Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: hTh99jtcRgg6hItgcikjzzmom9HJ6pgQQ+9VTSRZyIE=
Subject key identifier: 36:90:70:E9:9D:87:75:97:49:56:23:8B:8B:9C:8C:88:1E:9C:C3:AB
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 0197B5FBF1FA1BC671E9AA391AAA476E5912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0E6F
Signing time: Sat 28 Jun 2025 10:01:16 +0000
Manifest this update: Sat 28 Jun 2025 10:01:16 +0000
Manifest next update: Sun 29 Jun 2025 10:01:16 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: I65Vab7/qXr+0M1aT7igSwcdTIMVILeuf0eftaIyt80=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f1:fa:1b:c6:71:e9:aa:39:1a:aa:47:6e:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jun 28 10:01:16 2025 GMT
Not After : Jun 29 10:01:16 2025 GMT
Subject: CN=369070e99d8775974956238b8b9c8c881e9cc3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:22:91:27:4b:75:0e:22:5f:40:41:19:85:
60:31:0a:7c:5e:ab:9e:fe:9f:34:54:8c:d6:6a:e5:
bc:1a:17:26:be:c0:70:55:21:e2:ae:ba:cf:57:25:
26:31:43:0f:f5:96:ab:b8:55:ef:40:f5:8b:e9:51:
4e:75:c4:7b:7b:bb:f5:35:e0:1c:98:c7:12:2a:82:
ac:98:b4:99:c3:b2:e0:6b:16:39:3c:ff:24:96:b9:
9d:b2:6b:a3:3b:22:b3:c3:e4:6e:45:44:fc:9e:ab:
a1:4e:f0:84:7f:ab:2e:6c:a0:1b:78:68:b9:6a:27:
d3:c1:63:0c:3e:ca:08:15:85:1b:ea:91:9f:5d:24:
55:83:8d:a7:71:3a:9e:80:19:8d:07:56:11:3d:42:
9e:93:70:4a:aa:41:9d:d0:a4:fb:e0:08:1d:18:76:
f9:d2:a4:b3:f3:22:00:44:9c:cc:ec:38:ea:2a:88:
ef:e4:d1:83:1a:a7:a9:d5:a1:25:dd:27:f8:cd:c6:
c3:d3:47:f0:f5:93:c8:96:c6:ab:1d:f0:bd:9c:5b:
cb:74:f7:3c:b3:79:5d:44:5c:b2:3c:29:62:94:07:
62:3e:09:a0:cd:78:83:5c:ec:5b:10:04:82:07:94:
d2:ed:f8:73:4d:3e:88:92:e6:23:e3:45:3a:06:8b:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:70:E9:9D:87:75:97:49:56:23:8B:8B:9C:8C:88:1E:9C:C3:AB
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:a8:10:b7:6b:c0:de:49:28:6b:c1:fe:c9:a0:6e:92:8d:
17:f1:31:e2:89:b8:9e:db:5c:71:42:ef:ce:c1:8c:c5:04:9b:
01:9c:12:f1:77:72:1f:c8:b1:36:61:19:39:65:1e:c2:4f:5d:
28:ed:f6:bb:37:b8:c4:04:83:b0:e7:fb:2c:4e:db:d7:b1:d2:
0d:e2:53:8b:da:f1:f6:e9:92:58:87:7b:5c:f9:f8:ad:46:be:
80:f3:05:f8:d7:e7:19:a8:f9:a6:4d:0f:b7:73:f2:7a:f1:64:
7d:72:70:ff:36:58:06:cb:6e:62:59:7e:a3:62:00:10:f4:dd:
ff:02:40:be:58:fe:e8:5f:50:56:6a:a6:49:ee:05:a0:ff:51:
4c:7e:48:f8:e9:91:27:5e:71:35:c9:a6:27:8d:fd:e3:78:57:
f1:25:21:af:23:15:f7:e0:f5:62:79:b3:10:48:d8:83:3b:14:
0b:c6:66:51:95:3c:f4:b1:76:c5:7a:60:04:f9:9a:ac:b9:c2:
99:64:ee:6a:0d:21:1b:14:2b:40:9b:0b:00:ca:49:f5:e4:85:
50:ae:73:ab:04:b1:ff:99:0d:65:cd:cf:6e:4c:b1:a1:80:a0:
6f:da:67:cb:95:37:2f:94:a9:64:58:89:17:f9:58:8a:c1:b2:
9c:57:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:52 2025 by rpki-client