Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: TGVzQdF5oKArRfvYrD+CJUNzp+CtEDIyvJdujvhWlJ0=
Subject key identifier: 46:24:E0:FB:B9:8B:2B:72:5C:A3:4C:49:EA:61:28:17:BE:AC:61:71
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 0197B77CC42BD72C6E8535A3BB48DD74D33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 11D9
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: H8swdVL8H4+LJoa822LlR7DM4vP6mcYgCdRG9R9idsQ=)
2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c4:2b:d7:2c:6e:85:35:a3:bb:48:dd:74:d3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=4624e0fbb98b2b725ca34c49ea612817beac6171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:99:fe:75:f9:51:0f:f9:a2:2e:e4:a6:b1:
05:86:74:1d:54:d4:ee:33:0a:5d:7e:1a:e1:55:52:
81:77:a1:83:a6:5f:f7:23:13:78:f6:06:19:3d:39:
e2:de:27:15:c5:65:13:47:6e:90:4b:5a:b0:e3:f2:
12:31:58:bc:3f:94:ef:1f:91:f3:cc:ba:12:75:34:
fa:6c:4c:ac:5f:fb:e9:9e:ba:2f:47:77:1d:7e:71:
97:2c:15:15:0f:57:a3:1f:22:13:41:fb:b2:51:00:
2c:69:f8:8e:fb:b5:68:ba:94:d9:1b:4a:ae:56:7c:
79:a9:3b:fa:34:bd:95:05:e0:c4:59:1e:51:d8:cb:
cd:cc:8c:36:33:89:e6:75:8c:6d:13:ca:77:05:48:
ac:82:69:09:fc:62:2a:23:f4:3b:3a:ce:30:83:f6:
e6:34:bb:52:e0:d4:90:48:83:99:75:78:49:77:37:
4a:b9:c3:bd:8a:7a:4a:b7:9a:70:a1:28:92:1f:75:
43:0c:e5:d6:03:85:c5:ca:fb:21:de:61:8c:7a:92:
6f:61:98:cf:d6:31:07:e3:6c:28:01:ae:1a:b2:7e:
68:87:6d:ca:63:60:b3:0b:f3:58:1a:1b:f7:0d:47:
4a:03:88:2f:58:89:24:cd:6b:4d:c0:82:bb:1f:8c:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:24:E0:FB:B9:8B:2B:72:5C:A3:4C:49:EA:61:28:17:BE:AC:61:71
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a2:b1:60:34:8f:01:9f:e4:28:c1:e6:ee:48:d9:da:74:a4:
c3:ca:bc:69:24:63:0e:b6:ea:be:41:50:10:94:7e:5b:6b:73:
16:af:9a:83:34:d3:2c:42:9c:ca:99:ff:b9:c4:4e:2f:57:80:
1d:bf:de:21:0c:44:08:fc:ea:ea:31:83:48:c5:24:f5:ad:53:
b4:64:f7:78:a9:9a:48:57:26:96:f8:2a:4d:d5:aa:12:28:7c:
fc:06:35:7c:3e:42:74:4c:40:fa:76:ac:d6:a9:b5:c5:77:cc:
27:fb:09:09:7c:9f:52:a0:72:67:f7:6e:68:fe:41:e6:57:3f:
83:56:10:39:2f:e4:89:e9:f5:bf:77:b6:fa:2e:b9:bb:54:2d:
b4:9b:24:ff:0c:d0:4d:66:61:5b:fe:f4:f3:98:31:f8:c1:86:
61:cb:ac:f1:60:ae:a0:40:35:3b:52:17:53:d6:12:69:6e:fc:
c7:32:dc:51:0f:05:cc:ec:b9:e7:c1:fa:fb:71:d0:ce:96:93:
95:54:3a:79:e6:18:eb:9d:41:11:53:31:a0:d1:f9:5b:d3:ec:
a4:c6:df:b3:f3:4e:14:01:2e:f8:68:ae:d9:25:a6:f4:c6:5e:
91:4b:f9:51:72:68:3e:6c:7e:c3:36:2d:97:f8:9f:76:b4:04:
15:2e:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:36:36 2025 by rpki-client