Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: 3uA2i3mROc3Igvajw53PtyKzVS+d7Z4K+ygMqheq3NQ=
Subject key identifier: 73:3B:0D:7A:60:5C:BF:BA:ED:7F:F7:64:11:22:C1:49:56:E8:74:EF
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019777C12A709C9DFF6E99173AB5FBF1D374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 084A
Signing time: Mon 16 Jun 2025 08:00:37 +0000
Manifest this update: Mon 16 Jun 2025 08:00:37 +0000
Manifest next update: Tue 17 Jun 2025 08:00:37 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: swXCoO37IQvE4T2OmiZ6nCwrhMSANQZh4ITipZl5KCQ=)
2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:2a:70:9c:9d:ff:6e:99:17:3a:b5:fb:f1:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Jun 16 08:00:37 2025 GMT
Not After : Jun 17 08:00:37 2025 GMT
Subject: CN=733b0d7a605cbfbaed7ff7641122c14956e874ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:af:39:7e:4d:ab:01:a2:35:51:db:51:90:
a0:e7:bb:b4:15:95:82:8b:47:95:ed:7b:dc:a4:df:
36:f6:18:4e:67:66:12:a7:16:1e:1d:40:6d:e6:1c:
f4:dc:2d:65:61:e5:9a:67:f6:a0:10:ea:a0:50:21:
f0:2d:1b:48:0c:f7:55:83:fc:6f:99:35:01:ca:a2:
60:d4:19:45:5b:9a:c8:89:12:3a:8e:d8:9f:f1:40:
87:e5:f0:26:ab:7a:51:a2:cc:bf:79:be:52:23:d1:
f1:07:9f:35:0e:4f:30:35:8e:7f:f7:50:84:9c:f9:
67:65:d9:23:57:6b:5c:60:07:d7:59:9c:e3:3c:40:
63:7b:a9:57:50:5c:7d:95:3b:64:4a:8a:34:f1:58:
07:65:f3:5a:e0:53:25:b4:03:88:1f:d3:21:d5:9e:
08:fe:8d:6f:f5:3f:2c:13:8e:af:45:4a:38:71:78:
ed:b9:99:b2:6a:ae:ab:5e:34:02:ca:2d:16:20:b4:
63:13:8c:ef:54:53:81:e4:1b:4a:1f:4c:bf:c5:1b:
a5:83:73:31:df:dc:13:90:f8:66:8c:0f:73:c4:ca:
65:3c:15:f6:a4:97:4c:60:d2:03:6e:c1:c3:1a:3c:
ba:7f:ea:51:d6:b1:c2:91:e9:86:18:63:09:50:b3:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:0D:7A:60:5C:BF:BA:ED:7F:F7:64:11:22:C1:49:56:E8:74:EF
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:1f:2d:21:ce:f9:7c:21:9c:b3:e4:87:67:1c:e3:b8:a7:
05:92:ed:aa:47:0b:a2:d3:ec:61:eb:00:2d:9b:08:4e:63:c8:
a2:52:fc:6f:a8:b3:af:8e:d6:79:a4:45:d3:7c:69:f0:c6:e1:
72:9b:31:ca:99:9a:31:75:65:f8:20:dc:cc:6b:4d:d4:5f:d7:
f8:96:27:dc:1f:f6:b4:8f:1b:66:68:2e:7a:5d:ae:b5:65:71:
8c:02:02:c9:8c:df:83:ef:a1:a1:1c:72:1f:67:6b:da:84:1e:
9b:88:26:1a:c9:1a:3c:b2:96:45:a7:69:e6:01:bb:35:59:18:
c0:5b:04:fa:ee:90:3e:72:ec:1f:b8:74:46:35:6a:58:6a:16:
7b:0d:1d:e3:1d:07:c7:f4:2c:ff:a1:6e:fa:49:07:41:7f:c1:
25:8b:c0:20:52:be:be:6c:88:3d:bf:0d:bf:22:6a:ed:87:6b:
28:7f:91:8c:19:12:15:75:db:2e:cd:fe:45:74:38:f0:f7:98:
5d:e5:e8:ff:72:af:8b:13:63:a9:7a:90:33:73:32:64:9c:d3:
21:e6:98:5d:7c:0e:e5:92:d6:b8:73:36:e5:35:f7:15:4a:82:
45:cc:0b:64:a4:66:2f:7c:8f:5a:d9:67:c4:50:dc:50:50:2a:
fa:d0:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:28:25 2025 by rpki-client