Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: 4Bby7jTmfxy36P24lQE8S/tOaGqiqOWo1dR91mlWDvk=
Subject key identifier: 5F:B7:15:8F:14:C9:C6:88:65:CE:61:32:42:0A:19:1F:3D:AD:A3:AC
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 0197B6A24281748B1F4B2B25343D7BAFF915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: RJv0/4QBFKVALtha/U+KpJ8DjIHOpzT3yHaPLA5qbDE=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:42:81:74:8b:1f:4b:2b:25:34:3d:7b:af:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=5fb7158f14c9c68865ce6132420a191f3dada3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:c4:e3:ad:9a:cc:37:da:c7:28:45:1f:9e:
e7:df:32:ca:91:95:ef:2d:4f:91:9a:63:47:79:e7:
d9:8e:5e:b6:5c:73:cf:03:5f:45:6f:6d:9a:e3:fc:
69:f1:ac:ee:ef:82:c0:24:f2:91:9f:86:92:54:89:
12:af:c4:ca:8f:d4:26:cb:d1:72:70:e6:3e:77:47:
2a:b9:62:6a:02:3b:5e:23:00:57:9b:68:ed:3a:9e:
35:78:32:92:00:fc:51:3b:e4:f6:c1:c2:ab:01:b5:
5f:26:44:ce:d3:63:14:65:ef:f2:f3:4c:34:41:c6:
ca:e3:4b:dd:9e:8a:2b:16:31:f2:96:38:03:10:d3:
e4:b6:e3:c0:4d:d5:6f:c4:64:39:9e:c7:d3:75:e5:
75:ef:27:1c:8e:67:97:5f:9b:cd:39:29:c6:3f:43:
08:a0:57:9f:44:49:06:20:ae:00:86:13:ae:eb:42:
bf:f8:f6:07:eb:ab:94:04:d3:67:1b:00:f7:f8:62:
b0:73:da:79:bb:fc:ab:34:37:78:d8:f3:7a:c4:87:
95:c5:86:47:3c:99:24:28:42:4d:56:5c:ae:a0:15:
b0:ab:ba:84:91:7a:66:05:50:e7:eb:1b:b5:91:89:
d9:6b:73:80:34:70:bf:23:e0:8d:29:50:c0:d1:83:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:15:8F:14:C9:C6:88:65:CE:61:32:42:0A:19:1F:3D:AD:A3:AC
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8b:e0:dc:3c:e5:de:59:43:ed:8b:fe:b8:36:3c:d6:3a:eb:
97:db:39:c9:f8:d5:bb:e1:a8:7b:1c:45:f8:41:30:8d:b3:0a:
8c:8c:e3:4b:ab:cf:eb:d5:33:0a:3c:a5:1b:4f:a1:7b:76:14:
e2:a6:79:cf:17:39:f2:11:6d:c6:29:6c:f7:f6:cf:2e:03:3e:
fc:5e:19:35:40:73:4c:67:18:36:07:ac:d0:19:0d:e8:f8:8b:
d3:a1:67:ec:34:83:53:4e:e7:c1:3c:6a:b7:5f:dd:c7:25:95:
40:3c:6f:73:f1:69:8f:be:7c:b2:ea:4f:e9:31:55:d0:f2:e4:
64:f8:a2:a6:dd:0a:74:52:61:c8:d8:11:62:e3:16:bd:d5:da:
ef:8f:47:de:2d:43:55:4f:d4:c9:ff:bf:19:75:49:63:cc:93:
7a:92:92:6e:02:41:5a:19:f4:06:b7:f4:fa:84:6e:57:73:d1:
84:02:b3:62:22:3a:e6:89:fe:b3:19:0b:3a:d0:57:6e:a1:cd:
2d:da:48:c3:87:7f:de:a9:84:b2:9d:90:5d:95:7a:db:1d:95:
80:0c:d7:5a:7b:b4:e8:c1:d8:58:04:fe:1f:25:69:e0:99:34:
d6:96:47:ef:48:c1:60:3a:b7:df:27:c1:24:5b:23:06:99:83:
74:bf:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:49 2025 by rpki-client