Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: 4C1bBkk+VaSjXK73kFM9EngHVHXB6FJFG9EYN5klpew=
Subject key identifier: CD:EE:EA:DA:26:3A:21:E4:EB:A6:FF:EE:90:36:D9:02:B2:50:23:C3
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019770078813F56E88AF89A767A76CEF319C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 02AB
Signing time: Sat 14 Jun 2025 20:00:31 +0000
Manifest this update: Sat 14 Jun 2025 20:00:31 +0000
Manifest next update: Sun 15 Jun 2025 20:00:31 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: zuqTFfKd59ObdSxC5uaF09XZo9V13fEZHelWXB6RK2Y=)
2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:88:13:f5:6e:88:af:89:a7:67:a7:6c:ef:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Jun 14 20:00:31 2025 GMT
Not After : Jun 15 20:00:31 2025 GMT
Subject: CN=cdeeeada263a21e4eba6ffee9036d902b25023c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:fa:40:5b:ad:98:e9:40:bd:45:c7:64:44:
06:47:ec:35:d4:b1:b4:cc:c9:16:ab:38:15:b7:41:
6d:87:ca:e6:3a:d7:4a:10:6a:ac:ff:57:b9:db:f5:
bf:35:c3:78:04:06:ca:15:96:43:c6:49:fd:ab:4b:
bd:fc:b6:3b:00:19:fe:4c:7b:ba:1e:a3:59:f9:77:
86:f0:7b:7c:32:5d:33:31:66:59:11:c2:dc:7e:fc:
e0:0c:34:83:f6:83:b3:0d:de:58:c0:6d:7b:07:19:
b7:48:5b:89:f8:ed:db:c8:36:31:4d:c1:e5:2d:a4:
a9:9f:5b:9a:a1:c0:b5:cb:ef:f5:ec:9d:8c:25:91:
94:ae:8c:ee:e6:57:8c:85:0e:c9:4a:a1:fc:b5:8a:
33:a3:4a:b0:e5:3f:ca:d4:05:4b:c5:ee:b1:51:e1:
9d:78:c2:8e:d5:af:de:33:14:60:ac:8c:95:64:b2:
89:91:cf:70:c2:93:c7:e0:53:7a:72:0a:4b:16:a0:
7e:bc:85:b7:54:6d:d8:2c:c0:c0:ef:34:ff:50:26:
a5:ec:dd:34:50:a6:d7:63:f9:cb:de:d8:74:ba:9b:
58:a4:40:87:0e:86:68:8b:a8:f4:cd:0a:53:a2:96:
f2:b6:4d:1d:75:a4:94:35:7a:0b:35:88:8e:a5:d0:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:EA:DA:26:3A:21:E4:EB:A6:FF:EE:90:36:D9:02:B2:50:23:C3
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:bb:e6:a6:68:62:61:f8:9a:19:ef:82:d9:5a:5f:de:20:
36:f8:98:1f:3a:3c:83:28:b4:72:85:26:35:62:ff:ac:f0:de:
b8:70:2b:79:71:59:d9:fb:7b:e9:6e:92:7e:27:f3:3b:3e:d8:
95:2f:4c:61:ef:ef:cc:63:8b:2e:f7:32:a3:b9:f8:44:74:34:
71:a2:81:7c:f7:2d:40:ef:b8:c2:2e:ee:fb:da:f0:ec:5e:96:
3e:d3:80:46:73:09:49:89:54:46:14:17:23:85:b5:18:21:52:
cc:97:f4:11:9d:9f:93:f1:f9:47:04:70:8a:5d:25:5c:49:b2:
a7:d3:9c:74:96:95:54:1e:84:83:2a:7e:27:ce:28:b6:54:85:
d5:3f:86:d9:55:7c:8c:20:84:bb:69:0e:d7:d0:9b:37:ff:08:
69:4d:f7:1f:52:62:ba:6e:44:66:fa:e0:bb:e4:fa:06:d1:06:
4e:4e:d6:5e:24:58:75:2c:a1:bb:82:6a:b8:e8:d1:6e:63:7a:
75:e1:1e:cc:97:2b:3b:87:6b:62:6a:93:5b:b3:f0:53:38:ad:
8c:68:3e:a7:b1:39:5d:cc:01:f8:82:a9:c9:b1:a9:1e:2f:25:
1c:56:b8:02:97:4a:9a:45:cb:d9:da:7e:1b:24:f0:7b:7b:73:
74:5b:57:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:32:47 2025 by rpki-client