
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: dCOVxFuQSVryONEp7U9c5SEWUcUGL52IpDqNpga0+8o=
Subject key identifier: DE:BF:3E:4A:E5:92:0B:E7:26:FE:41:E1:F3:8B:FA:4A:F9:89:4E:86
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 01976D3E156C9EB2230BE008771FDDC90973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 0FF1
Signing time: Sat 14 Jun 2025 07:01:14 +0000
Manifest this update: Sat 14 Jun 2025 07:01:14 +0000
Manifest next update: Sun 15 Jun 2025 07:01:14 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: gXnPiT6GwGLfn0lD048L3LJ+Lp9na7bpAxW7xzKQJ/8=)
2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:15:6c:9e:b2:23:0b:e0:08:77:1f:dd:c9:09:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Jun 14 07:01:14 2025 GMT
Not After : Jun 15 07:01:14 2025 GMT
Subject: CN=debf3e4ae5920be726fe41e1f38bfa4af9894e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:8d:21:7e:c7:01:a8:62:65:9c:9c:56:b7:
a7:59:20:17:e5:d4:35:4e:01:50:f8:05:f3:8e:18:
a8:e8:1d:2f:d8:b9:f7:1a:bd:73:2f:54:9d:24:12:
1c:e7:1c:b7:0e:87:44:57:f5:54:e3:59:b4:55:b5:
88:e4:e1:8f:06:40:63:89:92:16:97:c5:d8:d4:89:
e2:92:d0:bb:ce:fd:4d:a7:c2:95:09:79:76:9a:7a:
38:ef:ce:cf:76:79:0b:0a:d1:a8:31:cd:ae:c6:da:
ab:aa:74:53:66:91:fb:1a:56:28:be:59:58:91:f2:
ce:01:bf:5d:98:21:26:29:02:f7:b6:c6:d8:65:76:
a4:82:9d:68:9e:3d:98:51:be:ba:de:b1:26:a0:e7:
af:c5:e9:6a:7b:52:f5:a8:aa:73:72:2e:35:18:4b:
17:d2:17:03:37:ad:1a:fc:64:df:df:5d:1c:73:45:
b3:2c:51:d4:29:44:db:cd:78:76:05:88:c1:11:02:
af:da:80:34:80:bd:b9:7a:29:d5:c5:37:af:59:d5:
e2:27:ba:c0:e8:14:04:5a:64:dd:d3:a5:9f:45:27:
0e:1f:82:00:c5:1c:32:75:34:22:7f:d2:db:db:1f:
6e:0c:66:96:2a:d5:e7:cb:cf:4a:10:54:bd:12:8d:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BF:3E:4A:E5:92:0B:E7:26:FE:41:E1:F3:8B:FA:4A:F9:89:4E:86
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:ad:34:a0:20:bb:f9:e3:b0:63:a6:5d:22:66:47:b1:b8:
6a:69:e5:dc:10:ac:b5:b7:9c:22:7e:01:f0:73:06:a0:a3:e4:
95:1c:87:97:af:09:f9:52:0e:1d:af:86:0f:a9:b1:24:bf:6e:
26:8b:f6:6d:e0:b4:7b:34:4d:62:35:b9:fa:d4:8e:39:9c:32:
d4:eb:3f:43:64:a7:7e:c2:34:a6:37:bc:5a:56:f9:cd:b7:b6:
22:0a:80:c5:e3:4a:87:07:82:14:fa:ae:e2:52:d6:b4:d7:a7:
53:c0:7d:f6:22:28:51:37:b9:f0:20:1b:04:7d:5e:a8:bb:09:
50:14:52:52:44:02:d8:57:7c:24:2d:3d:cb:53:19:80:c7:e9:
7f:ca:91:ec:62:4a:74:dc:74:a6:e9:b7:cd:0e:0a:81:ee:da:
54:7a:95:cf:42:1a:d2:b0:ef:2a:b9:d0:e8:0b:04:96:13:43:
c3:8e:fe:e9:5b:62:f4:4e:5c:9b:8c:13:2b:f4:63:15:57:52:
77:3b:d8:72:23:a0:44:eb:1a:08:6f:79:76:84:9a:9c:18:4a:
bc:5a:d5:85:4c:c9:20:ef:f8:7b:92:6b:46:5c:4d:c1:4f:9b:
16:e4:f7:40:91:7e:46:c0:a3:3c:73:42:18:b3:54:f0:26:47:
2e:e9:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:59 2025 by rpki-client