Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: RvgPEcjjWyFAP4qR82+K15Su732MgLxBcI8hfkeUEsA=
Subject key identifier: 71:F1:63:63:E5:4C:B7:9F:F6:4A:4F:AF:39:2E:2D:86:BB:15:FE:D0
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 0197B70EDBC36D47BFC628969D28273D1D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 095A
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: AkGFP4fPqf3MIPjuQnCIgToGYM2EDRksy+mM4AlJTp4=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:c3:6d:47:bf:c6:28:96:9d:28:27:3d:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=71f16363e54cb79ff64a4faf392e2d86bb15fed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:bc:bb:a6:37:c7:16:9a:0f:ec:30:cf:2f:
90:e3:83:ef:29:18:0b:7d:20:77:ff:97:6f:76:b9:
3f:35:5e:80:e8:e3:ec:9a:4b:bc:4f:9a:7d:d1:ba:
45:3d:45:0b:04:08:16:43:d6:a0:12:90:06:e6:90:
e0:7d:92:2c:24:e8:23:02:e0:55:b3:6f:f8:76:5c:
19:9c:28:a2:c0:3a:6e:66:35:9c:09:28:01:d7:35:
0d:d0:69:28:a5:5a:16:3b:c9:bf:06:6e:ff:ff:2e:
bc:c2:38:d3:c4:c8:7b:e7:64:61:13:bc:5b:02:3e:
d9:d1:ab:f6:39:9c:bb:47:98:cd:46:50:2d:bb:3c:
18:da:e5:fd:b4:a8:e5:87:0d:98:8a:69:e7:20:77:
ae:d6:4e:0f:c2:03:dc:cb:2d:56:97:7a:b4:83:71:
65:d5:fd:52:a0:12:32:3e:75:1e:b9:bc:01:be:e7:
3c:a1:30:e7:db:24:d5:76:af:34:4b:4a:35:a5:67:
04:1f:45:39:d4:77:70:08:24:fc:7a:da:b8:64:5e:
8f:e8:f9:01:60:96:d9:37:25:64:83:52:a3:15:db:
3f:2e:43:cc:ec:f9:15:99:e1:bb:f7:29:f3:09:d6:
bb:cb:a3:3a:46:18:12:1f:06:3c:fb:74:e4:d9:9d:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:63:63:E5:4C:B7:9F:F6:4A:4F:AF:39:2E:2D:86:BB:15:FE:D0
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d5:25:bf:68:86:34:28:64:01:36:53:e5:d8:ae:c5:0b:77:
10:09:0f:1c:97:08:b8:ce:3f:01:70:96:67:ff:ca:af:fd:7a:
e3:50:c1:29:27:89:8a:00:f5:19:4b:28:63:22:3a:8c:72:c1:
af:3e:b7:2d:4f:ca:63:f9:8a:d1:95:95:9a:c0:6c:5d:94:43:
c5:4e:34:86:32:a7:da:94:c5:c5:c4:46:9e:95:57:c8:2b:e0:
2d:ae:78:cd:7e:22:d8:37:d0:b8:33:da:6b:ee:94:6b:ec:54:
bd:ab:75:e3:69:68:97:6b:44:e3:b9:d5:aa:9d:be:1d:8f:0d:
69:f5:1f:43:fa:4f:38:2d:8f:aa:b1:7b:9b:05:66:12:ff:06:
93:75:03:49:c9:ea:41:a5:4c:fe:7f:a6:00:69:d2:a1:44:a4:
b2:ab:8a:2e:ea:a4:22:fc:08:e1:bc:01:c1:12:ae:b5:9f:59:
56:cc:0d:9e:83:42:40:b3:ba:69:e9:5c:3c:70:ae:9f:9f:a5:
33:e5:99:1f:5d:1c:e5:01:62:6f:4b:5a:0a:f5:ec:4e:cd:c7:
b8:47:89:47:b2:d2:1f:1c:f8:87:46:d0:fb:68:e6:4a:bc:5a:
7e:69:1c:9d:f2:d2:31:bf:d9:d4:20:69:72:1d:33:de:9a:49:
11:37:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:05 2025 by rpki-client