:e6:f7:f5:61:f6:b4:fb:05:f8:36:af:b8:a6:
67:48:46:17:06:fe:ba:45:b7:24:b1:c3:3b:6c:64:
7a:bc:c1:46:14:e7:c4:d0:89:fb:4d:31:95:c9:45:
59:b8:b8:bc:ca:c0:68:1b:55:ff:0b:0e:53:85:af:
00:59:1a:0c:66:34:e1:38:81:75:89:9e:af:22:fe:
de:91:63:fe:5d:f1:15:d1:0d:cb:df:8c:65:48:7e:
14:be:5a:56:ad:a4:17:ae:f8:5d:c3:1d:1c:87:9a:
38:e6:ff:50:2e:dd:3a:a2:9b:61:36:7c:0a:23:e9:
c6:8f:64:28:e8:6c:7c:90:6e:66:b2:65:42:f2:81:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:45:6F:D2:34:73:8F:40:A4:1D:40:54:94:24:E7:C9:4E:DF:9D
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:47:07:ae:f1:10:dd:ed:1f:25:73:bb:4e:82:49:7a:35:
1b:b1:43:90:4e:7f:e0:4c:a4:6a:62:97:80:99:53:36:5d:7a:
d3:27:87:f7:ad:91:4d:b7:b7:a8:81:6f:10:20:64:94:dd:bd:
ac:32:06:a5:0a:5f:3b:04:b4:74:26:cd:1a:03:d7:ba:f5:2d:
c7:15:7b:70:b6:9a:ad:d8:31:7e:f1:27:3d:27:61:34:25:09:
4d:b1:f0:57:bc:36:50:c0:8a:b1:ae:0b:9e:e1:b2:1d:d5:bb:
73:52:31:c0:aa:98:f6:0d:f1:fd:0e:12:27:f9:0a:d0:31:64:
19:fd:87:6f:9c:30:a6:d9:a1:0a:09:43:f2:5b:b7:7f:c4:0f:
1e:df:70:3f:77:fc:38:c5:21:b6:35:33:58:ea:1b:5d:29:14:
c9:f5:a3:63:6f:fa:9a:7a:51:68:9c:7f:d4:f6:c1:05:2a:13:
7f:cf:b7:1d:ea:88:5a:4a:bc:6d:e0:4b:e7:60:be:93:87:48:
aa:12:07:57:e6:a6:e7:d5:7d:49:fc:10:00:53:bf:ad:ac:d1:
06:82:fa:f7:89:d1:79:0f:4a:a2:15:ce:30:02:8a:b6:7a:8d:
f2:58:95:2f:11:4f:4c:9c:b5:20:7c:f0:37:8a:70:be:9f:f6:
32:6d:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:04 2025 by rpki-client