Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: yC3rZinr3g4Cv/BRtF9MMvHxyoEyoYMeNrHKGwFVqRY=
Subject key identifier: 47:AF:C8:39:61:AF:52:B0:A8:56:7E:E1:7A:62:1A:1C:55:E1:CF:FB
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 01976D74BC6C25666C759E72932D8070E68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 08:00:56 +0000
Manifest this update: Sat 14 Jun 2025 08:00:56 +0000
Manifest next update: Sun 15 Jun 2025 08:00:56 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: J9wCbCwr1EiHDJWcu+6XUkh2aVn+sgncWXU9w1PwvI4=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:bc:6c:25:66:6c:75:9e:72:93:2d:80:70:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jun 14 08:00:56 2025 GMT
Not After : Jun 15 08:00:56 2025 GMT
Subject: CN=47afc83961af52b0a8567ee17a621a1c55e1cffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:4e:67:32:4f:6b:22:09:3d:0e:52:4c:e7:
28:6f:ec:88:a8:c2:d2:28:98:a1:de:ef:69:3c:cb:
82:62:56:dc:18:5b:97:c1:77:ec:44:1a:2b:e7:dd:
46:a4:33:60:1c:20:b4:8c:3d:a8:4b:a1:ce:87:3f:
5e:db:dd:db:98:82:8a:d7:b4:ed:e2:f5:cd:37:9b:
6e:c7:54:36:5f:56:c7:68:13:a2:92:15:d8:26:71:
9a:9d:bd:f1:30:9b:14:01:76:ac:51:bc:78:68:27:
4b:ac:f7:f7:1c:b0:26:53:e1:70:b8:cb:13:1f:bb:
10:54:98:4f:a2:39:ef:60:86:d1:07:b0:37:66:6d:
9d:7e:e9:51:0c:4e:0c:82:20:8c:44:82:d2:bb:87:
c7:47:7e:16:c6:c0:74:3d:39:81:44:c6:d4:75:66:
81:3e:46:fa:02:d6:17:46:2e:65:2e:b6:05:1d:7b:
e0:4d:a3:75:09:a3:56:51:09:c5:f6:95:ff:94:ec:
08:4e:b0:41:4e:3d:36:3c:0f:28:3b:18:7a:4c:cc:
ef:2f:fb:6d:27:c6:bd:e8:4e:dc:eb:3a:ff:1e:5b:
0c:10:fc:54:8c:6c:0a:ec:24:12:37:35:a0:d4:49:
40:ac:98:9f:5b:6e:6b:ee:a2:40:c5:35:db:61:6d:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:C8:39:61:AF:52:B0:A8:56:7E:E1:7A:62:1A:1C:55:E1:CF:FB
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:e9:9e:24:ed:14:86:0e:ff:8c:4b:4b:bc:77:8e:0b:5f:
4f:2e:8b:45:87:71:07:e3:3e:aa:70:c0:f7:f9:aa:3d:f5:c6:
d0:ae:a9:f4:c8:1e:1e:25:dd:fd:3b:52:93:4e:a7:a4:55:0b:
d0:4d:4c:d5:e3:81:73:75:a8:cc:8a:fa:12:c1:d7:dd:35:25:
f3:9d:d3:b4:22:c6:90:7b:a8:7a:af:6c:a0:c3:e5:af:8e:f2:
29:57:e1:26:19:1f:c1:49:f1:11:66:d3:fc:79:95:4c:05:84:
f8:bb:ee:6d:d3:12:db:9b:21:f7:42:b1:83:8a:4f:f6:c1:9e:
dc:45:88:15:72:3f:a7:98:9a:35:3d:ee:b1:07:ae:18:cc:42:
fb:5c:3d:18:9d:81:a5:10:c5:60:36:93:ea:23:f5:b4:ae:df:
49:6f:8e:2d:a7:ba:6a:4f:06:c8:cd:8a:44:9a:38:60:7f:7a:
eb:41:a6:72:ea:81:d4:f1:e5:13:e6:ba:bd:c5:93:05:22:fb:
e1:ad:fd:e4:c1:b4:45:5b:df:7f:be:d7:ab:5d:f0:46:97:0f:
d3:5f:49:a8:ca:64:e7:9b:09:03:11:8c:54:ba:fb:09:b9:1a:
84:31:9d:4b:84:d0:34:e1:6e:44:01:05:3f:8b:53:40:e3:0b:
68:96:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:40 2025 by rpki-client