Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 8Iiv1UNBChInlcMg4C1lRXjmzsgYd0gm2MS13olqS0Y=
Subject key identifier: AB:BA:50:26:F0:5B:02:55:DF:28:61:D2:0A:F6:B3:AC:CD:BD:35:45
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01976A05B6521E6D53FE98FA60EC64C33245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 094F
Signing time: Fri 13 Jun 2025 16:00:48 +0000
Manifest this update: Fri 13 Jun 2025 16:00:48 +0000
Manifest next update: Sat 14 Jun 2025 16:00:48 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: nWBOLCna4CdHH2txLDagVuEZYYtRzrK8g1BCrh1rToI=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b6:52:1e:6d:53:fe:98:fa:60:ec:64:c3:32:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jun 13 16:00:48 2025 GMT
Not After : Jun 14 16:00:48 2025 GMT
Subject: CN=abba5026f05b0255df2861d20af6b3accdbd3545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:b0:04:ae:e0:47:a8:6a:dc:1b:3d:ab:e1:
13:0b:c5:8e:ae:5e:c5:41:c6:42:5c:55:4b:80:c1:
8e:5c:0d:da:25:e9:05:b8:c2:4c:c1:01:36:d6:73:
2f:aa:92:56:06:21:db:71:48:50:88:9f:2b:8a:7e:
b7:6b:1d:18:d5:94:5b:d2:a8:f9:21:d2:27:fc:db:
20:8a:8b:ca:34:b6:38:45:de:2b:ea:9e:e7:28:84:
82:8d:7e:c9:78:d5:2e:fc:59:8b:5c:13:f9:ec:d4:
d6:07:41:bb:16:df:0f:2a:42:9e:3c:69:4e:ae:6f:
9b:2f:b9:ac:78:95:7e:2a:60:63:f4:76:d7:6d:9c:
68:0a:15:56:b2:45:98:25:05:54:e4:1d:8c:46:70:
55:24:59:ff:c5:af:35:10:f8:88:fd:92:3d:5d:f9:
4b:29:61:20:64:8e:3e:5f:4b:b0:7f:79:ed:85:41:
d1:03:48:97:1b:1c:f5:4c:08:7a:72:02:36:1a:6c:
7a:54:62:54:71:ed:e8:85:16:69:2c:1a:1b:42:ee:
31:ad:1d:40:3e:8d:2e:35:80:d5:45:c1:34:a8:ca:
b2:97:97:a8:0a:e1:23:04:40:a4:de:af:8f:6a:90:
40:40:92:3a:f5:2b:7c:8f:9e:4d:71:f9:cc:bf:6c:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:50:26:F0:5B:02:55:DF:28:61:D2:0A:F6:B3:AC:CD:BD:35:45
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f0:f1:c2:a3:57:40:bb:13:74:50:94:eb:7a:50:44:12:9b:
81:7d:05:eb:3a:7d:0d:c3:c9:a0:f3:60:71:4f:de:06:b8:04:
a7:51:89:90:ac:57:71:7e:f6:aa:4b:b2:9f:fc:d6:c0:f4:b9:
94:54:ad:32:a1:bf:da:a7:28:36:8b:48:95:e8:56:ec:9d:29:
5a:ad:0c:94:07:96:8d:07:30:ca:35:e3:15:5c:89:96:c5:94:
d7:40:74:a1:da:06:cb:68:91:8d:26:4b:9e:9f:20:64:4b:0f:
d4:b0:71:56:d2:50:59:0b:39:2b:ab:84:f3:c8:7b:ea:0c:d2:
ce:9e:af:01:cc:c3:31:a4:0c:d9:0d:66:0b:99:42:11:85:a2:
c7:9a:86:23:28:ec:54:93:6a:a6:24:43:a6:50:e7:21:9d:df:
88:c0:fc:b9:e5:d6:26:41:bc:64:c9:93:cc:a9:39:8a:4d:db:
8c:86:5e:7e:20:35:fc:78:30:95:c1:1b:8e:65:c9:5a:5d:8a:
6c:a1:c5:d6:a4:5b:3e:c5:16:16:97:c4:1e:f7:11:05:f1:67:
07:fc:80:bc:a3:7e:89:a2:65:d0:79:95:b4:7f:47:d4:3f:91:
40:f7:b8:0c:1a:f4:6e:0c:3b:67:ca:eb:d5:d5:cf:3e:c0:46:
36:83:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:09 2025 by rpki-client