Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: u1gllbk5flILmQsZXE9bRI6f01IapzBQySySfqX0m8w=
Subject key identifier: 7D:62:05:B2:02:50:FA:EB:79:74:A5:D2:8B:C9:23:5C:A6:AA:B9:26
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 01977E9EB4BBA5536C8F4DB246DEAEE4729D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0CAA
Signing time: Tue 17 Jun 2025 16:00:19 +0000
Manifest this update: Tue 17 Jun 2025 16:00:19 +0000
Manifest next update: Wed 18 Jun 2025 16:00:19 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: cuhkCIoB/nQ/bSVDMDpdkPgeQqKx0lg6e0aGr9mB8A4=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9e:b4:bb:a5:53:6c:8f:4d:b2:46:de:ae:e4:72:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Jun 17 16:00:19 2025 GMT
Not After : Jun 18 16:00:19 2025 GMT
Subject: CN=7d6205b20250faeb7974a5d28bc9235ca6aab926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:cc:4e:1f:66:ea:23:e1:9f:de:08:40:5b:
7b:9b:8d:42:d6:b2:38:c8:d4:43:8c:12:85:d6:67:
5a:68:38:89:1b:66:aa:e9:8f:c6:e5:3b:ce:df:76:
e6:bc:51:de:90:03:0f:27:b4:21:8e:71:87:c8:a0:
50:8f:cd:8b:21:61:d9:48:c6:b1:58:9c:ee:fc:93:
69:17:d6:78:de:3d:17:d1:61:55:d6:55:fc:c0:de:
23:c0:c3:e6:67:19:a2:cd:8b:48:17:5b:8a:2a:f5:
07:67:f3:88:15:b2:f4:1a:ed:25:53:9e:57:c9:0f:
60:28:26:2e:ca:aa:d5:3d:be:3c:09:76:4e:9f:e7:
33:2b:80:fd:4e:7c:9a:bf:7d:5c:55:a6:e8:1e:19:
5a:fc:2d:ed:da:b7:57:cf:d6:1f:00:b9:c0:41:4f:
46:79:9c:4a:20:8d:b4:c4:2d:ed:60:27:e3:a7:9d:
47:4c:19:97:d0:f7:6a:77:a3:be:e4:6b:f1:cb:07:
3b:54:34:d6:64:75:fe:07:83:ff:51:8e:e8:12:67:
0e:3c:3f:3f:fc:36:4e:54:b1:5b:fb:17:95:a6:2a:
06:e9:dc:f4:92:d4:93:34:49:e3:b2:65:01:4c:dd:
58:46:bb:64:36:ec:44:d8:29:fe:96:7a:c9:2b:0f:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:05:B2:02:50:FA:EB:79:74:A5:D2:8B:C9:23:5C:A6:AA:B9:26
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:66:ae:34:a6:2a:61:cf:de:84:52:cc:93:33:8c:2d:3c:
7d:17:54:09:21:34:f0:8d:71:f2:45:51:d5:58:08:43:3d:2a:
7d:77:43:44:a1:45:b9:ad:29:eb:a5:c3:8f:e2:6c:6b:b4:ee:
b9:29:6e:0e:0e:8d:82:3b:27:31:41:a4:1e:62:a6:49:4f:92:
de:93:bb:01:76:30:4e:e2:60:65:34:06:9e:d3:32:a6:d2:fc:
9b:57:67:ce:7a:cf:1c:0f:fb:76:c1:e6:0a:de:76:d4:36:dc:
2f:4b:e4:de:c9:50:d1:b9:ca:65:ca:b0:f8:23:40:40:c1:61:
21:6b:75:dc:c7:f8:81:9d:16:72:57:e4:20:d8:ea:16:60:73:
88:d1:f3:2a:ab:8e:be:1a:08:b4:98:3c:87:6c:9c:84:42:1c:
ea:b1:15:f1:8f:78:3d:19:f2:6d:1e:13:16:8e:0a:b3:13:1d:
d0:d8:7a:d1:b5:95:f0:a8:50:19:cb:7b:e5:58:57:5a:f9:af:
b2:e7:ab:8d:4f:20:72:db:b4:94:6a:80:8f:9f:23:8e:01:97:
ec:4d:3c:b5:71:31:0d:83:3c:90:5d:a9:1f:8d:e4:c2:2b:db:
29:95:e9:51:97:f0:16:ab:08:21:b8:9d:95:1f:e5:cd:1a:de:
d9:82:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:06:59 2025 by rpki-client