Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: 42vT9YOUL5vaVZVW/RrZ2opg2S1ip1fiRC1DL0m+Ulw=
Subject key identifier: 06:00:B1:3E:2A:30:48:F2:FF:BF:B7:35:12:34:D8:1A:7D:6A:66:8F
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 0197B70F055A181CA9BBE7F688FA0B193F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 09E1
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: CWH//7bch0JTnO9WQspQ4R1eSUL1s6uEd8F2Rm70a6s=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:05:5a:18:1c:a9:bb:e7:f6:88:fa:0b:19:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=0600b13e2a3048f2ffbfb7351234d81a7d6a668f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:e4:cb:ed:65:a4:9e:db:f5:13:36:7f:3f:
13:97:64:96:13:76:c2:f0:96:16:e9:bd:75:e7:f9:
48:00:71:97:43:ee:2b:e9:dd:21:35:7a:d5:95:f4:
76:40:cc:7b:67:c8:a3:d2:76:ed:47:61:1c:2e:2c:
51:16:ad:63:32:7b:c3:33:45:5e:9b:0f:e3:32:da:
8f:f9:4a:f9:5f:43:d7:4b:be:06:5f:41:40:6b:1a:
77:28:73:9c:cc:cb:c2:1b:cd:d4:54:d9:8d:07:1d:
e2:8c:3b:06:b6:b9:bd:22:a1:de:d4:d2:2f:a5:28:
37:b3:08:b2:b5:6b:62:55:67:6e:17:41:3a:4e:67:
07:81:28:f5:ce:b2:26:ed:52:a6:81:21:4e:71:c5:
8f:ab:ba:bf:7e:20:6d:fd:71:60:3e:0c:04:0f:c8:
b0:07:51:49:2c:e7:e3:b6:9e:9d:31:1e:98:c1:f4:
c8:c7:67:df:82:ab:cc:42:23:ce:c9:c4:a8:b3:87:
53:ef:76:44:19:54:91:e9:c6:83:5f:e5:1a:98:d6:
91:0a:a0:47:f5:7d:6b:4d:dd:c0:4e:af:c2:a7:a6:
93:41:e9:e5:43:d9:2c:af:98:8d:50:85:dc:6a:50:
e9:2d:fe:23:ef:03:63:0e:a0:cc:97:c0:df:92:ab:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:B1:3E:2A:30:48:F2:FF:BF:B7:35:12:34:D8:1A:7D:6A:66:8F
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:77:38:d6:81:29:51:dd:1f:94:19:c1:49:3e:9d:d8:10:64:
65:e7:e0:d9:b2:58:0a:bf:b2:f0:8a:c1:0e:df:1e:2e:34:b5:
8c:f1:95:b9:49:10:9f:f3:06:0a:9b:f0:b4:ef:c2:e0:94:60:
7c:df:f4:f2:10:97:f7:44:6c:96:5a:b4:bf:cd:6a:d7:01:24:
72:2b:18:cf:6d:3d:fe:da:c1:84:ee:43:91:ab:58:61:39:d0:
a5:91:26:f6:a4:8c:cd:7c:4e:7b:ce:22:0f:d4:97:30:85:e1:
99:b1:93:02:e8:c6:2b:a3:2d:28:4a:a9:b9:77:34:09:62:c1:
3d:65:94:a3:23:a7:6d:d8:32:17:29:0a:fe:3e:e4:18:97:ee:
07:89:91:c6:56:ab:9c:f8:4b:0b:30:e9:f7:ad:a7:28:a6:d3:
cd:b2:7a:4f:ed:30:59:2a:c6:60:c6:29:de:25:27:b4:03:0d:
c7:85:94:5c:58:4b:64:52:41:e5:31:3c:1b:90:b4:9d:b0:40:
e2:90:e6:88:a9:ae:f9:b3:73:f3:05:62:00:bf:4e:bd:11:b3:
3e:fc:3c:e2:83:26:09:bb:26:0a:55:94:05:00:ed:5d:16:8f:
86:af:a3:85:84:9c:3f:73:90:b4:f6:3f:73:07:c9:4a:54:1c:
f5:9f:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:13 2025 by rpki-client