Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: Svu3g9Di8Si2DgAUYHoOEK4URJH5i7kVcvpAJYYXPrc=
Subject key identifier: 25:52:9B:B1:A7:E6:9D:53:6C:81:FF:11:69:AB:8B:E7:1C:D0:38:05
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 0197B6327209CD25142A18E3F9184F950303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0E52
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: Y+AxTD/RzIoXRnOcdKAWd7vrZ/khH+CBOHXN9iLeSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:72:09:cd:25:14:2a:18:e3:f9:18:4f:95:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=25529bb1a7e69d536c81ff1169ab8be71cd03805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:2c:09:76:81:1a:46:fb:cc:96:65:9c:89:
2b:d6:c1:26:98:03:c3:4e:12:41:a5:2b:63:92:de:
fa:65:a9:18:59:1d:f3:a0:71:e7:71:d3:a2:34:4f:
93:1b:04:e6:9a:e1:93:aa:27:8b:f0:30:18:75:4e:
3a:31:34:c3:83:d5:b8:08:98:2e:61:b1:25:46:5f:
59:5f:ed:60:0a:27:06:2d:2a:f9:7e:64:6d:ba:0e:
e1:67:a0:45:db:77:86:c4:9f:92:f2:ec:18:d2:ad:
6e:44:ef:9c:36:58:c1:e5:30:a2:6e:0e:b6:61:df:
cf:46:36:3e:10:64:93:5a:0e:df:03:91:31:97:09:
4b:4d:eb:df:c7:88:c9:29:80:e6:66:75:13:99:ec:
eb:5c:c9:3d:58:e5:3d:5c:b4:ba:ca:14:17:06:ec:
d6:27:09:f8:10:e2:a4:29:bc:07:6c:30:7d:2b:b6:
f3:49:c0:27:ea:35:b0:32:d6:8d:3b:ad:e5:a0:e2:
65:0d:dd:b8:43:13:44:1d:13:67:b2:9f:28:ca:a0:
e1:42:23:fa:ee:df:12:7d:65:aa:0d:e1:8a:b4:e5:
8b:45:42:aa:90:7d:ec:f4:cd:56:97:b6:e0:7c:e6:
42:6f:96:03:05:00:a9:e4:07:27:4d:79:4b:f2:8b:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:9B:B1:A7:E6:9D:53:6C:81:FF:11:69:AB:8B:E7:1C:D0:38:05
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9d:1e:ca:6f:3e:a7:49:28:0e:7d:88:9d:4b:f2:5d:9a:c4:
b5:52:95:38:fa:14:ea:29:2d:9d:9f:41:15:f2:e2:b0:6e:4e:
2c:ef:3d:1e:fc:22:b0:7e:bb:c8:35:f5:03:2b:4b:e0:43:7b:
a8:7d:82:78:f2:cc:46:e3:f1:e3:f8:3b:d8:76:e2:78:b3:31:
77:7c:19:04:7a:36:8e:9f:14:d8:ef:b9:73:11:90:52:3d:94:
93:e4:fe:ab:29:f1:0c:d4:75:5d:48:a7:4c:48:31:12:7b:22:
9b:83:b6:36:af:59:91:79:7a:f8:7b:ad:9a:d0:26:d5:04:f1:
fc:91:6f:3d:ea:b4:21:56:fc:70:10:8e:24:92:e5:12:ca:b1:
ae:3c:64:e4:51:79:a8:41:c7:7e:e6:5e:b4:be:49:53:a9:e9:
8c:4c:47:c4:d9:72:3c:69:d6:af:e4:f7:8a:cb:6d:65:15:c9:
51:8f:c4:9f:17:58:a4:a0:5b:20:64:f4:d0:01:52:95:a6:07:
cf:7e:46:66:94:a7:33:45:45:61:1e:c8:ac:72:c3:7c:64:65:
b8:2b:04:3e:b9:cd:97:77:7d:d1:7f:c9:c8:81:e7:ab:86:fd:
cd:38:5b:63:95:68:6b:b2:ae:b1:3f:9a:9c:01:2a:4a:3e:a2:
5f:28:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:15 2025 by rpki-client