Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: BiJ3tqkzxHg+Ogf6BGc8+rRXkUKBvg7y6+aiEcwyhpo=
Subject key identifier: 69:48:AD:23:06:47:1A:1F:59:42:ED:31:10:12:0B:8A:CB:13:FE:CF
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 01977007BD808363BC4F5F912052ED3A206F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 0E3D
Signing time: Sat 14 Jun 2025 20:00:44 +0000
Manifest this update: Sat 14 Jun 2025 20:00:44 +0000
Manifest next update: Sun 15 Jun 2025 20:00:44 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: l/NIQqeaLbyqXBtVzdpLQ2G4ust/olVGE9bVdp3kkRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:bd:80:83:63:bc:4f:5f:91:20:52:ed:3a:20:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Jun 14 20:00:44 2025 GMT
Not After : Jun 15 20:00:44 2025 GMT
Subject: CN=6948ad2306471a1f5942ed3110120b8acb13fecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:48:01:ef:1a:2a:3b:7e:75:f5:dd:ce:f4:
3a:0d:11:92:28:1b:77:8f:07:ee:fc:a0:2e:4e:70:
7f:79:07:97:01:30:53:f1:f5:be:28:f9:dd:71:f4:
9d:23:64:09:a7:05:b7:9a:07:6d:4e:c0:41:84:a1:
a8:e5:bd:48:6d:df:aa:76:10:4d:55:16:c9:7e:61:
8b:b7:cc:91:1a:64:6c:3e:c1:c8:5f:f4:8d:7a:47:
d0:c6:5c:4f:f3:4e:e7:50:c6:db:94:4e:19:4f:e0:
d9:10:dd:c6:05:82:6c:36:93:00:0a:cf:4b:d7:e8:
67:c8:d7:77:b8:58:57:d2:23:61:12:aa:a4:a9:c6:
be:63:99:b6:48:5a:0c:51:64:a1:ef:8b:96:6d:39:
63:97:53:25:00:ef:4f:cd:dd:57:a1:b1:28:dc:2d:
8d:16:5d:8b:fe:ab:60:1d:12:9d:3a:40:e6:28:43:
bc:e5:aa:a0:da:44:a8:d6:7a:02:31:fa:02:78:82:
76:3c:17:57:f7:e9:47:db:ba:21:b6:c9:c7:a9:a0:
e8:38:ba:55:45:a9:ea:63:71:79:03:b2:e4:6a:72:
b6:9c:e7:88:17:9b:37:f6:c5:56:7e:e0:c2:54:53:
a9:0e:0c:63:67:e5:a4:7c:c0:fd:0c:23:4a:37:3c:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:48:AD:23:06:47:1A:1F:59:42:ED:31:10:12:0B:8A:CB:13:FE:CF
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:06:dc:48:18:7d:d2:2b:7e:2c:14:18:17:fe:2c:7e:aa:
96:02:4a:f5:2c:6b:a7:67:33:ec:80:f3:60:8d:27:4a:3c:27:
bd:fe:bc:86:b1:3a:83:88:8c:71:e9:e0:5c:98:d0:8e:1e:e1:
79:12:be:d6:52:10:85:5b:90:84:27:1a:fa:94:0a:a9:8b:23:
3c:d0:bc:58:81:3e:96:98:55:b7:48:9d:5a:38:27:f1:5c:ac:
e9:14:b5:56:c6:e5:17:68:ab:9b:36:3f:b4:a6:b9:6d:8b:df:
bb:eb:81:1f:0a:41:b9:dd:90:1a:6d:5b:4b:a5:f9:d4:d3:23:
25:e7:8e:86:1e:45:d1:cd:3a:7a:25:cb:e2:89:d9:f4:f0:7b:
18:a2:5b:58:b0:5c:f6:54:74:43:29:28:bd:0a:d3:23:d5:01:
e4:bb:64:5b:a8:1d:c8:a1:90:d9:43:d8:b5:28:c0:94:c5:f4:
ba:79:8b:76:71:94:ba:39:4a:45:fe:4f:4e:8d:e8:7c:cb:77:
6c:d8:d3:6c:98:dc:c1:d5:ed:38:a6:ae:a1:36:f2:1a:39:c4:
d2:da:13:0a:b9:6b:97:33:aa:b8:77:9f:97:7b:1d:c9:e0:d0:
b7:8f:b3:9b:d9:5d:7f:c4:95:90:38:71:24:ec:eb:e0:88:1e:
ab:15:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:24 2025 by rpki-client