Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: 9iew4h8w4AWGsCjKa9rlghDTFW4nStB26uykK9Tj3s0=
Subject key identifier: B0:98:6A:6F:C0:F8:D3:82:35:F7:CD:42:84:A1:A0:8A:3A:2B:79:EC
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 0197808E276A51A2DAAF415F5CC82F5A73B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: CF
Signing time: Wed 18 Jun 2025 01:01:29 +0000
Manifest this update: Wed 18 Jun 2025 01:01:29 +0000
Manifest next update: Thu 19 Jun 2025 01:01:29 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: 4pVB+1EVNg6s2AQZqjm1phIyrDPsOioSl+rJRU0y6QU=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:27:6a:51:a2:da:af:41:5f:5c:c8:2f:5a:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Jun 18 01:01:29 2025 GMT
Not After : Jun 19 01:01:29 2025 GMT
Subject: CN=b0986a6fc0f8d38235f7cd4284a1a08a3a2b79ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:e9:b4:cc:37:9b:16:ae:21:62:a6:1b:a4:
f1:d0:ef:41:a9:97:89:65:2a:90:5a:70:b7:7d:64:
6f:77:6c:bc:5f:1f:c0:15:72:53:14:2b:bd:0f:b1:
39:4c:50:5d:34:cd:67:2f:18:29:7f:c7:74:cd:1f:
19:c3:71:a2:f2:92:5e:00:09:d1:66:f8:d8:99:21:
29:86:d0:2d:8d:ac:d8:33:7f:5c:08:1d:ec:78:43:
bf:fd:f4:9b:64:d1:eb:c0:a7:fd:ab:00:1a:a8:c8:
29:85:56:49:d1:4d:37:a2:0b:26:fd:e6:ce:5e:0a:
ad:85:af:1c:80:31:d0:84:c9:7a:2b:6f:d2:72:58:
1a:f3:8a:6f:3f:a9:97:df:44:5f:90:31:98:07:9c:
6e:8b:50:7b:81:06:42:4d:10:7e:96:a9:b2:69:f3:
2e:58:a2:f8:67:98:1c:f5:53:13:fb:94:95:dc:7a:
f3:f0:5b:54:bb:78:ea:73:6d:18:38:d3:68:66:28:
86:0c:0f:f6:7d:b9:37:d7:31:c7:4d:7a:69:0a:32:
9a:3c:b1:cb:42:12:3a:37:0a:2e:18:0c:22:f6:e8:
6c:ad:fd:f9:35:e8:7e:b9:3e:ef:69:cd:81:7c:4b:
34:19:16:86:cb:da:77:fe:6c:71:99:86:b9:90:b3:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:6A:6F:C0:F8:D3:82:35:F7:CD:42:84:A1:A0:8A:3A:2B:79:EC
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2e:1d:3c:8f:24:6b:33:4a:56:c4:1d:6a:c7:35:de:f2:00:
6a:dd:78:c9:cc:f7:93:df:33:5e:8b:94:3d:d9:89:d4:2f:00:
e4:53:aa:a4:fb:c8:58:e2:fd:16:e7:7f:bd:69:8c:9a:16:66:
eb:ec:4f:6c:f3:9d:b4:be:04:15:6c:0f:08:91:ee:10:d3:fa:
ee:29:30:66:76:08:0e:d3:ea:a1:3b:7c:24:a6:23:4e:3f:fe:
3f:9d:66:2f:86:dd:dd:d9:76:2d:98:9f:c9:61:7c:e9:55:d7:
8c:82:87:7b:ff:4e:07:62:34:a8:47:59:bf:5a:d7:1b:60:de:
24:0b:7f:16:43:a8:8e:3e:78:97:34:9e:e3:73:39:12:d7:e8:
73:f9:90:be:32:6d:3f:be:d4:a6:96:c7:f4:38:3a:ce:1d:f0:
48:85:bc:5b:8e:d0:7f:77:15:78:54:29:69:50:76:6b:d0:a5:
33:f2:d6:1c:82:a1:3b:30:e4:63:55:43:89:8f:32:f0:4e:02:
f8:21:26:fd:c1:46:9e:b7:ef:4f:8d:2f:a2:d2:a9:e7:4e:da:
16:3a:9d:30:ad:be:31:40:cc:6d:6d:30:90:ba:94:40:b8:2a:
59:5d:c5:66:ba:37:6e:f0:16:4c:4c:15:81:f2:93:ac:98:d4:
c3:fa:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:07:40 2025 by rpki-client