Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: CDGsdTHf14KklHV/GNYoyM/2Q+tHDhwXxINUYebW9UU=
Subject key identifier: 3D:0E:4F:D4:3E:38:6F:42:C8:57:2E:F9:9F:92:9D:D4:90:AA:56:9D
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 0197B70E53667332049F9F06A5F06926BD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0538
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: qLXUoWe/CNw/7tK4nauMW03j63PqFoEp1bdviLs/bps=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:53:66:73:32:04:9f:9f:06:a5:f0:69:26:bd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=3d0e4fd43e386f42c8572ef99f929dd490aa569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:b0:47:8a:76:b0:bc:54:73:8a:37:6b:10:
bc:c8:f2:3a:5e:4d:71:7c:a4:67:2d:3a:58:c4:ee:
22:59:8d:b2:61:06:be:01:76:cd:c0:58:49:a1:4e:
c1:c3:5d:d0:28:4c:cf:fb:95:17:64:9e:c9:96:27:
4b:e9:b4:e8:f6:2f:3f:c0:19:16:dc:e0:50:9b:7f:
4d:22:0b:3b:7a:c7:e8:0d:57:6f:25:92:52:f4:4e:
c7:c4:36:ca:e6:e5:f7:61:5d:04:4e:a6:d1:46:67:
64:37:45:45:23:63:3f:b0:c5:0e:42:0c:01:4d:67:
77:cf:8e:77:0c:d8:2a:bc:3d:c3:49:82:79:a3:e4:
7d:ed:2f:76:e3:a4:70:26:99:a6:8e:b2:75:46:0a:
a2:c1:20:d4:4b:b6:44:8f:3c:58:8a:8e:ac:32:0a:
76:9f:58:db:25:ec:99:ac:8e:22:05:dd:11:d8:52:
1a:89:92:b0:61:d9:71:89:76:7a:5a:6d:92:7a:47:
a0:a0:9f:b8:a7:15:fa:e3:05:35:48:4c:2f:11:44:
90:ce:fe:8d:bd:8b:12:99:a7:cb:91:1d:4d:d6:5e:
89:20:ab:62:b1:50:35:47:31:e0:ff:07:ab:7c:6a:
d0:69:02:c3:9f:61:6f:00:af:e9:8e:23:c5:74:44:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:4F:D4:3E:38:6F:42:C8:57:2E:F9:9F:92:9D:D4:90:AA:56:9D
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dd:cc:a1:79:c4:bf:77:5a:19:0e:8f:58:9d:71:4f:bb:7b:
9c:70:e9:02:af:d6:8f:52:79:88:9e:93:c0:0a:7b:f9:f2:a7:
67:0d:43:bd:bc:6e:7f:2a:85:8f:83:ea:96:a0:07:ae:ae:6b:
a5:eb:72:8e:d6:aa:33:cf:d1:40:53:7f:3a:e6:b7:e9:14:03:
3b:5f:68:5f:d3:4c:0b:6b:d0:9a:51:b7:9e:b4:a5:21:b6:d5:
8e:54:94:fd:4b:0f:13:92:47:9d:c3:dd:3c:d9:d7:f7:a1:c1:
56:7a:88:09:02:26:e9:79:ec:21:fc:6a:79:56:b9:87:ba:fd:
db:3e:31:52:89:95:1b:3a:11:6e:df:86:cb:78:d6:0b:e0:06:
23:a3:7e:5f:c2:c5:5d:85:16:bb:4f:a8:16:27:aa:e0:36:df:
70:a9:94:b5:85:00:f5:8a:84:ec:7b:51:25:54:e0:1c:25:28:
23:f4:af:9d:a4:c4:54:6a:fc:3b:ec:53:df:37:d5:b1:3e:6a:
63:81:45:0a:09:38:bb:a6:eb:84:a8:e4:e4:c9:86:6e:38:4e:
7a:1a:43:78:1b:ba:f4:94:6d:de:20:75:d0:65:fe:87:49:5e:
1b:46:25:83:fd:47:44:1b:aa:97:ee:d7:76:b8:45:20:b4:54:
2e:7f:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:38 2025 by rpki-client