Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: VdHiiFCiXQjOZmjI2Bh4PR0Uo6E+c0k7YfpNs3nbIyY=
Subject key identifier: 5F:9E:D4:4E:1D:55:24:01:94:C3:08:49:B0:FC:47:D2:FB:29:3C:83
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01974AB179E22C1EF1FD5EA4DA4236C014EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0A20
Signing time: Sat 07 Jun 2025 14:00:34 +0000
Manifest this update: Sat 07 Jun 2025 14:00:34 +0000
Manifest next update: Sun 08 Jun 2025 14:00:34 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 9owIA2FVm6EEvHYad+H3xQoB4uXeCx8M15vQExHO4Qo=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:79:e2:2c:1e:f1:fd:5e:a4:da:42:36:c0:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jun 7 14:00:34 2025 GMT
Not After : Jun 8 14:00:34 2025 GMT
Subject: CN=5f9ed44e1d55240194c30849b0fc47d2fb293c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:14:b7:28:8b:12:ee:fe:83:29:fd:66:de:
76:7f:5b:2d:fb:ae:37:9e:12:70:1e:6b:ca:62:d5:
7a:11:ee:8c:81:36:6c:35:f9:2d:fb:e6:1a:d8:86:
60:f9:96:f7:f6:a7:e6:eb:c7:69:2d:27:04:19:5e:
9f:28:ce:e5:9c:e1:c2:06:58:6e:5f:57:6a:63:a3:
ab:18:4f:f4:e7:d2:ec:2f:1b:4b:db:90:94:eb:3e:
63:e6:8d:24:0f:b5:34:1b:d4:a0:d7:d0:9e:2e:40:
83:6c:21:25:5a:53:c4:8a:91:a3:10:c8:c9:9d:8a:
64:af:5f:d8:ae:dd:85:13:7c:43:9a:7b:0b:29:2d:
bb:ed:46:1f:04:3b:62:dd:f9:b8:28:5b:bb:df:52:
9e:34:66:c5:3b:19:4f:0e:5e:36:3f:87:0b:5a:35:
68:c3:47:3c:42:d8:f8:7d:ff:2a:93:5e:1b:61:89:
ec:e4:2a:2a:1d:50:d0:83:f6:58:71:29:7e:5e:41:
ea:98:cb:97:6d:01:c7:fa:82:d1:a7:a4:75:71:e0:
98:4e:b0:e1:0e:9d:f5:87:f2:7f:70:df:be:16:32:
c4:b9:48:7f:25:db:7d:0d:c4:0a:97:35:d7:b9:87:
15:24:54:6a:3b:a5:09:f9:ce:dc:59:05:1f:8f:e2:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:D4:4E:1D:55:24:01:94:C3:08:49:B0:FC:47:D2:FB:29:3C:83
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a8:e9:df:90:c2:0c:89:fb:74:53:4a:45:36:62:f0:bd:0e:
3b:b9:69:d2:11:af:53:29:72:ac:b7:0a:d4:8e:20:fe:50:51:
83:a8:12:6b:e9:e0:08:6d:ac:65:6e:5e:07:eb:55:98:e0:f7:
fa:a0:f0:6d:b3:a0:7e:6c:02:7c:52:8f:f0:12:69:80:c9:45:
b5:46:d2:77:3c:9f:f3:21:78:ad:fd:81:a3:b1:8c:da:fe:2e:
09:b8:a7:05:42:15:ed:cb:43:d0:8f:90:dd:c7:3f:46:a5:35:
fd:79:58:95:e2:48:47:28:06:5e:f0:57:80:dc:9f:63:36:04:
2c:0d:e4:57:76:3e:ce:b5:e6:8f:6c:2c:cf:63:b6:ac:01:a5:
d2:20:00:0d:8f:45:97:5c:0b:0f:5f:5b:ff:ad:7e:49:e0:7c:
2d:85:0d:db:61:6b:98:5a:b0:df:fe:ca:77:e2:d3:5a:1a:2f:
2d:19:d7:78:bc:b4:ad:81:57:3c:0a:c5:54:b4:e3:92:97:96:
b8:5d:7a:c6:74:87:91:de:da:db:63:aa:80:37:92:6d:f7:df:
ed:81:87:80:77:e6:ba:db:01:8b:fb:5b:cc:a4:a2:20:63:dc:
81:0d:0f:ac:b3:59:27:44:c4:fe:73:d6:cd:ea:13:48:f9:27:
e8:f7:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:23 2025 by rpki-client