Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier: kRMOWGg6BLHOiuUlgxJTW4yzYK5i5Ne7kjYztZ9ZDUU=
Subject key identifier: 49:0E:6F:92:9B:B6:15:C4:90:7D:4E:CA:A9:0A:E6:1F:18:73:10:15
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 0197B7EABB1A379AE8ACCDD361C60E9EB743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number: 0EA1
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: St84P04Tr+VATvHLoQyu37IxLGXL5s9vu7vemEIx9QE=)
2: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (hash: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bb:1a:37:9a:e8:ac:cd:d3:61:c6:0e:9e:b7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=490e6f929bb615c4907d4ecaa90ae61f18731015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:4a:cf:64:d7:c8:c5:4a:39:f5:70:14:e4:
9b:ea:dd:fe:0c:27:00:63:af:c4:d5:8c:68:0d:b3:
e7:09:d8:9f:3c:29:d5:0e:a9:41:5f:a0:01:ae:6a:
dc:f1:a0:4d:31:07:71:05:db:47:88:54:44:6f:86:
ea:45:fa:eb:e3:03:f2:de:46:7a:93:68:b7:46:5f:
8d:04:90:f8:2a:5f:82:e6:a6:c2:39:49:34:ce:99:
b7:ee:4f:4b:be:f8:b0:9a:69:1d:b8:62:dd:41:bd:
04:a1:9d:8b:35:8f:3c:77:18:c0:79:22:cd:12:e3:
71:27:31:e2:dd:bd:f6:a2:38:54:d3:64:64:32:27:
e1:a2:d7:26:32:ad:82:33:e9:3c:4c:23:67:52:36:
58:33:77:07:d5:f0:06:69:56:70:43:24:96:48:06:
1c:41:ef:e0:c0:de:08:69:de:08:df:e4:66:9d:bc:
1b:08:93:c6:30:85:46:70:ae:bd:07:d4:99:93:55:
79:a2:0a:cb:76:e4:da:40:03:62:e1:ac:d2:b4:05:
3c:78:77:95:03:2b:95:fc:1f:dc:4a:04:06:67:ca:
fb:65:d2:c6:f4:5b:39:74:1f:48:bf:22:a7:93:b5:
2b:ff:9a:33:7d:7b:72:15:d7:41:71:80:19:c3:26:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:6F:92:9B:B6:15:C4:90:7D:4E:CA:A9:0A:E6:1F:18:73:10:15
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ae:d0:02:40:1c:6a:64:0f:58:a8:2b:98:4b:fa:d3:7e:98:
49:be:8c:95:3d:c8:a3:51:07:3e:94:ee:a5:5f:e9:f9:cd:52:
7d:18:02:39:6f:ea:34:e2:58:00:bd:db:c8:83:49:e4:13:8b:
6f:9b:67:a4:56:ee:4d:0f:87:38:e5:7e:0c:06:d0:98:6b:7a:
0e:d5:b0:87:fc:f4:e3:40:59:c0:c9:4e:ea:e4:8d:ad:5f:d1:
8b:c4:8c:df:a1:d2:08:e8:18:da:87:3f:ec:4c:17:55:ef:04:
74:db:91:ea:4a:06:e5:11:30:cb:fa:5c:ce:41:a2:1b:c7:61:
b4:da:8f:43:d5:ce:97:7b:f9:fe:6d:98:5f:8a:2a:22:6b:1c:
d9:bb:7d:4d:b0:c4:62:31:58:b7:1e:d6:3d:41:38:1a:d7:8b:
78:bc:f4:88:69:b0:30:6a:13:4e:9d:91:30:da:5e:85:fb:6a:
c1:4d:fa:dd:00:08:8e:2b:00:66:d9:32:c1:b1:7c:b2:c3:87:
5b:00:d0:60:d8:7b:75:6c:aa:67:48:79:35:52:eb:16:da:4e:
0d:11:e4:15:e9:67:83:5b:12:e3:ea:26:3b:59:31:19:04:b0:
66:5a:0e:08:2c:13:37:89:00:c5:73:ad:5c:f7:11:bc:f2:9d:
00:74:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:53 2025 by rpki-client