Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: zpNJYltavmbq48b+Y/Og1D58oy1kO0sAIhk9G5JX3bE=
Subject key identifier: FB:2F:F1:75:7D:5A:65:CF:EA:D5:14:CF:53:99:BF:EC:2F:34:E1:9C
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 0197B6A19B11F8E44E53E940B4E85BB28940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 05E0
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: G/XUlnvYFLx/mXJYR3mm/vJYUUu/OQOzz/6tEtdRPiA=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9b:11:f8:e4:4e:53:e9:40:b4:e8:5b:b2:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=fb2ff1757d5a65cfead514cf5399bfec2f34e19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:bd:5a:80:ce:ce:78:57:8b:8a:23:ba:20:
fd:ba:3e:b5:c8:df:5a:1e:66:5c:10:19:8e:39:6e:
46:b8:ba:58:1c:77:01:ce:0d:52:e3:ee:71:ec:cd:
73:9e:4b:b4:d5:dc:d9:26:ca:66:29:00:df:e4:a1:
cd:9e:c0:b2:04:9d:b3:f0:3c:ef:27:15:c6:d7:b4:
11:1c:a5:18:e4:17:f3:d1:79:ae:5e:c3:0b:0a:90:
9a:27:31:e4:ad:76:04:13:3e:d2:c3:a6:97:4a:1c:
7f:7c:d5:e7:1a:1e:82:b5:ec:b6:b7:83:86:45:e8:
f8:1d:7f:29:1f:2d:02:1f:ba:41:28:9d:65:fb:4e:
6e:2c:14:ed:b5:69:95:89:14:c2:35:c1:5a:c5:6b:
d8:07:4a:25:db:d7:d5:58:aa:17:73:8c:bc:f9:0e:
18:08:4c:cb:d9:ff:44:20:98:bf:b2:bf:c1:f2:f4:
b4:80:e4:55:1f:97:b4:1e:4a:e9:2f:27:97:ba:37:
f4:f4:b3:69:a4:f9:27:58:7f:fd:bd:04:04:10:4f:
6b:1a:e4:2f:1c:55:29:2e:84:a1:7d:47:da:f6:9b:
bd:9e:5d:02:ca:b0:2f:6a:ce:8c:1d:0c:8e:19:79:
de:fd:a8:d8:69:aa:4c:77:79:3a:2f:9e:25:bd:72:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:F1:75:7D:5A:65:CF:EA:D5:14:CF:53:99:BF:EC:2F:34:E1:9C
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:9b:2b:90:f3:45:da:78:6c:ca:b9:42:73:d4:8e:51:a2:
8d:89:8e:3b:6f:6f:24:b9:1d:b9:e4:bb:c7:77:ca:2e:d4:da:
1f:6e:77:92:97:9a:95:61:78:78:85:6d:c1:e1:88:93:3c:ea:
df:1d:fe:a2:6d:3f:69:c2:69:ee:9e:5d:99:82:0d:40:57:ce:
18:c9:39:40:70:f0:12:5a:c7:46:c2:23:62:5e:c1:e7:cf:8f:
e0:2f:1b:75:df:c3:5c:c3:b7:7c:f0:11:23:a8:84:9f:4f:f2:
96:cf:e8:fb:75:5f:35:b5:92:23:c6:3f:10:0a:71:93:cb:e7:
05:20:84:6d:fc:09:6b:8f:9a:1c:3b:b8:a7:f2:9b:e8:9f:55:
62:c2:5d:a3:33:4e:48:c0:5e:e8:fc:7a:dc:a9:bd:01:bb:ad:
53:8e:32:86:3e:98:0f:33:a6:09:95:95:67:67:54:82:04:8f:
4c:ba:ec:c1:d1:c9:b7:02:44:74:2a:7b:f2:32:84:29:63:e1:
ee:f8:0b:e9:df:a3:fb:2b:a1:04:52:b6:68:57:4a:11:9d:e1:
f6:fb:dd:51:08:b1:fa:bd:12:7a:6c:8c:87:fa:bb:d3:45:20:
6c:85:d6:70:4d:27:f1:de:21:33:ba:a2:99:5b:e3:d4:3b:2d:
52:1d:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:46 2025 by rpki-client