Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: Zg0l6aJHilECvypAd5tHIADgtY4kHQBtKBJhyd/eCaw=
Subject key identifier: 2C:1E:BD:23:C7:7E:41:C2:D2:E7:CA:6A:7B:AE:22:AC:EA:E2:46:0A
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 01976BBD258EAA4A2A9BC1D42EA0E106BDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0511
Signing time: Sat 14 Jun 2025 00:00:47 +0000
Manifest this update: Sat 14 Jun 2025 00:00:47 +0000
Manifest next update: Sun 15 Jun 2025 00:00:47 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: VOyG1Uj23LRSjX/9eYl7nkz6cCDrDTGPqL3mSDs0kOw=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:25:8e:aa:4a:2a:9b:c1:d4:2e:a0:e1:06:bd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jun 14 00:00:47 2025 GMT
Not After : Jun 15 00:00:47 2025 GMT
Subject: CN=2c1ebd23c77e41c2d2e7ca6a7bae22aceae2460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:56:c4:fa:64:49:b2:65:b4:17:2c:2b:fd:
d5:67:c2:fa:10:b0:20:ec:82:33:be:58:6d:9a:2d:
2f:97:69:76:93:98:98:05:4c:8a:63:0a:3e:9d:3c:
63:1b:25:77:a2:8f:52:00:b3:3c:c9:0a:fb:61:6e:
77:ed:25:84:01:a6:26:d9:8a:d3:54:d2:00:d0:a9:
9f:68:21:66:04:57:61:e5:b6:84:54:45:34:78:2f:
d0:52:ab:e4:01:76:82:d8:52:7a:2d:b5:3d:12:5d:
0b:9f:50:c1:3c:d6:54:f8:c5:a4:39:30:99:0d:6f:
6f:88:e8:54:da:83:4c:c0:58:f6:5c:60:ab:ec:2f:
d7:10:49:65:dc:e3:87:a7:d4:ac:5d:f4:51:f5:b0:
ce:68:86:b8:56:2d:33:71:4a:46:72:9d:08:d1:6a:
2f:97:ed:e8:ab:32:3c:48:dc:72:cf:4f:55:57:2d:
15:68:d5:a3:a2:1b:2d:dc:a9:e4:7c:1b:72:8f:9d:
50:3b:63:ca:cb:eb:44:f9:e1:8d:37:f5:0c:2a:76:
52:a6:ec:5d:de:83:cd:22:1f:7b:94:33:b6:35:69:
19:93:b2:38:93:44:b1:c8:bf:88:7b:92:0c:c0:59:
3f:5a:46:de:30:ab:49:9b:c3:11:86:fc:48:4b:be:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:BD:23:C7:7E:41:C2:D2:E7:CA:6A:7B:AE:22:AC:EA:E2:46:0A
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:54:ca:e9:18:cf:30:d8:0f:4f:07:6a:1d:15:4e:54:d9:6c:
d0:2d:81:51:f0:0c:d2:0c:89:70:5d:db:7b:2b:1c:90:d8:7b:
71:9d:9c:11:b4:41:05:80:97:b5:c6:1c:5f:90:7d:30:b7:62:
f1:ec:97:da:6e:ef:60:89:98:4e:c9:21:39:82:30:44:90:51:
b2:bb:40:b0:2e:fa:ef:bc:cd:50:ed:ab:86:c9:33:2c:d7:81:
35:f4:36:b3:6c:0a:74:20:1d:a7:cb:ce:92:d7:cd:d2:58:24:
6e:6a:47:55:e0:8e:4f:66:aa:d9:23:e6:4a:40:20:f9:52:26:
7d:c0:89:36:16:e6:d2:7c:fe:1b:04:00:32:b0:01:41:4d:36:
76:c7:45:df:76:66:09:32:5b:ae:d0:6c:42:86:da:b6:44:a3:
f1:d6:0f:91:cb:14:b2:5e:2a:ff:52:f4:8d:93:b5:71:14:2c:
23:5a:7a:b8:4a:69:d6:a0:53:02:6f:5b:cf:69:2f:17:60:a8:
ac:db:6e:2c:fc:26:da:1f:f3:93:82:a7:27:a6:cc:fc:56:11:
10:46:37:80:01:c8:7a:af:99:aa:9b:85:76:e3:9a:45:ae:b7:
7b:0f:e4:4d:d7:23:83:95:12:1a:b0:9c:47:3e:1d:0d:5d:3b:
92:21:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:47 2025 by rpki-client