Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: mhOVLyfOoweFKGAcb+YLWPoKigYV017DarfNe3FmtrA=
Subject key identifier: 65:81:1B:E0:01:14:B0:C1:24:E9:EE:7F:9E:25:DC:C2:9D:7C:B4:D1
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019777540B406AA678FD74043611B053FC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 11CC
Signing time: Mon 16 Jun 2025 06:01:25 +0000
Manifest this update: Mon 16 Jun 2025 06:01:25 +0000
Manifest next update: Tue 17 Jun 2025 06:01:25 +0000
Files and hashes: 1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: 6Hg3hAUBd7pe0GQoOhHvvZPjnn6p2fA5UXVkpE24FsA=)
2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:54:0b:40:6a:a6:78:fd:74:04:36:11:b0:53:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jun 16 06:01:25 2025 GMT
Not After : Jun 17 06:01:25 2025 GMT
Subject: CN=65811be00114b0c124e9ee7f9e25dcc29d7cb4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:b0:46:65:b4:df:58:0a:dd:3a:fc:7c:1d:
eb:b5:ca:14:50:02:d3:01:83:2b:9f:ec:99:1e:ca:
92:5f:6d:e6:8d:30:f2:25:34:a0:3b:8c:f1:be:09:
eb:28:89:88:d0:7a:cc:67:a8:55:68:f6:a0:95:19:
d7:6f:a9:be:f5:0a:bc:e5:50:b7:5f:cc:68:6d:46:
eb:63:b2:fb:1d:87:df:9b:c2:f8:a8:eb:13:cc:9d:
b7:8b:d3:5b:94:48:0a:21:d9:63:76:4e:22:ab:d6:
90:88:1e:43:45:4a:57:1a:d2:22:14:1d:6d:c1:a6:
7a:38:c6:78:4f:19:fd:5f:22:be:c4:9a:39:8f:fe:
58:7c:ad:d9:28:ab:1e:7f:f6:1f:f4:7f:6e:59:ad:
36:03:31:2e:e9:88:58:c3:27:6e:a2:da:de:19:8d:
ab:74:09:d3:21:7b:b0:c5:68:8f:be:6d:72:0d:5e:
45:f9:8f:c0:47:5b:c0:e6:dd:b6:db:61:72:5e:eb:
92:c6:b3:31:59:54:64:94:85:7e:5f:72:cc:de:ca:
f0:31:f9:ec:c6:38:4c:93:9a:f3:3e:cb:89:90:1a:
66:a2:09:d9:7a:e5:38:df:89:b1:f4:e0:6b:81:a2:
8b:3e:fd:ad:7a:1c:61:0f:c6:f4:de:9c:06:11:f7:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:1B:E0:01:14:B0:C1:24:E9:EE:7F:9E:25:DC:C2:9D:7C:B4:D1
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a1:25:27:3a:c9:1d:03:4b:75:d4:6d:2b:63:db:ad:c4:38:
aa:b2:22:69:d1:a9:90:db:8a:7b:14:06:c8:06:29:26:bf:c1:
3d:b4:4f:0d:6b:5e:ae:09:45:74:0c:44:d2:77:7a:23:40:ef:
11:53:26:58:72:25:cf:01:a5:a5:36:9f:7e:be:ee:83:fc:e4:
0d:42:07:dd:aa:a8:2a:d5:32:94:fe:e8:38:9b:12:7c:50:eb:
63:4c:75:ea:62:aa:be:b2:aa:d2:1f:db:b3:87:b6:80:4c:b8:
2d:ae:95:4e:6b:be:9e:62:d1:88:26:7a:97:45:b4:d5:a5:02:
8b:eb:03:4d:1a:a6:c7:7a:40:f9:99:12:7d:5a:d8:ff:b5:64:
56:e0:a9:0e:a0:d3:70:32:c2:08:02:19:87:d5:af:4b:e0:29:
8d:22:af:84:88:d2:b4:03:b7:b4:d9:bf:ac:11:d3:d0:ca:9b:
49:71:19:e9:b3:33:03:14:83:1f:e8:b7:54:af:75:0c:a7:32:
ca:4e:08:b7:7c:f1:5b:03:1e:d1:74:ec:aa:6c:7e:a2:c7:e6:
c8:8c:1c:1e:2e:7b:1e:40:48:d0:89:be:90:2b:a4:1a:12:91:
59:03:da:c3:9f:b2:9d:c0:c2:e4:02:b7:03:7d:eb:7d:a1:58:
2a:ab:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:38 2025 by rpki-client