Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: vLtaSgfI/XD+joW7D9/6hkuPX3zbZdHgABs7rvp9FPI=
Subject key identifier: 54:47:5F:1C:70:81:B6:DE:11:EF:03:AE:91:D1:A7:38:91:EE:14:89
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 0197B88F2F5B395F697B0516357218C5C8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 03B8
Signing time: Sat 28 Jun 2025 22:01:20 +0000
Manifest this update: Sat 28 Jun 2025 22:01:20 +0000
Manifest next update: Sun 29 Jun 2025 22:01:20 +0000
Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: LBUXB8+CYyAwFM4KKLnZGz/nIisFFFrY8S/d9oa5L3c=)
3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:2f:5b:39:5f:69:7b:05:16:35:72:18:c5:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jun 28 22:01:20 2025 GMT
Not After : Jun 29 22:01:20 2025 GMT
Subject: CN=54475f1c7081b6de11ef03ae91d1a73891ee1489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:38:d1:22:58:a7:b2:c9:06:38:66:bf:c5:
de:6a:ea:a0:01:09:d5:39:6d:01:d6:74:d3:f2:9a:
50:e2:f4:7e:40:34:84:69:5d:15:25:a6:96:13:d2:
41:a5:51:e8:e9:e8:f3:fc:e6:c7:27:50:1a:f2:7b:
74:66:ee:c7:86:ed:13:89:db:fe:57:c2:4a:26:d7:
d4:87:7a:9c:38:16:5e:34:81:ec:48:38:f2:74:5a:
79:45:9c:19:34:a8:84:bd:eb:36:48:ab:fb:1c:dc:
91:43:ed:99:0f:14:bf:b7:84:e9:09:01:7d:ce:01:
93:5c:4f:fc:02:f2:a9:5f:9a:eb:bd:f3:17:ed:51:
b2:0f:31:c1:0c:ff:47:ab:bf:ca:8a:8c:e8:58:30:
52:7e:f3:f1:81:c8:0c:f3:08:1c:02:b6:76:71:22:
b2:5c:84:53:a6:25:76:d0:82:9c:c5:25:97:81:75:
f2:86:dc:dd:9f:87:f1:1a:85:ed:eb:9f:c2:d1:c6:
00:ab:27:19:87:bb:26:04:fc:32:fa:14:9b:de:c7:
55:96:3a:b5:2a:0c:c2:a4:99:36:42:1b:32:89:1a:
b2:9e:b4:9f:ca:da:b9:22:48:6b:a7:f3:38:3e:47:
70:e0:1e:b7:da:81:22:13:2a:35:d3:3d:eb:b8:85:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:5F:1C:70:81:B6:DE:11:EF:03:AE:91:D1:A7:38:91:EE:14:89
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:58:b3:97:3f:40:77:41:a0:22:03:d8:76:84:45:8f:b6:59:
7b:47:b2:33:36:af:0e:e8:ec:44:a6:86:bd:85:b4:ff:48:3a:
de:cb:6a:aa:57:6c:6b:f0:3b:a4:bd:fb:c3:f9:3a:b9:14:35:
79:6e:e1:2d:cf:82:3a:03:ab:d8:30:d9:f5:d3:c3:d2:1f:a4:
8c:9e:99:06:15:e5:d3:c5:5a:51:d0:6c:44:c5:4b:98:da:65:
ac:97:4b:09:65:08:d7:92:f3:6e:ac:10:e7:69:3c:d1:44:d7:
f9:fc:f6:30:bc:60:ce:a7:61:1d:a2:de:d4:f7:4f:3d:a8:82:
4b:ac:86:53:0c:5e:43:0a:e1:25:2b:6e:97:d5:96:ba:06:ed:
62:a8:e7:15:05:9f:eb:6a:30:31:6c:03:a4:b6:ff:fd:73:6f:
3b:e2:87:b1:bb:c9:9d:64:a2:94:76:c9:3c:35:a6:a4:1a:de:
5a:17:db:a7:b5:25:2d:b7:fa:39:0b:49:66:a7:5a:cf:ee:ae:
c1:61:88:be:7f:3a:ca:be:be:36:19:90:a7:d6:62:54:95:be:
d4:c0:7c:89:5b:e3:43:7a:ff:78:70:bd:f1:bf:55:96:cf:bb:
23:c9:ca:ba:25:24:31:58:06:e8:03:f9:28:86:fa:e6:5a:cf:
35:f1:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:10 2025 by rpki-client