Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: pxOMUlrsylC7R2QBmGxUhocKnvOOV0v0NaPtmCamdLU=
Subject key identifier: E4:5D:57:95:7A:C3:76:DA:62:E0:CD:B9:34:01:A5:A5:30:28:B8:E3
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019776AEA332D9D0893BD26010972FB1B2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 05AE
Signing time: Mon 16 Jun 2025 03:00:45 +0000
Manifest this update: Mon 16 Jun 2025 03:00:45 +0000
Manifest next update: Tue 17 Jun 2025 03:00:45 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: LQnsBVmJ7RtkzV373o0P+vl0V8JkNKXKTwXgXtZPFcM=)
2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:a3:32:d9:d0:89:3b:d2:60:10:97:2f:b1:b2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Jun 16 03:00:45 2025 GMT
Not After : Jun 17 03:00:45 2025 GMT
Subject: CN=e45d57957ac376da62e0cdb93401a5a53028b8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:6c:30:c7:c9:36:ff:f8:e0:7a:ed:61:3d:
df:65:30:86:f4:ca:64:0b:25:7d:30:21:bf:92:d3:
63:45:88:5a:6c:bc:38:ec:a2:96:ca:b3:7c:c4:21:
81:18:ce:53:21:d7:0d:20:97:7f:81:db:72:c2:2a:
32:a8:80:f6:d1:51:ba:1a:75:49:9d:2a:69:ec:18:
46:66:20:4c:cf:38:04:d6:e7:c9:00:95:d0:27:71:
a0:b5:f8:de:a7:5a:f3:b1:70:02:56:5d:a0:a2:2f:
75:a6:b9:3a:e4:8f:b4:14:89:7e:b8:3f:e8:ea:36:
42:ef:da:c9:d2:7b:13:a0:aa:c4:83:87:13:4e:d9:
9e:07:de:6d:7b:93:c8:29:1e:99:96:ad:1e:27:5a:
14:66:5f:d5:c2:dc:ce:56:88:85:78:f8:bf:03:90:
e0:37:c2:f5:a1:1c:9e:44:a1:4b:23:95:c9:93:6e:
06:d5:e5:17:2c:0f:58:c2:47:4b:99:d7:1a:35:f7:
e2:bb:29:62:d2:a6:bd:16:d7:03:42:66:f5:c2:87:
3d:05:9f:35:6d:83:c4:04:f6:81:73:63:cb:95:c3:
92:03:e4:b3:88:a1:f3:2e:b8:c1:d3:4f:34:a0:21:
fe:2d:69:27:9e:bd:08:3e:23:91:1a:c7:4e:35:07:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:57:95:7A:C3:76:DA:62:E0:CD:B9:34:01:A5:A5:30:28:B8:E3
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:02:87:a2:5e:45:33:71:95:51:58:db:4e:29:25:cb:55:b5:
84:e1:a6:17:54:0e:92:b1:05:02:98:7a:30:a2:0c:b0:d5:f7:
13:b0:30:c2:f0:9e:98:54:66:69:e9:dd:fc:75:54:90:fd:7b:
d3:6d:35:6d:e1:41:26:7f:a9:ea:c6:78:b7:27:63:06:21:fd:
7c:2d:2d:c4:bb:ad:94:3d:de:9f:3c:22:4e:c5:7e:17:11:16:
17:0b:50:09:d9:a0:54:5f:9f:70:82:cc:b1:f0:ab:c0:8f:12:
41:75:0d:e5:b5:27:11:60:72:7f:23:66:26:fc:52:6c:9d:c2:
ce:ed:84:ff:d1:c1:e3:1b:8f:35:ad:d0:32:3e:5f:ce:22:81:
df:a6:ea:ca:60:5a:e2:27:21:a4:3f:89:27:fd:e7:6b:fa:29:
92:62:38:d8:8c:0b:a3:58:8b:8e:26:df:dd:9d:b6:cf:49:e8:
5c:7e:0a:57:68:71:03:c2:2c:14:84:84:59:99:7b:ee:75:ae:
c8:0b:bb:a8:7a:12:68:eb:34:89:23:5a:9e:84:bc:2a:00:95:
5a:be:f3:07:08:8f:62:83:a9:5d:52:77:12:a1:6a:bc:6b:54:
a6:f4:d8:3f:1b:8a:e0:c1:cc:97:dc:7e:90:f0:5c:d9:eb:11:
ba:66:36:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:18:23 2025 by rpki-client