Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: tNbTtdjfysu4H39Y4ttWgZWq8GqZ1LXcb8/OaXRkQds=
Subject key identifier: 28:B7:87:A4:A2:82:8C:1F:68:76:EC:DE:DF:F5:7C:A3:7D:FB:7E:C1
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 0197CDCEA8ADF852D950890138BDA9213837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 0240
Signing time: Thu 03 Jul 2025 01:02:42 +0000
Manifest this update: Thu 03 Jul 2025 01:02:42 +0000
Manifest next update: Fri 04 Jul 2025 01:02:42 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: AI5xEuvkn8qGx4Gp4OoumutkgcePXkOC+mepR7F/Uns=)
2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:a8:ad:f8:52:d9:50:89:01:38:bd:a9:21:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Jul 3 01:02:42 2025 GMT
Not After : Jul 4 01:02:42 2025 GMT
Subject: CN=28b787a4a2828c1f6876ecdedff57ca37dfb7ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:ec:7b:04:da:86:57:33:8b:c9:36:7d:d6:
cc:0e:7c:cf:58:c3:e8:58:4f:1d:f9:42:8f:ae:00:
7b:58:d8:7c:d3:f6:2a:50:a1:d6:98:c0:c3:ec:c8:
ad:6d:15:b7:f9:9b:01:43:82:b5:81:fd:c5:ab:a9:
92:b7:92:aa:76:91:ec:0d:fd:2c:e8:6b:c8:a9:46:
0b:08:55:ec:b6:91:55:47:b5:fe:d7:fb:aa:79:11:
4b:2c:63:79:50:12:d9:c3:c1:61:01:f0:e2:c1:e6:
a0:71:9f:0f:10:2c:d0:43:e0:4e:84:0a:79:e2:d8:
6f:94:5c:d0:e3:b9:16:db:f4:f1:aa:93:0c:2a:a8:
8a:2c:6b:a5:61:cc:62:a8:e1:19:aa:a2:cf:8d:1a:
df:3e:f4:26:6f:b1:98:3d:01:9b:03:b3:13:db:3f:
d1:f8:05:8c:78:62:a1:7a:43:44:d8:6b:9b:17:21:
d7:35:c2:2d:ad:ae:c9:01:e3:0d:45:86:12:59:3b:
0d:e7:2c:88:45:a7:96:f2:82:c3:1e:08:2e:ba:b6:
77:74:18:8b:c5:a1:0b:12:94:33:b0:71:94:17:6b:
57:95:84:51:85:ca:8f:de:cc:e5:ab:df:f3:74:7f:
2b:22:c6:f5:51:41:bc:45:2f:be:c9:d4:f4:8c:eb:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:87:A4:A2:82:8C:1F:68:76:EC:DE:DF:F5:7C:A3:7D:FB:7E:C1
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:93:90:32:12:29:a9:79:04:95:1a:23:3e:aa:23:b9:30:4e:
09:55:ce:43:66:43:05:25:d8:c5:27:84:d5:45:62:0f:c2:f2:
77:2d:19:23:0a:54:c3:88:f8:a2:ff:83:59:96:bb:8a:f2:17:
74:14:8d:84:40:f0:bb:be:b8:bc:b8:ba:7f:06:a6:22:e3:93:
c6:0e:3a:12:56:eb:3a:4c:e5:45:70:2f:3c:c9:bc:0c:3d:f2:
7d:29:78:d5:e5:84:18:de:c2:26:2f:04:0e:ec:b5:db:d5:a3:
e5:a1:a9:e8:10:fe:62:44:b5:6f:c4:0f:05:1c:b1:0f:26:2a:
c7:7d:6e:fb:46:ee:7d:77:a3:82:47:33:e4:68:f0:08:f3:7a:
55:1c:ee:ce:d8:b6:6a:91:b3:1d:2a:5d:62:5d:92:d5:7f:7a:
18:0f:9d:74:f0:76:78:ca:63:d5:a2:7a:23:98:e3:f1:24:4f:
64:a5:23:ab:92:9d:7c:cb:2e:2d:9b:f1:67:29:9f:dc:80:22:
8a:bd:98:ee:e9:f0:91:24:01:ee:9e:72:9f:36:df:72:0d:8e:
72:dc:26:fc:7a:1e:5f:1d:42:9d:f0:a1:10:18:8d:c7:ff:10:
6e:12:38:e6:ff:74:73:29:8c:5b:9f:80:d0:a0:ce:b8:04:fb:
a5:5f:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:03:43 2025 by rpki-client