Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: sO7VKGZ8gDNi9Ce5e0JPcP+w4jK80OynUBhhdWJwkxU=
Subject key identifier: 67:10:8E:F0:95:0D:53:0D:5C:E6:F0:EE:BE:20:C0:10:80:13:FA:5C
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 0197B70E5D1FE89DFA2FDF8CB2D497990A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 073A
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: zb7OqRH/TBYKNRCaFwXz9KnkFP5hkNVs5I9pZVKKqUg=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5d:1f:e8:9d:fa:2f:df:8c:b2:d4:97:99:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=67108ef0950d530d5ce6f0eebe20c0108013fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:38:cf:3a:94:1b:2c:72:3f:cd:e0:84:ab:
e1:ac:28:7f:f0:19:f1:3a:64:07:f1:70:44:43:a4:
9c:77:7a:f4:cf:4b:64:5e:38:95:cd:9f:44:0f:2f:
01:ec:08:82:4e:1a:d0:e6:24:3e:3c:4e:dc:a7:c1:
bb:56:12:5b:78:bd:e2:d6:b7:ac:4c:90:20:c1:d4:
c9:17:62:a3:45:4f:10:cb:d3:bd:85:91:ef:84:8c:
4c:09:70:e8:c0:b1:3a:74:c3:d8:e7:92:8a:45:94:
0d:d1:77:07:81:2b:ec:be:1f:46:89:66:4a:77:60:
27:ed:f7:f5:c3:db:81:3c:c9:18:7d:3c:ef:8d:71:
e3:ec:4a:91:65:20:a8:f4:a1:d9:59:77:5a:d7:e4:
76:f5:7c:af:7b:80:76:11:9f:4d:17:27:02:3d:27:
8a:35:dc:3e:f0:b5:83:f5:57:aa:6d:2a:66:f1:4b:
90:79:04:0b:86:70:91:6e:ca:e5:61:b5:a7:0f:e5:
f3:9c:66:95:07:57:17:60:18:d9:08:a5:00:d9:19:
fd:f3:f4:f1:47:78:6d:a3:de:15:b9:d4:4b:bd:d5:
b5:14:1f:ca:8c:fb:7d:c8:72:bc:92:41:cd:1b:a7:
15:ef:46:dc:f3:a8:f8:d1:84:43:76:42:9f:c1:3f:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:8E:F0:95:0D:53:0D:5C:E6:F0:EE:BE:20:C0:10:80:13:FA:5C
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:6b:19:c9:a7:ad:a6:55:dd:71:7d:96:a1:fc:6c:32:29:
8e:7a:95:99:f1:8b:05:94:f8:02:73:be:e2:86:21:92:5b:4f:
80:36:bf:43:fd:7d:b5:7a:c7:b8:a4:99:ce:29:2d:49:b7:36:
6f:01:d6:9c:7d:dd:07:81:fb:11:70:d0:11:1c:e5:0a:51:9b:
cf:71:55:1a:a5:80:f0:3d:20:15:2d:9e:c1:be:c5:40:09:7f:
a2:42:23:8f:4b:75:ee:af:0e:4f:6d:1f:0f:46:da:43:26:32:
2d:e6:a5:8f:0d:bc:b3:9f:32:dc:0d:31:c2:59:50:b6:aa:6d:
1a:d9:a4:1b:ec:6a:14:86:e7:33:e0:41:7f:76:90:04:53:0c:
95:59:a7:19:1d:5c:21:80:fc:56:1e:66:e3:d4:e2:b0:15:77:
98:af:41:c8:03:b9:5d:01:37:66:1a:71:43:14:a4:34:d3:57:
fb:0e:61:02:3c:f0:aa:9d:cd:d5:4c:41:52:9e:65:e8:34:98:
f1:39:40:6d:ff:53:02:c3:b8:4e:b4:aa:d3:f1:2f:34:8b:c6:
81:0c:cf:ec:b2:3e:e6:a2:7c:c6:d4:a2:bd:b2:52:6c:21:bb:
c8:cb:68:ee:b0:df:47:16:3a:8d:22:56:02:11:af:8f:3f:d6:
7d:02:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:01 2025 by rpki-client