Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: uIIR2yFgdNKabFdFmXT1AZiD6Q9g5Lu5F3qpozGJTEs=
Subject key identifier: EB:02:4D:36:1D:9E:23:F8:10:F1:16:59:61:E1:42:86:44:48:7F:C3
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 0196BC004EBC85FA485DFF8C81742D851E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 06B8
Signing time: Sat 10 May 2025 21:00:58 +0000
Manifest this update: Sat 10 May 2025 21:00:58 +0000
Manifest next update: Sun 11 May 2025 21:00:58 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: 5y/kfuLVKTwM7PKs3hQzRa/SbJ43M9spdjrifnTU3Is=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:4e:bc:85:fa:48:5d:ff:8c:81:74:2d:85:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: May 10 21:00:58 2025 GMT
Not After : May 11 21:00:58 2025 GMT
Subject: CN=eb024d361d9e23f810f1165961e1428644487fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:e7:ba:11:b2:40:62:4b:5a:32:d3:ca:21:
48:8d:03:62:29:a9:3a:d0:62:08:72:a2:95:da:17:
c1:20:7e:98:a0:41:4f:d8:65:57:98:cd:d1:af:8e:
05:8e:75:29:6e:4e:96:32:de:33:e1:3f:80:ef:81:
80:6d:1d:88:a6:50:4c:b0:17:59:0e:5b:cd:92:6f:
77:5d:e6:b1:7d:28:ec:26:2f:bf:be:7a:52:e7:20:
8b:91:4f:9c:af:83:49:85:c7:a6:72:9d:db:25:be:
9c:03:75:cd:32:03:24:a1:6c:b1:d2:5d:80:64:5c:
27:4e:5d:62:d3:24:86:c8:e0:5e:9e:3c:be:cf:e3:
be:dc:a9:a2:bc:f2:70:b1:5f:ee:e7:cd:e6:b8:c3:
b1:b1:df:2b:9a:6f:f6:47:d7:dc:2a:e0:52:98:9d:
06:b6:29:53:78:7f:28:fa:b7:c4:9e:ca:62:fc:63:
86:2d:c9:29:4f:07:80:7c:d3:b7:8b:07:e8:9b:50:
cf:3f:66:7c:0d:f1:2c:59:e9:c3:1e:bb:bd:7d:b6:
c6:26:b4:79:78:76:cf:b0:d9:1a:97:e0:2b:5d:8e:
9e:e3:91:ed:bd:9e:a2:9d:c8:e2:af:47:f2:d4:b9:
e5:78:62:5b:51:23:88:22:76:ab:4c:83:c9:6b:d9:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:02:4D:36:1D:9E:23:F8:10:F1:16:59:61:E1:42:86:44:48:7F:C3
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9d:05:66:b6:5d:b6:24:6e:79:30:e4:08:31:81:fd:4d:43:
b7:51:61:c3:83:cc:75:13:5e:da:fb:ff:8f:b6:e6:cd:c4:40:
f0:97:04:42:fc:22:ac:e9:a8:e9:f8:b3:85:55:ff:ec:df:70:
4c:12:e8:ab:de:e2:b0:7b:58:8f:cc:67:92:83:96:eb:8b:2d:
63:bd:3b:18:fb:b3:44:a8:4f:d8:89:d9:cd:a3:da:94:15:5a:
d4:a1:95:b0:66:b8:75:25:6b:e2:ca:3e:1f:0d:d1:b0:19:67:
40:67:0e:46:80:20:d2:c8:2c:40:eb:d9:17:88:63:ed:44:7f:
96:11:da:1a:14:7c:6f:ef:37:b9:13:53:54:7a:15:6a:a0:e2:
ac:e3:16:a7:6b:51:48:3f:fe:e2:e9:ec:a0:a9:7f:a8:76:39:
85:9a:66:dd:a9:3a:41:11:2e:76:af:c6:81:eb:0d:37:70:95:
cc:6a:cd:c8:6c:06:b9:39:0c:f9:cd:26:c4:da:8d:f4:f7:e2:
5f:6e:f3:6f:45:73:2c:6d:1d:c4:77:6b:9f:25:f5:ec:88:d3:
62:cc:26:b0:9c:0c:77:2a:81:de:dc:e2:7f:e7:dd:d0:86:02:
aa:c0:8b:0f:01:3d:79:20:ce:02:3f:f8:c0:98:fc:1b:92:c8:
35:7b:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:00:05 2025 by rpki-client