Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: +gbaShf6watzTA3cdMnmqZ9P5C1aJgDVqzBrsz3p1t4=
Subject key identifier: B7:F9:FD:01:5A:EA:DE:49:35:46:50:D7:05:59:4D:1F:E5:34:4B:C0
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 0197B89050A9CD07B70ADCBFE4A15735CEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 11E3
Signing time: Sat 28 Jun 2025 22:02:34 +0000
Manifest this update: Sat 28 Jun 2025 22:02:34 +0000
Manifest next update: Sun 29 Jun 2025 22:02:34 +0000
Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: K1nPITvSOFZEmJ5fib0/zWEkG0R1ww+QoBS8dKxyu40=)
2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:50:a9:cd:07:b7:0a:dc:bf:e4:a1:57:35:ce:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jun 28 22:02:34 2025 GMT
Not After : Jun 29 22:02:34 2025 GMT
Subject: CN=b7f9fd015aeade49354650d705594d1fe5344bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:23:ac:a2:3d:8a:52:b0:92:b5:63:35:aa:
f3:62:56:32:c2:0b:4a:a4:ee:bb:94:71:1b:7a:17:
a7:54:1b:80:0f:aa:03:4d:61:96:43:b6:7c:0b:07:
ea:67:49:50:ab:df:85:d8:5c:7d:a3:f8:b2:0c:62:
da:72:00:b2:1e:87:1c:ac:71:d1:6d:bc:7d:22:d4:
93:41:e2:a8:ee:68:39:0d:d5:b0:2a:4b:0e:a7:80:
43:1a:a6:1a:65:86:a9:73:99:f1:37:1f:82:12:75:
43:7a:33:28:3c:a2:50:68:26:12:6f:86:65:fe:8d:
b6:05:69:a1:77:4b:cf:4b:70:71:fc:9d:25:55:c7:
a6:70:9a:46:ed:67:cc:17:4e:6d:79:ca:93:33:d3:
a5:aa:e5:0b:21:fd:6f:fe:fb:c7:6e:c9:63:9c:d6:
85:ba:20:d3:1f:a2:d1:37:4d:44:ec:d8:a3:c1:6f:
97:0d:d4:61:e3:3a:a4:f6:6d:0e:1f:54:1d:31:21:
36:fc:59:b1:79:05:20:ed:fe:22:e7:64:7f:f8:6e:
78:73:3e:66:1f:0f:fc:bc:40:35:d5:9a:c6:fe:f8:
ce:9b:eb:28:4a:47:b1:5f:d6:17:d9:99:0e:6f:5e:
3a:06:81:54:62:d0:9d:37:ad:b2:95:54:cf:a5:56:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:FD:01:5A:EA:DE:49:35:46:50:D7:05:59:4D:1F:E5:34:4B:C0
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:0c:cf:d4:53:61:81:3a:96:36:98:fe:1d:44:0f:92:77:
35:ff:34:c1:77:19:f2:99:00:8b:61:ec:67:ae:8a:71:c5:27:
6f:dd:6a:83:e6:4c:3f:36:f4:33:79:84:e6:cd:57:7d:ef:18:
8c:3e:a0:1f:12:82:f2:fd:08:2e:c0:24:e6:6f:51:db:5b:9c:
44:47:c8:c9:31:32:ce:f5:bf:99:58:36:90:b0:8f:16:e3:15:
6f:bf:41:d6:fa:a5:93:b4:f0:6d:e7:37:61:45:74:6e:53:24:
20:82:36:57:95:40:42:58:8c:ac:b0:55:05:04:55:6d:21:4f:
60:40:5b:b4:a7:4e:ab:cc:e6:f7:15:95:04:10:a8:c0:f3:fb:
36:b9:ac:38:9a:9f:ae:83:e9:b2:07:3f:ac:3b:ca:09:42:55:
ab:66:99:d5:b9:28:21:b7:ef:9b:83:af:15:8e:2a:50:d3:e1:
d1:0f:36:c6:98:f2:e9:f3:4c:33:1f:c6:ac:5e:a9:de:18:5d:
f5:b1:b4:2a:05:3c:49:58:86:f0:fc:fa:32:7d:c6:65:c9:20:
26:d6:9c:e1:8c:4c:4e:79:cb:57:50:79:02:a0:22:04:6f:0b:
b9:ea:94:70:3c:c0:cf:69:aa:92:3a:41:0f:b2:fb:12:01:48:
06:58:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client