Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: +BKGziRjS1XoCCexO+1Cd3fzNXIWl/hxLyd3J+yeboo=
Subject key identifier: 7E:F9:8A:81:B9:F9:A8:3D:50:24:69:10:CE:B7:95:4F:EA:92:47:C1
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 0197B9D87A3FEDDD56CB9F80C7DB5D6BE95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 12C4
Signing time: Sun 29 Jun 2025 04:01:01 +0000
Manifest this update: Sun 29 Jun 2025 04:01:01 +0000
Manifest next update: Mon 30 Jun 2025 04:01:01 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: szASGJcxzVAQ0rrsN3jSZFlo+5HONo8fESIrjgRdoIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:7a:3f:ed:dd:56:cb:9f:80:c7:db:5d:6b:e9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Jun 29 04:01:01 2025 GMT
Not After : Jun 30 04:01:01 2025 GMT
Subject: CN=7ef98a81b9f9a83d50246910ceb7954fea9247c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:82:7e:8f:f4:69:44:e3:3c:7c:d6:70:12:
df:9f:86:4c:d7:e8:16:26:4a:35:ea:e3:e3:29:e7:
1a:f1:92:36:a9:ae:85:ca:60:1b:e5:f3:f0:06:dc:
58:12:af:dd:41:cb:fc:90:ac:f3:c9:04:dc:99:a4:
9a:7e:02:12:52:8f:3d:8b:7f:de:5f:14:ce:9b:35:
38:ee:c2:05:f1:13:da:24:ba:a5:00:0e:22:22:b5:
7f:af:12:2f:be:77:99:5b:ad:d3:0b:4f:11:e4:11:
c7:ce:3c:cc:01:c8:40:c4:84:f7:2e:17:dd:0e:c3:
06:91:f0:24:dd:c3:e9:c2:97:70:94:5d:15:a3:3a:
aa:93:8e:9e:b6:b4:10:11:44:43:2d:30:ae:52:b2:
c8:0c:91:28:dc:c4:72:99:f6:0f:2b:1d:0c:36:94:
21:f8:c6:f4:00:a8:de:97:5c:f8:06:87:2d:02:60:
c4:f9:9c:be:61:9a:b4:01:aa:09:4a:2e:55:d7:0e:
23:55:db:04:d6:64:e6:10:25:5b:36:73:00:76:be:
ea:64:05:0f:23:9c:6f:d7:56:c9:8a:0e:98:ed:e5:
fb:f5:2c:c8:6e:2b:35:43:2d:22:95:4c:22:a2:8b:
ab:af:66:d6:68:5a:8b:11:73:ca:ad:5b:10:11:e7:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:8A:81:B9:F9:A8:3D:50:24:69:10:CE:B7:95:4F:EA:92:47:C1
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:66:de:59:41:aa:da:f6:e4:3e:50:c6:60:14:f1:45:cc:75:
bf:59:49:6a:b8:99:55:c4:b3:18:e7:3c:ee:d3:c0:46:66:c4:
a4:11:60:84:6d:2f:9a:1a:79:43:61:13:4c:1e:6f:4c:4b:13:
8f:a8:f9:2f:ad:5a:04:cf:35:f8:36:82:be:5b:10:7c:9b:1c:
2d:b6:53:2d:2a:a6:12:4c:d8:7d:a5:da:b4:3b:35:d2:f8:3e:
b4:01:9f:18:c4:d5:20:0c:38:45:b9:a7:1c:e5:b9:a4:5d:df:
a1:16:e3:54:f3:d9:56:a4:cf:95:b9:93:5b:4b:26:c1:8f:39:
b1:62:48:41:5c:6d:45:c7:ff:38:a7:ba:ee:44:57:72:40:65:
7d:c4:5d:3b:1b:6c:16:7a:56:5f:65:8f:3d:66:d1:94:a6:59:
4a:93:1c:75:f9:60:ec:4d:a7:52:c9:72:cc:4c:c2:33:3e:08:
aa:85:4d:1e:4f:db:a7:d1:f1:74:7e:f1:da:e1:49:4f:dd:eb:
1f:f0:75:7e:8e:d3:4a:d1:60:14:6d:f9:ac:c0:a9:70:b9:b9:
64:2f:ba:0e:04:47:d6:e6:79:0c:b7:9b:48:38:91:74:ec:86:
c9:46:cf:78:a6:20:b4:a2:4c:92:2a:80:37:e2:59:47:ea:e5:
5d:1d:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:05 2025 by rpki-client