Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: g63cWZZGrWO5/M5cz6P0353F1sJWW2NsQ3/t/ZhSgA8=
Subject key identifier: 3D:DE:D1:AC:FC:9E:07:58:51:0B:4C:CE:03:2E:D1:CB:29:82:A1:A9
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0197B745B0B6A66A004D47F199DE546DC210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 09E2
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: dt4xRsX7X3kBeyA69jH3WWAd24CO85amDxBqfbjRoeU=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b0:b6:a6:6a:00:4d:47:f1:99:de:54:6d:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=3dded1acfc9e0758510b4cce032ed1cb2982a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:89:4e:b8:09:62:ba:0e:ed:7f:20:75:1c:
0a:d7:16:05:b5:ef:21:d8:14:a2:23:29:6b:f4:a4:
12:a6:f7:ee:eb:9a:58:0b:7a:30:59:19:00:6d:7d:
b5:c3:27:a5:b4:a5:61:7b:73:29:8d:bc:ed:4f:b8:
6f:75:ad:e1:73:71:94:7a:01:b7:ba:4f:ad:b5:7e:
17:20:04:76:9d:db:4b:f3:11:f4:9f:4c:9e:e3:93:
e1:08:a8:eb:9a:51:88:13:3a:ea:95:28:06:d8:86:
88:c3:21:1a:e4:9d:df:14:cc:6b:46:65:34:7d:40:
5c:e7:6a:d7:50:b8:e3:ec:54:d3:aa:38:d1:06:07:
d1:2f:c1:fc:9a:d3:04:29:c6:19:55:e7:7b:59:2f:
39:dc:31:d3:6d:4c:0c:d0:69:06:c6:05:fd:de:9f:
e0:ca:cc:d6:14:4e:c9:f4:16:7e:0c:9e:d7:d2:ed:
6d:da:01:8d:08:e8:ca:4b:ea:00:08:d8:90:87:e5:
a8:12:92:b0:df:12:4d:2d:4b:b7:cf:1f:74:20:b4:
16:6e:1e:ad:0b:ee:f4:6c:00:dc:55:83:3d:b8:22:
b5:e9:ff:53:96:3f:36:09:d6:c1:f7:13:ac:27:e7:
e2:3d:5b:83:0c:e2:1b:69:82:7d:1c:d0:7e:9b:4c:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DE:D1:AC:FC:9E:07:58:51:0B:4C:CE:03:2E:D1:CB:29:82:A1:A9
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:df:af:05:5e:e8:3d:3a:c2:71:c1:8c:4d:cb:b3:80:6e:31:
b8:3a:2f:2f:50:15:2d:60:92:61:43:30:2c:6e:5d:cb:39:49:
43:75:1c:ec:aa:69:d2:5c:8b:b8:88:2e:74:02:86:22:84:65:
83:57:7d:43:0f:5f:54:28:5f:18:3c:6e:b3:40:55:50:eb:e8:
1c:3e:01:8c:ca:9e:01:a8:3c:14:42:f2:2d:b3:43:b6:14:fa:
c5:c3:f4:a6:d6:cc:5d:fd:3a:f2:da:c7:41:ac:a8:e8:93:ad:
d3:75:f0:da:6c:1e:4b:30:c7:ae:fc:67:82:95:75:40:6d:2a:
a1:03:08:c7:4f:be:04:c9:c3:bc:27:f6:2b:df:b3:3b:7d:e2:
89:d7:d7:39:dc:fb:ed:17:0d:e3:a8:e3:7d:4f:8e:00:e3:cc:
4d:2c:8e:5f:1c:85:ac:15:1a:33:6d:e1:28:25:47:cd:53:6f:
b3:2e:ec:9d:6d:d5:a4:ce:c3:42:bd:5a:0c:79:bc:ea:c3:4f:
f2:77:0e:29:46:c2:72:bc:83:91:fa:0e:39:2d:5f:a7:34:a3:
93:a1:1b:ad:a4:1d:9b:75:fb:25:98:01:fa:34:2e:c4:0c:dc:
43:4d:b3:0a:54:83:47:8d:f8:b8:af:c5:82:77:43:89:dd:e8:
4b:c2:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:41 2025 by rpki-client