Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: MnwwAM1YnUqpCZKS8mqPTUDwNvWTB42vuAZ1zntg/BQ=
Subject key identifier: A4:67:3A:FC:0D:7A:B3:A6:60:E4:C7:B8:5C:DC:FA:91:30:2D:F8:9B
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019776AEBB9E8849BFECA323E55624983A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1527
Signing time: Mon 16 Jun 2025 03:00:52 +0000
Manifest this update: Mon 16 Jun 2025 03:00:52 +0000
Manifest next update: Tue 17 Jun 2025 03:00:52 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: zBhY3xzO+VZDJ9b0a8XZHQOsCKtyA+yiiBFis553+xU=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:bb:9e:88:49:bf:ec:a3:23:e5:56:24:98:3a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jun 16 03:00:52 2025 GMT
Not After : Jun 17 03:00:52 2025 GMT
Subject: CN=a4673afc0d7ab3a660e4c7b85cdcfa91302df89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:c7:7f:95:dc:5b:5c:82:8d:a7:25:1a:49:
75:62:7e:23:c6:4f:1e:55:0e:bf:38:9d:7d:e8:74:
65:92:44:14:6f:e4:da:b4:a9:f4:20:dc:bb:39:d1:
eb:f3:74:e2:60:0f:4e:5a:3e:f3:1d:fd:72:b8:7d:
22:b9:21:6e:94:c8:d5:ed:22:4c:dc:57:aa:74:53:
ed:a6:a6:54:13:e2:3e:03:0d:7e:01:14:90:90:fe:
e7:ed:3b:0a:cc:3d:fb:f6:fd:8d:e9:c8:ba:26:cb:
37:59:02:87:29:21:30:3f:f5:3c:34:c5:95:5f:36:
14:5b:51:fa:2b:a5:e7:56:40:8a:cd:45:95:c4:2e:
c1:81:e6:f6:ae:dc:74:53:8d:0d:31:65:df:cd:42:
0f:75:bd:c5:37:54:ec:79:46:8e:62:e7:24:c8:e9:
a4:f2:ce:d0:f7:88:64:fc:ec:03:2c:a9:49:5a:88:
12:7c:77:7f:cd:d8:8f:a4:b6:ee:bb:a0:d3:22:d2:
4c:eb:c2:26:21:a1:60:e2:9e:0c:99:18:e3:81:52:
c8:2b:25:3d:47:6a:78:57:8e:e6:a3:53:a0:d5:99:
33:ae:5f:09:2e:bb:7c:32:1b:17:81:05:52:51:7f:
0e:33:a4:0b:7f:96:0e:dc:5b:da:59:9d:fd:df:99:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:3A:FC:0D:7A:B3:A6:60:E4:C7:B8:5C:DC:FA:91:30:2D:F8:9B
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d4:73:2e:d3:76:5f:8d:8d:70:e6:98:23:47:bb:2d:ae:bd:
a5:f7:6d:5b:3d:b8:5a:78:b8:a7:e4:0e:4c:bb:70:7c:76:01:
a4:52:8b:cd:23:c3:92:21:e3:eb:38:ab:7a:89:16:bb:7e:ef:
a8:c5:5f:26:35:9b:e8:58:42:bb:79:0a:7c:e5:38:e3:6f:b7:
bb:b0:1e:3e:f5:69:53:e7:17:99:9b:9b:0c:2c:69:3c:bc:14:
ba:6a:8b:8a:49:72:32:ba:c1:29:e9:1c:f4:cd:82:92:b2:bc:
cc:da:a6:73:25:ea:4c:47:cc:20:e1:d1:01:31:60:9a:d2:66:
8a:84:49:29:6b:e7:1e:af:f2:44:f2:dd:58:2b:71:d8:dc:ba:
ab:78:f8:5b:14:0e:38:62:b7:8c:7f:44:de:0b:4c:f3:1d:8b:
70:3f:af:5a:dc:2d:e2:1d:11:c1:ce:97:92:a8:72:6a:45:eb:
6c:b9:ee:77:b4:82:5c:21:bb:27:44:39:ec:75:b3:af:d4:7a:
95:9c:e9:8b:27:a3:3f:6f:d7:ff:3e:66:61:6b:51:a5:fd:c9:
11:19:7c:89:99:6f:35:63:79:71:79:bc:b0:d2:e5:72:a4:ab:
80:2e:c2:bc:02:5c:cd:2a:7b:c4:e4:1d:5d:0f:c3:8f:b9:98:
08:f3:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:00 2025 by rpki-client