Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: E4BSV9R2kigNeIfVN75D8AbI/+eUzUrF5Lf0G7hWhCg=
Subject key identifier: B6:E2:E6:76:7D:58:63:05:24:98:C9:C0:AC:04:A0:C1:8B:05:D6:13
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 01976C622A4025EAA72B8DBAA4BB029F4B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 0EB6
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: tJK6j1V2qe0CEjSb9oiDNV3m9ceLKhVDeBIz/OVGwOY=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2a:40:25:ea:a7:2b:8d:ba:a4:bb:02:9f:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=b6e2e6767d5863052498c9c0ac04a0c18b05d613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:42:20:6f:cf:8e:cb:20:52:20:a1:a8:80:
79:72:90:d1:fa:e6:63:94:7c:9d:9c:9c:fe:72:10:
ba:1b:50:29:5a:a6:27:e7:70:5f:25:04:53:0c:d5:
ec:79:7b:5b:5d:90:6a:a8:6e:fb:d0:19:64:bc:7e:
15:ea:51:44:5c:2b:9b:88:d3:25:6c:13:aa:2e:80:
90:85:a0:89:61:80:05:c1:57:b7:1e:ce:47:cf:38:
36:22:15:a7:8b:0c:ff:6b:64:0f:ff:7f:36:32:e8:
af:a4:07:8e:32:f6:2e:3d:e9:fe:db:59:8a:7a:53:
fc:eb:08:71:a8:8c:c3:d5:6c:d8:0b:4f:0a:83:8f:
e1:72:7e:9b:89:dc:72:1e:a9:d1:f9:df:fb:bb:75:
9e:39:4a:73:9e:73:27:78:12:14:f6:73:59:95:4a:
3b:7a:a5:b2:97:6d:9c:24:57:9f:af:07:b1:f9:36:
fe:ac:b6:e6:46:2a:6f:39:6c:50:d1:38:46:dd:35:
59:fb:1c:a1:27:17:4c:06:5a:d4:b5:d4:81:a6:fb:
74:dc:5d:de:bc:22:ce:27:44:cd:c0:4d:fd:0d:52:
52:f7:28:21:11:ab:08:b2:66:21:d9:f6:37:17:23:
f9:01:f0:4d:57:d0:a3:1f:7d:7e:80:c5:97:df:10:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:E6:76:7D:58:63:05:24:98:C9:C0:AC:04:A0:C1:8B:05:D6:13
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:02:15:31:ee:d5:ab:fe:2d:89:49:e7:bd:1d:cb:2e:02:2f:
55:49:77:f0:9b:4a:28:c4:5c:bf:76:7f:0a:dd:a2:5c:c3:de:
f4:8e:78:a5:0c:ef:93:a7:b5:88:ef:a9:3a:45:93:a9:9d:8a:
5c:d4:aa:0b:48:ba:31:fa:a0:8a:55:89:10:e5:93:b5:a2:ef:
cb:9a:7e:f4:ec:8c:84:d3:44:24:6a:71:0d:83:10:8c:9d:b6:
96:2f:28:fa:48:d5:ce:52:0c:7d:0d:64:c4:17:b4:93:26:53:
2f:8b:78:c1:1c:58:fb:49:b1:8c:69:41:76:30:c0:c0:5e:16:
a4:85:9a:91:04:e5:45:2e:2f:1e:f9:18:ae:a4:d7:6b:0a:b4:
36:04:42:da:0c:9e:5d:fc:d0:1f:4c:17:34:21:9e:78:6e:3b:
a7:a4:cd:cd:be:e2:33:60:5b:b4:15:80:bb:41:9e:59:e8:7d:
5f:de:1e:95:99:17:70:ca:ad:31:f7:b4:6e:27:4b:a5:26:8b:
f4:3f:ee:0a:1a:53:47:e4:a3:5b:a2:d4:c0:24:11:37:b6:90:
8b:5f:8d:c2:1c:e4:d4:8b:de:ee:fc:44:d3:87:44:d9:cb:e8:
44:10:16:ef:6a:8b:c1:5b:1f:d4:b9:d4:49:ba:60:8e:c5:b8:
0b:8b:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:45:44 2025 by rpki-client