Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: 7TuZDGZkg2e0W5QehKOJABiu3mT6Ms+JsVV6mMILjCA=
Subject key identifier: 7B:C6:AC:AE:5D:19:71:00:E1:BD:AE:DD:28:4B:EE:B8:44:55:6D:94
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 0197B7EA4DF737B4329939AF6EF9102D57FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 1487
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: dAo6uQ4TybTfG2QEWc6zKcGnjHpV3EICEhCI5OQOwUE=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4d:f7:37:b4:32:99:39:af:6e:f9:10:2d:57:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=7bc6acae5d197100e1bdaedd284beeb844556d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:11:33:6f:6e:fb:ad:1f:41:03:3a:11:cc:
18:ef:2e:18:b9:6c:7b:e2:84:23:aa:d0:ef:bc:26:
33:96:c9:4d:f4:48:21:ca:b2:77:e5:ae:eb:58:46:
83:63:de:89:7c:69:82:57:b1:02:70:04:87:ff:1c:
5f:86:7e:c3:a3:f1:c8:cd:64:a6:01:63:b6:14:fd:
7c:81:28:86:9a:0a:2c:f2:f3:0f:6f:02:86:df:e1:
7f:45:7b:b9:04:2b:48:39:32:9a:d0:9b:f1:33:55:
1f:7b:20:24:97:d1:a7:32:68:31:3b:d5:cc:39:f0:
71:6d:91:ab:38:8d:53:6a:33:cf:96:d4:96:89:5d:
f3:bc:a3:88:e1:83:4c:e3:44:45:9a:46:c6:0e:01:
d8:a0:67:25:62:69:59:4b:ee:c2:fa:86:8e:e6:10:
dc:0e:c2:88:94:d5:a5:19:cb:33:55:69:c3:92:9a:
d5:56:cc:ee:3d:1e:25:4c:ff:cc:bd:cd:98:85:86:
80:2e:c7:0a:d1:29:05:f9:31:6b:d9:ac:2c:d3:29:
2c:ff:11:8b:c4:3a:95:1c:3f:02:e3:58:52:5c:67:
15:60:d8:f2:6a:3c:af:57:c8:00:17:83:78:cc:1c:
53:da:d8:1b:70:63:cd:39:57:24:cf:ad:e1:de:d3:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C6:AC:AE:5D:19:71:00:E1:BD:AE:DD:28:4B:EE:B8:44:55:6D:94
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:4e:9e:2a:f6:9b:d8:55:56:ca:7b:ae:a9:8f:43:f3:12:
24:56:57:ed:99:c5:b6:a2:fe:e8:4e:4f:a1:b7:cf:18:4d:61:
fa:4a:43:e1:2e:bd:6e:d5:cf:f8:ee:d6:3f:88:2f:e6:37:1c:
a2:25:ec:3a:52:6e:41:7c:89:f1:98:c6:9e:34:4b:80:50:cb:
1c:6e:ec:15:57:71:04:be:47:36:01:1e:d1:74:cd:14:c5:57:
32:f0:52:ef:05:75:07:b4:fd:d4:29:3f:d4:ef:41:40:64:bd:
d0:fe:05:e4:0f:c8:5d:d0:8f:41:97:11:8e:eb:b4:91:08:8a:
19:74:1b:34:54:a2:98:2d:81:f6:d3:38:dd:07:68:ed:3e:d7:
db:77:5c:1d:fa:c5:06:d9:9c:e0:f2:69:6d:02:67:8c:36:50:
1c:e4:5e:fd:c0:c7:cc:6c:9c:8c:4c:43:ab:f8:45:46:5c:47:
30:b5:a0:2c:bf:b4:c4:46:87:4e:03:8d:b7:0b:b6:64:7a:21:
2a:cb:30:e3:37:08:d1:1b:9e:4d:c8:df:dd:88:57:76:39:a3:
65:13:0a:bf:5c:a0:f6:62:ec:03:0e:24:76:71:34:51:78:da:
d3:51:26:70:0b:bd:b2:74:7c:bf:6a:70:0d:82:1c:70:37:9c:
3e:48:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:53 2025 by rpki-client