Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: smpxv79cPSlUp188uYNDKSb2SFE+oezH9cluRCkaWqM=
Subject key identifier: 69:26:E8:C1:FC:91:8D:49:AD:38:7E:8D:80:A6:D3:32:6B:F7:7B:A5
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0197B7457663BE1E45CA828BC96CD3794BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: wcIXO/GmDyg4zLMZ+Sf5J6zWwrTuN7TvflKVNDqqCJ4=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:76:63:be:1e:45:ca:82:8b:c9:6c:d3:79:4b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=6926e8c1fc918d49ad387e8d80a6d3326bf77ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:be:4f:ed:ae:c0:9f:2e:10:9f:6d:43:44:
50:12:58:6c:c3:ec:92:18:5b:cb:54:12:92:a2:08:
3c:2b:96:ff:53:ef:29:fc:a2:d3:45:f3:7f:02:fa:
60:65:72:8f:8c:23:d1:66:b5:e2:a3:99:1e:bd:43:
9c:60:97:45:21:00:09:f7:5a:12:1a:60:c6:93:34:
88:56:30:66:a9:6f:59:76:f9:91:5d:b9:dc:1c:92:
ba:2e:74:6a:a7:4d:2f:33:67:95:7a:bf:05:db:5b:
3d:2a:be:16:0f:7c:cd:48:21:b3:88:0f:9e:d2:a4:
b9:20:36:c9:1d:32:a7:8c:4f:2e:10:24:05:22:2e:
9d:23:30:f5:c9:cf:da:91:f4:fa:25:12:05:54:a7:
76:87:39:aa:50:a8:9a:3a:ce:e4:92:be:af:49:b8:
6b:0f:66:04:2d:dc:cd:67:59:1c:98:fc:85:f6:44:
57:c5:9e:64:5c:35:35:12:be:2f:3c:3e:f6:3d:5b:
2c:5b:28:1f:b5:56:44:72:4d:1d:23:f2:c0:d2:cb:
40:03:cc:8a:d1:5b:3d:d3:f6:54:c3:88:a8:18:bf:
64:43:25:44:de:4c:03:67:59:2a:11:6b:66:15:39:
69:8b:0a:45:24:b2:7c:08:6d:01:7c:6f:68:11:4f:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:E8:C1:FC:91:8D:49:AD:38:7E:8D:80:A6:D3:32:6B:F7:7B:A5
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bb:8f:13:1b:5a:a7:f1:a2:76:32:30:82:cc:70:67:1e:b3:
3d:3e:c7:b9:63:b6:ce:2f:e3:fb:8d:77:1a:3a:2b:56:be:f7:
44:58:71:c0:d5:87:56:45:8f:fe:44:01:b0:d6:06:bf:6c:58:
10:3b:7b:d0:64:12:7c:ab:1f:27:3c:e8:ed:6f:98:f4:38:df:
ca:d3:ad:a0:99:ac:5f:86:79:4d:59:c1:e9:69:39:f7:3b:6d:
53:c8:5b:fd:88:ed:6c:fd:58:b1:b6:40:b3:21:48:37:60:5b:
ff:17:80:d3:6d:29:88:95:95:67:81:68:17:24:ee:31:d9:60:
14:77:be:42:20:4c:34:63:ec:65:2c:ff:8b:f9:ea:3d:d6:d2:
4d:98:66:b5:e8:92:a7:e6:ed:f4:81:5c:1a:6a:7f:ac:52:d0:
18:76:41:3f:3f:71:e2:2a:95:92:a4:f6:ac:39:dc:4c:fd:86:
a8:2e:c1:59:75:d9:d8:1e:02:ad:fe:07:8e:82:3a:b9:a9:bd:
a3:16:37:11:9a:c6:67:36:47:1d:1e:53:3b:e8:f7:16:fd:19:
63:03:2d:e5:1d:25:13:e0:cd:b0:a7:b7:f8:fc:55:f1:3e:d1:
c1:fd:72:ec:5a:4e:ce:c0:26:04:f2:52:91:83:07:e4:33:26:
91:15:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:50 2025 by rpki-client