Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: ZeX7GlsZWvxgn2fJfeEHBXQMU41i1zeRaaXN27bZZF0=
Subject key identifier: EA:D9:04:D2:FD:10:68:0C:E3:2A:3A:E2:DC:80:F8:AD:67:88:F0:13
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0197B6D74B649E3FFD0ED2C8B7FB9D13CECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0E22
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: SvvRQhCFE1xqUA0g0pVWYwkUNr36jScEbX5f4/1Lx9I=)
2: nCO98tc8B201HK59o3LGsGaIbRQ.roa (hash: 5XD9s6utrTJgO6HcLNBLSP37yElvartuHWVrwWT7jxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:64:9e:3f:fd:0e:d2:c8:b7:fb:9d:13:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=ead904d2fd10680ce32a3ae2dc80f8ad6788f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:e6:dd:9e:50:d5:55:16:55:94:99:fa:da:
38:e8:96:91:40:60:9e:ba:23:f5:e4:1f:c0:5e:46:
5c:67:35:7c:7d:7f:0f:ae:6c:45:7f:49:28:c8:94:
6f:2e:bc:dd:6f:2f:95:16:bd:56:5c:d9:0e:a8:d1:
02:98:c6:e8:75:c7:d7:d7:47:e9:86:5e:8e:08:a7:
f2:73:0d:37:6c:8a:f1:a0:ca:76:d7:df:d2:da:39:
80:c8:bd:e7:16:89:be:00:92:97:24:3a:f0:6c:98:
3b:51:15:86:4b:dd:83:e1:cb:b0:2b:f4:d2:e8:e8:
86:e7:73:67:ab:6a:f2:a5:08:24:12:3d:64:c0:19:
73:ea:b0:5b:ac:7c:a7:40:07:ca:a3:9f:9b:e0:21:
21:fc:98:b7:3b:a4:46:c9:b5:27:b7:6f:3d:a7:52:
77:97:0e:c6:ee:0e:cb:a1:03:6b:b3:ca:0b:e0:e8:
32:49:f5:1c:60:2f:47:6e:63:3b:36:1f:91:60:c1:
04:f7:87:13:88:1b:c1:63:ac:b3:ee:0c:43:8e:68:
b2:91:92:ef:fc:35:57:b0:9b:f9:d2:ed:36:1e:94:
0a:b3:f6:da:d2:0c:c8:9c:16:ce:b0:96:8f:aa:da:
c5:1c:e4:1f:6f:cd:91:35:6f:ca:bc:5a:82:e2:c0:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:04:D2:FD:10:68:0C:E3:2A:3A:E2:DC:80:F8:AD:67:88:F0:13
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:5d:72:ff:79:94:9c:16:3b:4a:f9:fd:8b:18:88:03:4c:
18:d1:6f:f4:99:df:73:5e:e3:4a:2b:7e:64:34:a6:db:e2:04:
a9:7c:83:e2:aa:e8:12:7b:49:cb:92:51:b5:d7:09:46:fd:26:
a4:e5:db:56:a7:a7:fa:76:64:6f:76:3b:36:ba:42:a1:20:10:
a5:52:29:20:dc:b1:f3:9e:e2:1c:c8:6d:72:88:52:ad:48:08:
0d:9e:f8:7e:99:31:98:ce:79:54:2e:4a:e6:64:bf:f2:49:0b:
95:1a:6c:14:64:2a:da:6a:a5:02:fa:fc:96:67:57:71:a6:d4:
90:d4:6b:c3:12:c3:a8:f7:dc:6f:af:92:11:fd:c3:97:f7:ee:
28:77:a3:bb:5e:89:f4:9e:aa:01:4d:54:14:f9:0c:da:1d:53:
e5:a5:91:2f:e6:16:31:8d:63:d8:87:ce:55:a4:14:d2:24:3f:
cc:03:1c:88:4f:69:7a:be:2f:ed:13:9b:10:04:99:fd:2c:ac:
83:6c:64:2a:35:79:68:dd:fc:fa:83:38:1d:02:bc:e0:21:ec:
ce:5f:17:31:34:1d:ab:81:aa:c5:1e:30:13:14:c5:94:fe:84:
3b:53:27:f7:db:03:33:e7:a6:35:57:dc:b1:57:82:39:b6:0c:
e5:7c:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:00 2025 by rpki-client