Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: pmnSnZBQR+ybP8rLPaTm21ZsdHshyXTbriEnMIRxJE4=
Subject key identifier: 11:A0:B8:09:CE:A5:79:E0:7B:37:FC:1D:DF:89:4D:80:E6:73:DA:AC
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 01976B85F8CF92CFC042E8A2035E6E1855DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0E0C
Signing time: Fri 13 Jun 2025 23:00:31 +0000
Manifest this update: Fri 13 Jun 2025 23:00:31 +0000
Manifest next update: Sat 14 Jun 2025 23:00:31 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: lDEgVcV2FEXbVhnzgz+l3tvnyZ8WAEJHse2V8Sbaq4I=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:f8:cf:92:cf:c0:42:e8:a2:03:5e:6e:18:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Jun 13 23:00:31 2025 GMT
Not After : Jun 14 23:00:31 2025 GMT
Subject: CN=11a0b809cea579e07b37fc1ddf894d80e673daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:71:a3:d9:97:33:24:5b:2d:03:bc:95:cb:
93:c2:ad:21:d1:c7:bb:64:b8:f5:2c:aa:e4:67:e1:
a3:07:9a:f9:18:8c:eb:59:83:16:ae:7f:07:a7:bc:
e0:83:fa:30:65:a5:53:39:c6:af:a2:b4:23:82:30:
6d:bb:fb:91:12:d5:aa:17:8b:d4:93:7c:8e:a3:4b:
20:c4:61:fe:0a:14:dc:f4:5a:1b:06:a7:bb:5f:a9:
fd:88:08:6f:27:00:65:5d:c3:5a:93:3f:dc:48:41:
bf:d8:75:d4:1c:29:b7:9b:a8:7e:34:ce:4a:65:76:
cd:ef:b8:fe:7a:f6:57:cd:10:59:b5:2f:25:27:03:
07:e4:07:aa:15:c8:33:3c:98:11:b6:ea:b8:8d:a7:
e8:b3:c9:8b:f1:1a:d1:9e:59:94:26:05:4b:f9:cb:
26:e8:c8:42:66:f9:77:4a:90:18:0e:b4:dd:d6:3f:
f4:fb:3e:87:ab:e0:b4:38:3c:82:a1:9b:a0:84:21:
e9:cd:fd:7e:34:a4:17:43:c4:94:17:b2:c1:d7:d6:
f0:ea:d3:d1:9d:ce:04:4e:6b:23:f6:32:eb:5b:7f:
2a:8b:04:7c:d6:b3:0d:7d:24:2c:6a:fe:fd:35:99:
1e:d7:f3:ef:d6:bb:42:99:93:0c:f1:09:3b:f0:e7:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A0:B8:09:CE:A5:79:E0:7B:37:FC:1D:DF:89:4D:80:E6:73:DA:AC
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:de:fb:1d:86:77:29:66:53:42:ce:62:dc:e3:f6:92:9b:83:
cd:92:a2:ab:25:eb:cc:3a:95:a1:4a:1c:ea:54:bf:e2:55:52:
56:40:9a:86:9a:eb:cd:80:3e:2e:b3:3f:1f:de:d2:73:b1:09:
6d:28:8d:d0:77:25:6f:68:27:32:9f:47:34:e7:20:72:f4:3c:
2b:58:db:f9:ef:fb:5b:3a:ab:79:92:cb:7d:cb:ca:d1:4e:7a:
05:a3:d5:a5:45:57:7e:05:72:1b:1e:13:fa:6f:db:4c:5b:ea:
55:b0:c5:f3:39:40:34:8a:98:8b:06:ba:ed:19:0d:11:4a:e5:
f7:a1:45:1f:70:5a:4a:27:ca:f8:b4:cf:47:04:7f:d1:b7:ac:
75:4b:50:4e:39:83:db:bb:6d:de:45:52:c6:e5:3e:13:c8:7a:
95:26:4c:ab:ad:eb:d0:2f:81:9d:84:0b:1b:a1:e2:0e:1f:58:
da:16:cf:50:a6:eb:83:ce:75:11:e7:72:28:4f:76:de:18:50:
29:c1:b9:c9:99:4a:e7:7d:94:79:c3:2f:90:45:f8:05:43:fd:
a8:54:84:b5:fd:0e:1d:4d:2a:c4:7e:ff:1c:68:22:7c:a8:e2:
9e:57:62:24:2a:00:c2:70:60:4e:1d:fc:d5:a6:7c:4a:e2:c6:
b3:4e:32:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:36 2025 by rpki-client