Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: Cgv+gUry2TEHocUHjiwF3EEnWhOVIMRqJO2yr89deIY=
Subject key identifier: 63:05:DE:4A:89:3C:E2:CE:29:92:FA:E3:8D:12:65:65:28:C6:E0:D3
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 0197B74516EDB0ACE8FF9C12D4D6066372BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 0481
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: TCGaht/I9gl/saOmhmE6efhprQJoTFR0A2ALUHSu0NQ=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:16:ed:b0:ac:e8:ff:9c:12:d4:d6:06:63:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=6305de4a893ce2ce2992fae38d12656528c6e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:79:08:b5:09:bc:03:53:78:92:95:98:28:
3f:69:f6:35:ec:79:a1:79:27:58:e8:e8:c9:dc:b2:
86:66:25:d2:ae:57:49:f6:28:16:63:40:4d:ab:88:
cf:4b:92:57:6b:ed:0b:a8:ff:80:4e:22:9e:fd:40:
46:f6:21:14:ee:1b:1e:73:19:b5:f0:91:4d:1a:a9:
66:a0:f3:63:d4:0e:c6:b5:f8:08:be:f9:d9:62:f0:
1b:e8:df:61:77:20:89:1b:91:7d:75:a1:79:3a:58:
5f:e3:ce:15:b4:63:70:d3:40:4a:50:32:33:43:f5:
37:44:ef:42:18:be:77:6b:89:24:6b:98:f9:9d:ba:
89:d8:4f:e7:92:ad:ff:07:00:73:79:2c:f4:9e:fe:
bd:8c:20:68:3a:84:11:5e:ad:4d:5a:13:d4:d6:6f:
4b:03:4f:cc:63:8c:3c:bc:a6:b3:43:13:84:ec:cd:
3f:3c:93:a5:1e:ca:00:be:7b:aa:ef:05:f4:9c:5f:
38:53:96:38:43:9a:8c:db:6a:04:85:89:a8:65:da:
4e:44:8f:9a:6d:da:55:3f:72:20:eb:80:8d:a9:2c:
a1:c8:5c:92:59:0f:39:0f:72:4c:66:1a:03:5c:12:
05:7e:7f:4d:c1:8a:6f:37:8b:5c:59:80:98:d0:81:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:DE:4A:89:3C:E2:CE:29:92:FA:E3:8D:12:65:65:28:C6:E0:D3
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:36:06:aa:62:a0:38:2b:af:1a:a6:ad:9e:88:ae:ed:8d:97:
09:27:4c:0e:1f:5e:de:8e:b1:ee:89:4c:ec:ec:60:b7:45:5a:
01:28:cc:ca:bb:2d:95:fe:6f:c6:d9:53:a5:1e:6b:a0:0c:1d:
ce:f5:20:17:81:4d:b2:fd:3c:19:3f:4d:1a:11:c1:c5:a0:56:
69:1a:be:11:f8:1d:6b:74:0a:01:84:f3:07:14:bd:18:fb:90:
2a:8f:83:4f:05:6a:6a:da:3d:83:85:85:54:89:77:82:ed:94:
56:99:7c:84:3c:dc:49:73:d0:e7:48:c8:ed:c6:a7:e9:25:15:
f7:d1:72:5e:ce:96:2d:ab:9c:c5:32:67:29:2f:43:d4:49:30:
9d:4a:ed:0a:a6:7a:08:b9:07:5e:41:c7:41:da:f7:0e:ce:5f:
5c:0b:0d:0d:44:56:57:87:c3:a7:d0:61:68:0f:7e:6b:bb:86:
d3:a7:3c:80:4b:41:7b:a8:46:fd:00:17:55:c2:6f:07:e8:0c:
75:f6:7e:a9:ab:c4:35:a0:99:6b:b7:f8:39:8d:b3:7c:77:af:
26:ef:fd:12:97:29:14:36:7b:1c:56:07:f1:3c:dc:ad:14:0f:
a5:4c:e7:11:d2:05:26:d8:ad:49:5e:d1:a6:91:6a:26:07:93:
8f:fa:ef:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:11 2025 by rpki-client