Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: AJckwjPgfobhSVxCWp8Ss4OFLUgzcgECuQvMy8jpvEs=
Subject key identifier: 25:57:FE:5E:E7:59:58:FB:25:19:1E:6B:A6:A3:41:61:4D:E1:5C:3D
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 0197B88ED4537771F608BA715C4F23E609CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 1124
Signing time: Sat 28 Jun 2025 22:00:57 +0000
Manifest this update: Sat 28 Jun 2025 22:00:57 +0000
Manifest next update: Sun 29 Jun 2025 22:00:57 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: w4RFZimDsQuuIYU6eU0gfxe/fYdupfJYFpcQxUKmUQE=)
2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d4:53:77:71:f6:08:ba:71:5c:4f:23:e6:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Jun 28 22:00:57 2025 GMT
Not After : Jun 29 22:00:57 2025 GMT
Subject: CN=2557fe5ee75958fb25191e6ba6a341614de15c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:31:45:e1:fb:cb:9e:a9:b6:96:95:6e:67:
57:e1:72:e3:f6:54:ad:f1:a7:c9:b2:6f:79:3d:6c:
89:e8:82:9a:73:ef:7f:74:c8:0e:88:d9:0e:39:5f:
fe:5c:95:bd:e3:4c:fa:23:06:0f:7d:91:23:d1:54:
d6:6a:48:ae:c5:b6:77:4e:55:7c:32:f9:5a:29:f4:
16:89:70:f2:ee:42:0f:86:21:b0:03:02:de:15:fe:
1a:91:d8:e2:3c:bf:52:f5:0d:2c:bb:4c:ab:b7:e6:
ee:df:dc:95:09:d0:25:84:e6:0c:d7:9f:5b:3c:dd:
8b:42:d4:ab:58:58:cd:af:b2:23:33:ca:1e:26:07:
77:a2:c9:2a:74:69:e7:a0:db:7d:03:8f:da:b2:a3:
1f:88:25:cf:27:73:2c:fc:d1:5a:e8:b1:80:69:47:
ff:20:f4:00:48:e8:5c:5c:82:79:f0:f7:c7:79:8b:
82:19:49:1f:c8:04:60:ab:35:a4:16:4f:13:c3:3c:
95:37:a0:7f:1e:55:6a:a3:bc:cd:08:41:f7:da:3f:
88:1c:76:ea:ff:0a:21:6b:61:5f:16:f9:f8:a4:a2:
e8:7c:f6:d9:cc:b1:77:41:a4:d4:8a:c9:b7:a8:f2:
6c:1a:b1:c9:80:a1:a6:91:c1:ab:96:7c:e0:91:61:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:FE:5E:E7:59:58:FB:25:19:1E:6B:A6:A3:41:61:4D:E1:5C:3D
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ea:e1:98:d3:89:b3:44:f7:29:5f:b8:97:41:c4:07:3b:95:
45:e0:d8:a3:4f:5b:bd:55:3e:4f:63:36:54:d7:69:db:5c:83:
d2:04:6e:e4:86:84:47:cc:e9:08:ce:73:b2:83:0d:73:e6:5d:
50:a7:06:d8:92:80:81:c0:1c:1e:d2:cf:d5:dc:43:17:a4:eb:
b8:f2:3c:c0:ae:cf:bf:36:50:16:23:47:e0:97:b0:93:96:30:
f0:6d:31:f3:bc:28:81:2d:bd:b6:04:5e:d6:15:c9:47:8a:32:
37:b0:31:26:cc:b9:fc:b1:2b:32:00:f4:d2:22:a0:66:2d:cb:
8a:2e:c8:f8:5d:fb:b0:f2:45:33:00:32:a6:fc:ae:4b:9e:22:
08:3a:ca:d4:2c:06:42:b2:b3:ca:62:43:4d:e6:e1:ff:98:c4:
8f:dd:4a:d7:30:45:94:8f:84:ba:79:84:1a:30:39:b7:5e:d7:
9b:8e:77:e0:c3:a4:4d:a9:52:d3:01:88:fa:98:d5:0c:01:ee:
c6:8c:3c:cc:b0:62:d9:b0:ca:1b:ef:05:a3:30:99:dd:e5:1a:
97:72:45:34:05:b1:26:04:a3:01:dd:b7:12:0c:c3:59:6f:2e:
6f:ab:a3:50:11:60:3f:71:ca:c0:16:8b:cf:05:21:d8:56:e6:
25:30:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:38 2025 by rpki-client