Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: oXgmT9cRYKoWPtUESbd6GQKuPs79ZxeQbVZhA5F81f8=
Subject key identifier: 71:E2:D1:97:26:41:64:34:07:AC:46:41:EC:CE:BC:B3:CA:7B:0D:6E
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 019769613C882B2A7FD54CD5808B23C67D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 1241
Signing time: Fri 13 Jun 2025 13:01:09 +0000
Manifest this update: Fri 13 Jun 2025 13:01:09 +0000
Manifest next update: Sat 14 Jun 2025 13:01:09 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: SCS4X1s/ZA0QMf2ZrckYi/y4SJo78YWINqj2IjnXVCc=)
2: Yc_s1uEQU3LAE6G4fkBk8Gok6CI.roa (hash: fdoGqzcyq0doKgpvX55kY45aKOwDTDyxb1UE8P+KUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3c:88:2b:2a:7f:d5:4c:d5:80:8b:23:c6:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jun 13 13:01:09 2025 GMT
Not After : Jun 14 13:01:09 2025 GMT
Subject: CN=71e2d1972641643407ac4641eccebcb3ca7b0d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:20:7f:d8:84:83:3f:c2:42:49:03:0b:c1:
e4:20:ff:e3:56:10:ec:fe:08:78:fd:4a:90:f8:dd:
d6:52:c5:5b:fa:4b:6d:b3:d3:11:07:df:0d:df:12:
4b:32:c2:d4:b1:d9:63:e0:3e:5d:53:dd:42:91:3f:
97:40:37:90:64:fa:fc:b0:e9:bb:72:6b:8a:53:e3:
63:76:27:63:d3:da:50:49:b9:99:d3:d5:8d:1b:7c:
46:9d:c4:60:52:6a:07:ab:39:fb:7d:ec:1e:e6:7f:
c3:bd:fe:6f:02:7f:38:f9:89:95:f0:c4:93:4d:a1:
d8:bc:ab:9e:1d:ec:96:c9:5c:df:ed:f7:1e:d2:b3:
db:af:55:77:4b:82:11:6e:61:73:e8:54:44:63:47:
7d:73:ce:c3:09:44:fa:c6:cf:c0:66:f5:a9:0e:e0:
92:7d:7c:8e:0c:55:70:eb:98:c5:f1:73:94:31:41:
e5:22:89:0e:87:7e:73:fe:c5:66:78:70:c3:71:0f:
7b:84:9a:4a:5b:ad:f2:d5:aa:f1:94:53:61:59:57:
02:10:77:50:94:de:3f:b5:f6:d3:6a:62:f6:da:93:
7c:de:88:7b:93:12:a8:60:45:8f:11:d2:9c:ac:79:
73:91:e1:29:8c:7c:43:80:94:49:9d:9b:83:1f:6f:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:D1:97:26:41:64:34:07:AC:46:41:EC:CE:BC:B3:CA:7B:0D:6E
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:9c:23:e9:81:e1:21:f0:8a:26:a5:6b:10:03:7b:b0:78:
d7:89:eb:5c:af:50:c1:eb:14:d0:fe:09:27:f2:0d:61:12:69:
3b:b6:07:95:08:85:4b:14:d1:3c:a5:52:51:11:02:72:94:40:
d4:28:5d:a2:d2:21:2f:fc:60:fe:b8:30:db:20:ab:4f:f3:ee:
64:bb:15:a4:1f:46:48:0a:ae:b9:2b:e8:c5:5f:2b:b2:6b:5b:
ea:b8:a7:d1:a8:f4:a1:6d:59:b6:53:c5:46:6a:2d:fa:cd:07:
95:6f:55:cd:07:b6:e4:7e:23:6f:03:76:d9:e3:e8:42:bd:ef:
29:91:7c:f5:df:82:aa:99:ba:8a:a6:3f:57:ca:f9:1d:e3:39:
7f:77:e8:20:03:d8:5c:4b:e7:d4:26:5b:f8:1a:f2:09:27:3f:
30:10:da:57:b6:6d:05:d9:f4:94:7f:b4:42:78:83:04:15:9f:
b7:f4:41:d6:ab:ea:96:aa:c7:5a:ef:03:c9:d2:e6:76:c2:35:
55:3a:e9:e0:92:0a:a2:c7:4d:83:cb:dc:71:43:55:1d:59:5b:
47:03:09:2f:73:e7:28:31:61:b7:01:b6:df:df:6f:15:37:77:
55:cf:98:93:85:3a:75:e8:19:73:04:5a:8b:0b:f3:c9:0a:f7:
cc:3e:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:25 2025 by rpki-client