Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: MHwkSaUPJfqf6bDOwMqJvpmnOPScEjaxj6RwZo1ddtU=
Subject key identifier: B8:CE:F3:00:32:5A:63:D2:64:5E:95:41:61:E0:B9:8E:CE:8A:AE:80
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 01976CCF6A4C6B14D1850641A08EBE614B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0E2C
Signing time: Sat 14 Jun 2025 05:00:21 +0000
Manifest this update: Sat 14 Jun 2025 05:00:21 +0000
Manifest next update: Sun 15 Jun 2025 05:00:21 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: Ls/Sl5xvh77Ii674GDArYHwDLcZXJeoBCO08TiOJUPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6a:4c:6b:14:d1:85:06:41:a0:8e:be:61:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jun 14 05:00:21 2025 GMT
Not After : Jun 15 05:00:21 2025 GMT
Subject: CN=b8cef300325a63d2645e954161e0b98ece8aae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:56:f8:8b:02:eb:34:c0:3d:72:3d:04:5d:
db:99:77:b5:8c:76:c5:4a:62:ca:cd:b0:a3:ae:0b:
9b:e0:98:99:bc:06:82:bb:7a:d5:89:01:b4:29:f6:
7a:a7:aa:68:da:39:6c:a6:f2:a8:42:02:90:d8:a6:
18:a7:28:1d:65:56:3f:c3:88:0a:2e:78:2c:20:9e:
41:4d:5a:b5:cd:01:98:94:e3:b5:89:97:cb:b6:1e:
68:79:4b:4a:c0:24:1c:85:2d:53:47:dd:85:d1:fb:
1b:c2:29:fe:3a:bb:a3:ae:23:67:6f:55:a9:0b:8d:
a9:22:1f:53:c9:54:ca:b3:a0:4d:fb:93:61:8f:0d:
90:d3:13:d6:1d:fa:82:49:2c:34:54:b6:5f:83:78:
26:89:10:6f:ca:c6:75:5d:e4:56:d1:2b:31:b6:9e:
44:85:61:06:97:8d:b3:5a:ff:db:7d:82:f9:ba:78:
ba:0d:52:d8:00:17:0a:e1:1f:d0:28:fc:56:34:68:
66:95:51:ce:cc:6b:cd:d2:77:78:a9:ee:54:bd:61:
d4:6f:51:a9:6d:8d:54:83:de:48:d0:ed:b9:96:09:
f5:72:19:8f:80:77:19:68:5c:f6:aa:6b:19:9c:00:
00:bd:ff:45:b2:15:c4:71:8a:57:28:da:28:10:d5:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CE:F3:00:32:5A:63:D2:64:5E:95:41:61:E0:B9:8E:CE:8A:AE:80
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:1c:52:5b:9d:a4:29:9a:1b:2a:61:52:37:87:3b:1a:15:
9f:3a:0e:8e:92:c2:d9:b2:6e:86:dc:ae:5c:a4:5e:4f:c0:d6:
13:3e:ff:86:53:ff:ae:68:c7:bc:86:45:18:d0:6c:60:40:e0:
19:16:a3:b9:3f:23:cc:cd:3d:70:2f:f6:d0:32:ec:15:a6:ae:
c7:60:a4:12:e6:53:0e:b9:5f:ed:ec:46:b7:50:9b:60:fb:ad:
a0:92:bf:a5:21:c4:4a:6a:8a:d0:bc:c4:93:84:47:c3:91:65:
e3:62:75:da:d3:38:d5:95:e3:63:1d:6f:51:a1:dd:bf:02:01:
97:07:65:91:3c:d2:ff:57:54:bf:ee:f3:8e:fe:d9:ae:68:7b:
4f:e9:e2:07:7a:8c:ca:f4:cd:c8:f8:af:20:42:7e:a7:d4:48:
0f:cf:c8:b9:8a:50:5f:28:a5:41:5c:70:d6:7d:8a:4e:79:5f:
7f:e8:28:ff:1d:01:73:8f:a2:e6:e4:75:76:fb:11:e1:72:05:
65:7c:b7:fd:94:38:54:1b:dc:9f:ae:a1:ea:72:29:eb:86:90:
9b:8d:24:f9:1d:0f:2d:5f:b6:52:ce:a9:f1:f2:d2:8b:04:8f:
73:43:50:71:a2:f1:41:70:05:5d:6f:d8:b6:1a:fc:c8:3e:62:
79:a0:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:31 2025 by rpki-client