Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: SuvmvLgWQ7fncyX3E0yzVJ00SIslJJ9ARfB3NDpRr8I=
Subject key identifier: F7:8A:28:90:00:7C:7A:CD:F6:75:FB:D7:F4:84:04:D5:22:34:2A:BB
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 0197B6A1A260FCEDF2C25F3F31599B4DB534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: G13SBm1uRFiWahelcmz+k3nNJ67lPxb8imtbjrdcRWI=)
2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a2:60:fc:ed:f2:c2:5f:3f:31:59:9b:4d:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=f78a2890007c7acdf675fbd7f48404d522342abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:b2:60:7d:d6:8f:3f:3e:13:39:30:6e:67:
5f:da:a6:cf:34:fb:e3:31:e9:34:cf:a0:79:75:1a:
d3:42:f8:5b:dd:79:87:cf:c3:37:35:86:89:11:bc:
ed:68:2f:04:75:3f:c0:c8:3c:b3:6a:79:87:93:2c:
d7:41:4e:59:f5:d7:56:86:74:12:88:f3:56:2c:5c:
08:7d:33:ec:c9:da:8a:5d:d2:ca:e9:a6:8e:39:0f:
a9:83:87:e3:8c:ab:fb:92:57:64:2a:bc:74:e2:8a:
14:c1:f3:7f:d7:30:e2:e7:94:db:75:af:96:6a:97:
67:fb:d0:d0:97:c0:fb:02:eb:3d:48:4e:4b:ab:65:
11:45:38:a7:5d:63:63:51:21:8a:ec:dd:01:b0:f4:
31:7f:a3:12:ed:5c:99:08:17:30:d8:11:f0:e3:7a:
fd:f7:e0:6e:60:84:2c:46:e6:d8:67:ba:40:53:14:
29:0c:97:1e:6c:83:8e:40:25:46:b4:72:2b:0d:ff:
f1:3b:c3:9b:19:5a:14:26:d8:f8:a4:75:3f:b2:d3:
3c:2e:5b:ad:11:86:c1:3d:7c:09:c6:bc:da:0b:83:
a9:45:52:74:87:96:fb:67:15:5d:7d:1e:25:0d:a0:
aa:82:db:a8:02:30:85:2f:34:e7:6c:d1:bb:44:d7:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:28:90:00:7C:7A:CD:F6:75:FB:D7:F4:84:04:D5:22:34:2A:BB
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:2e:08:e6:67:8e:b2:59:13:15:0d:b6:4f:5a:52:c7:04:
30:79:73:2c:df:48:bc:74:d1:86:4d:8e:60:e1:4f:de:97:55:
5b:d0:93:ea:11:c5:d0:a6:bc:23:ee:b7:9f:49:c6:31:05:e6:
aa:62:a8:32:8c:e0:30:99:24:15:6c:78:e2:68:bf:4c:5a:09:
c8:00:22:15:1d:c8:49:39:b7:18:6d:73:8a:9d:bf:45:1f:54:
56:86:e1:b3:c9:df:6a:95:cb:e3:65:58:e9:a8:60:4d:09:df:
cf:3b:b1:69:2f:b0:27:e9:ab:c7:90:af:e0:b8:5e:aa:84:3f:
5e:99:a3:02:35:cc:16:b2:50:24:60:be:eb:95:2f:cc:65:45:
f4:eb:2b:0d:1c:96:54:e1:37:58:c4:a8:32:19:bf:72:d4:c5:
c6:04:d5:74:e2:fd:bf:72:f8:9b:59:42:fa:9b:84:1d:5e:be:
28:49:16:51:41:11:e5:ea:de:86:ab:b7:2c:b2:54:4c:81:76:
b5:29:9c:f8:87:d4:cc:89:ec:aa:5f:65:4f:3c:07:cc:e3:45:
aa:07:5f:33:be:a0:c0:c1:f0:a0:19:f5:78:16:aa:e8:5e:f4:
c9:e3:43:f3:58:4e:4e:42:7f:b5:8c:d5:0f:f2:77:a8:b6:46:
f4:d3:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:08 2025 by rpki-client