Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: fREZlI5d0oYn2KN6355MU1+4aJuiEKGFsrJ1/s6x+hs=
Subject key identifier: 97:13:C9:1E:23:8C:8C:7B:8F:C0:47:E8:C2:14:C6:D9:DF:59:B2:D2
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 01976D3D56BA9156EBE3DD3FB317C995E9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0409
Signing time: Sat 14 Jun 2025 07:00:25 +0000
Manifest this update: Sat 14 Jun 2025 07:00:25 +0000
Manifest next update: Sun 15 Jun 2025 07:00:25 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: ohDNvhqm5O6po02q5ShKrRi9mpzsyTUwKNGiJd+T6e4=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:56:ba:91:56:eb:e3:dd:3f:b3:17:c9:95:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jun 14 07:00:25 2025 GMT
Not After : Jun 15 07:00:25 2025 GMT
Subject: CN=9713c91e238c8c7b8fc047e8c214c6d9df59b2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:48:0e:e6:f0:6d:44:0b:b7:c2:2a:bc:35:
6e:89:f5:9b:a4:30:dc:0c:4e:70:e2:d4:40:70:77:
18:f0:68:ae:a9:b0:0f:b4:53:c8:d8:0a:64:2a:51:
18:39:a8:aa:8c:26:c6:95:bf:3e:d1:e1:2a:5b:91:
f3:d2:8f:fb:ba:66:96:42:15:a3:4d:4d:b3:4f:b2:
18:ba:9e:91:dd:83:77:c7:ff:e6:9d:f4:89:ff:0f:
88:3d:58:69:76:b3:d9:c0:3e:1f:02:b6:7b:96:f9:
67:7f:d1:c1:c6:1e:94:77:c6:30:3d:8d:da:06:9e:
86:9f:c6:1c:1d:1a:90:94:68:54:de:7f:2e:0b:25:
85:b9:ac:07:9b:5a:ed:3b:c4:d8:64:31:a7:1d:84:
13:d3:c2:b2:5c:a1:c5:57:a5:18:3a:79:77:21:6a:
57:01:24:02:24:2b:d9:4b:ee:4f:7b:ba:96:c6:5c:
1b:b5:b1:cd:05:ff:e0:10:53:69:7e:58:35:b6:e9:
07:52:f7:c1:d3:56:ce:fa:de:b6:09:0a:c4:b8:68:
3b:a3:0b:5a:33:d6:8b:96:27:02:1a:06:10:d6:d1:
db:a1:56:1c:70:9c:c2:80:f6:67:46:f1:bd:ff:e6:
5e:01:9e:33:df:17:48:88:6d:7a:9d:42:04:d4:9b:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:13:C9:1E:23:8C:8C:7B:8F:C0:47:E8:C2:14:C6:D9:DF:59:B2:D2
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:b6:24:2f:10:7f:07:9c:d8:70:05:c4:d1:2a:2b:1a:5f:
e8:73:d5:d7:0a:8a:ce:d0:cb:a2:b6:5d:4d:8a:e5:4e:a3:f8:
a3:f1:73:74:0e:d8:d9:7e:a4:ac:32:81:5a:4c:06:f2:82:7e:
54:8c:07:c3:53:7d:29:0c:99:4b:59:0f:6b:2a:62:8a:10:37:
7d:dd:22:78:35:f8:5b:9d:5e:7b:2b:b7:5c:5b:b6:5f:f0:4c:
20:0f:92:26:99:c6:1f:f6:ab:3e:59:21:ca:ee:c1:ef:54:5b:
47:b8:f1:9e:e5:38:ca:81:86:43:bc:b9:24:8e:e5:e9:7b:2c:
e7:f1:6c:c1:52:29:62:bd:5f:d7:35:b0:d4:d3:33:30:e1:c1:
24:86:a0:08:87:d0:e4:03:72:85:7e:0e:f5:b0:53:6d:c2:c6:
4a:b2:42:bf:d0:02:d9:91:3d:76:55:de:1c:bd:2c:fb:d3:c7:
e4:d6:dc:54:9f:cf:7d:39:b6:3c:4e:f1:19:b1:18:8f:39:1b:
6e:49:96:ad:0b:5a:50:b6:cc:f3:0a:aa:3f:49:45:b0:05:8a:
ce:54:25:4f:a0:e0:c1:9a:d1:37:02:be:eb:83:38:ef:fb:b2:
0b:84:46:9c:85:f3:ef:12:61:d9:3f:0d:67:c2:3a:10:ea:cf:
96:c2:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:56:35 2025 by rpki-client