Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: pLys1NQXOaHzvF0EJBQgC9PYTsSK8CHr317zmoVzbKk=
Subject key identifier: 20:F8:24:BD:19:57:9E:E9:77:48:5E:6A:02:6D:1D:AA:51:42:DB:AC
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0197B6D79FD65D02876453F03C4A486B7941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1435
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: 8IWqI4J4mvChEma5e7gBQuXi0QOkgSczd95t6tiLVuU=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9f:d6:5d:02:87:64:53:f0:3c:4a:48:6b:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=20f824bd19579ee977485e6a026d1daa5142dbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:27:d2:d0:66:7c:6b:92:38:eb:38:a5:fc:
52:2b:f3:fb:0d:0e:3e:5b:49:0d:18:c4:8d:3b:35:
93:14:17:e8:c8:e3:17:4a:a0:9b:8d:4c:0a:8d:ce:
96:50:d9:07:27:18:32:14:a9:f6:15:1a:a2:d6:e8:
ea:00:32:2e:bc:ae:39:8f:8b:96:23:8b:32:6c:ef:
01:da:82:b6:49:c8:79:60:5f:ce:e9:ec:2d:47:94:
7d:27:22:66:df:17:2b:a9:31:35:d1:f8:08:5d:48:
eb:5d:7c:b4:84:91:ae:bf:52:64:56:9c:d1:38:db:
22:d8:38:4c:34:9c:b6:49:dd:ff:40:7a:9d:6f:73:
e7:6d:52:d4:ba:19:ca:38:fb:98:12:c3:9c:01:bb:
e6:31:44:5f:b8:30:67:4e:ce:df:cc:f9:60:09:cb:
bc:31:26:2d:8c:10:18:1f:bf:37:b8:9b:25:2e:67:
68:be:53:50:5c:97:ca:ae:66:c5:8a:50:48:66:89:
24:a7:6f:09:f4:13:ff:78:d8:34:23:53:5b:2c:3e:
cf:37:17:05:e1:20:5c:7b:59:9d:1f:bb:e1:35:64:
9c:b1:11:94:5f:c3:63:37:49:10:55:e0:ea:d6:cb:
b8:c2:4a:8d:e9:7c:ea:42:08:40:ba:6e:40:67:bc:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:24:BD:19:57:9E:E9:77:48:5E:6A:02:6D:1D:AA:51:42:DB:AC
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:83:cd:a8:da:b0:2d:c7:91:fd:63:26:4a:49:e1:0b:cc:b8:
62:08:d9:f8:39:a2:ec:f4:bc:7c:3e:7e:6b:ac:40:67:2a:33:
bf:16:a4:6f:a4:be:f7:a9:73:21:7c:ec:5a:01:14:8e:37:77:
d1:42:24:a2:39:a6:49:ad:ca:4f:6f:d7:85:2f:dd:9c:8e:60:
ad:80:53:20:76:62:16:44:c6:6c:85:54:06:2d:47:6a:cb:22:
ee:bd:65:4b:3c:0e:e5:86:e5:69:04:13:41:b6:af:c2:65:82:
eb:c9:6f:85:5c:3f:30:ee:3a:81:ad:94:cc:f0:5d:09:17:8b:
5f:51:43:70:1c:ff:38:62:17:11:69:2d:e6:e8:07:f0:e0:f0:
3d:a9:e2:53:7c:0a:3b:70:3c:82:67:78:a5:3e:b2:df:5e:11:
7a:4f:0f:1d:c1:1a:58:5b:26:52:32:7a:35:34:a9:40:98:ec:
90:04:19:53:9f:f0:45:e8:b8:93:26:17:d1:96:46:4d:17:8e:
c6:f4:05:d9:ef:ed:19:f2:44:3f:0d:ff:ff:fd:5b:c3:a9:ce:
cd:90:f0:30:62:10:7b:34:eb:12:2c:2d:08:4b:58:d7:cd:ca:
f8:4d:c2:9b:68:11:25:ad:cd:73:5f:75:7e:2b:c3:90:eb:5e:
7e:3d:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:31 2025 by rpki-client