Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: DXSaL0uHQQsIWE182IRg88sraHt3rPttRj1yg+RfRyU=
Subject key identifier: A1:93:2A:CB:E3:BE:94:A4:35:BC:8D:D9:E7:C8:99:88:6D:93:5D:86
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019770076D3E1919295A24EAC162ED667CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 13A0
Signing time: Sat 14 Jun 2025 20:00:24 +0000
Manifest this update: Sat 14 Jun 2025 20:00:24 +0000
Manifest next update: Sun 15 Jun 2025 20:00:24 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: KIywiFvejCt8KIHe7K6zpKaFyN1Z3P2i6x8l7UsqCu8=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:6d:3e:19:19:29:5a:24:ea:c1:62:ed:66:7c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jun 14 20:00:24 2025 GMT
Not After : Jun 15 20:00:24 2025 GMT
Subject: CN=a1932acbe3be94a435bc8dd9e7c899886d935d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:27:95:28:91:c2:21:f6:80:66:b0:10:4a:
46:bc:7e:df:dc:ee:45:4b:b7:21:df:39:7c:5d:ee:
8a:22:c6:33:e3:4f:30:39:bd:1b:26:5b:8f:d1:fb:
c9:d4:94:01:3b:21:30:0c:ef:f9:bf:39:8e:36:0b:
54:ef:43:c4:57:db:3a:36:c2:07:e7:c6:0d:c5:db:
be:81:e9:a8:f7:cf:72:97:6c:25:14:5e:1c:07:97:
59:87:df:34:b9:04:0f:7c:f9:ed:bb:a1:ec:96:01:
b9:90:5b:71:65:4d:6c:3d:49:8a:3f:74:fe:3b:f5:
b0:ea:12:54:01:10:cc:f6:ae:e1:92:6a:43:5c:b2:
fa:a5:6f:aa:d5:0a:58:a2:f7:3e:84:72:b4:74:30:
5b:47:31:c7:18:29:64:c6:76:30:c4:4b:ff:cd:34:
d5:61:40:eb:7e:88:52:42:61:68:52:a5:43:3c:be:
8d:e7:6f:4a:cc:b6:12:ca:d8:fd:82:42:51:09:1a:
e8:86:5c:5f:20:9c:b3:9e:d6:e3:2c:88:e9:20:5b:
cc:82:30:2a:7b:33:66:19:df:ce:66:58:3b:41:a6:
af:7e:23:0f:d9:f9:bd:e2:95:a9:39:9e:2e:73:7e:
b7:a6:0d:79:c2:af:6b:4c:d9:69:0f:15:9d:82:b3:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:2A:CB:E3:BE:94:A4:35:BC:8D:D9:E7:C8:99:88:6D:93:5D:86
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:72:70:da:6e:b1:36:d2:cd:b8:be:27:60:04:b7:44:b7:
62:d4:8f:73:67:f0:1b:ca:26:35:a0:b0:9f:09:2e:c8:48:c6:
bf:a3:4e:1c:60:0a:ea:ec:7c:00:34:00:23:68:97:0d:22:be:
2e:c7:b3:1c:c0:76:6a:ee:bb:bd:35:10:13:ec:ac:9a:b4:be:
4e:17:e5:c9:d2:7e:fc:27:13:5b:1a:ea:ee:79:fd:79:28:b5:
b4:11:9b:8a:a9:aa:84:79:78:6b:b5:b5:9c:02:3c:26:40:ee:
35:43:83:7c:bc:6b:23:74:1f:82:35:bc:e0:60:18:55:e7:72:
57:7b:f9:0a:c9:02:4e:9d:50:b2:d2:03:3f:0e:90:68:24:28:
7e:7f:db:80:e6:2a:95:dc:25:a2:fe:0e:4a:f8:05:c8:69:78:
83:fe:88:f0:f7:3a:b2:0f:1a:1f:ff:13:84:69:b2:b4:60:98:
3b:3e:43:62:90:24:22:f4:a9:5c:cd:1f:22:82:c4:0c:92:c9:
5c:a5:52:95:28:fc:03:c7:f4:f1:00:9c:ae:44:83:48:b4:c5:
33:d5:a9:dd:b6:84:ef:44:c1:b2:c4:43:e7:d2:53:71:ba:26:
65:5d:d3:cf:70:24:f5:44:a2:21:79:9d:cf:6b:cb:9a:72:a5:
0e:25:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:59 2025 by rpki-client