Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: T9AhamNXXlTo04v43/aprrWQzYFWbCuHeGcdAP1GixY=
Subject key identifier: 1E:10:B0:2E:EA:45:6F:A3:70:A9:53:0E:16:34:A0:43:A7:8F:40:05
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0197B6A1333B9F1A6C38B6DAF7313C710021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0DD5
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: ekTTSARBJ9fJmiDjQlVor1cYWTrtaUq610HcubTwcCs=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:33:3b:9f:1a:6c:38:b6:da:f7:31:3c:71:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=1e10b02eea456fa370a9530e1634a043a78f4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:ad:6f:e0:06:2f:e3:b6:49:82:03:42:f0:
eb:77:ef:43:02:1f:57:84:8c:b7:bb:cc:da:4b:f3:
f9:72:c4:e7:c4:bb:65:fa:6e:a3:c2:48:13:33:0a:
ea:ad:f5:db:ec:ad:29:30:c2:45:89:d4:1a:cd:bd:
89:d5:fc:27:6a:00:91:35:5f:e8:fe:2f:61:c3:51:
3a:bc:b6:ee:94:cd:71:6f:93:e0:4b:30:be:af:74:
ff:0f:2c:e9:2b:63:36:21:51:79:79:a2:0c:59:35:
3f:1b:39:5e:ca:76:b5:88:35:7b:8d:57:ad:2d:34:
d8:e2:e0:ad:b1:a8:17:4b:83:08:b2:fa:b9:66:1a:
28:fe:c1:ca:c0:3f:9f:a8:bb:32:86:c5:5c:d2:73:
e0:a9:af:9c:37:c7:18:8c:e1:d6:c5:55:c3:c8:1a:
2c:87:a9:0e:55:2b:be:a8:1c:a3:20:76:1b:b6:19:
ab:e7:de:8a:8b:de:81:5d:ef:9d:34:7e:4f:e7:b6:
12:ac:8d:32:3c:81:2f:db:0d:49:e5:c4:b3:65:05:
ad:ea:d7:87:16:3c:f8:0e:e8:ef:c3:18:94:39:6e:
11:d2:ae:45:d1:62:b8:73:c0:7f:ea:d6:0b:de:e5:
eb:4c:76:76:fd:bd:31:be:92:40:d0:34:3c:a5:4e:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:B0:2E:EA:45:6F:A3:70:A9:53:0E:16:34:A0:43:A7:8F:40:05
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:f1:0b:85:39:c6:05:8d:43:b0:61:f2:d0:72:e0:da:64:
c2:fd:7d:72:e7:fe:c0:c6:61:5c:c2:e9:c1:ee:eb:29:42:83:
c3:5c:4a:d3:c4:7e:bb:65:8e:cf:92:f5:85:80:ae:05:20:a6:
4c:d1:5a:c3:5a:80:df:de:36:c6:59:e1:f8:bd:4c:c2:d1:b9:
6e:96:b3:af:df:13:21:f4:ac:0b:13:3d:7f:4e:0f:fb:67:01:
32:45:9b:7b:d0:e6:24:14:33:c2:95:bf:7f:e8:12:bf:11:be:
34:7f:72:e7:2a:83:f7:ee:4f:af:6f:53:b1:f1:44:73:81:95:
4d:85:50:2d:cd:f6:ad:ea:1c:0f:28:ce:48:3e:20:f8:38:ef:
fb:b0:f0:21:e9:a0:66:fb:9c:02:82:9b:ff:0d:5f:ef:0f:3f:
0c:74:cf:59:36:32:55:1c:db:33:8f:ce:5f:0d:07:00:d6:0f:
06:e5:85:6a:b5:29:d0:5e:e4:0e:a6:db:d4:d8:e9:7c:b8:8a:
99:8b:fc:ba:f4:57:9f:4b:e0:bb:e9:a0:70:e2:69:17:ad:da:
30:7d:34:b6:89:47:61:c1:8f:d2:0e:13:01:58:34:6c:81:61:
c1:38:db:6a:46:5a:b3:3b:8d:c5:00:4c:4c:bc:db:c7:1b:0c:
0d:6d:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client