Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: 2F5pCCG/QvS6HvBHNCOJcpYtfgUG276DMgrgpGHoIt4=
Subject key identifier: 90:56:9B:06:44:C1:3B:75:BF:D4:DD:D3:71:A1:D2:C8:8C:B9:46:A8
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 01976DE2E3AC535B3A72E44AFAE564BE3C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 12E6
Signing time: Sat 14 Jun 2025 10:01:15 +0000
Manifest this update: Sat 14 Jun 2025 10:01:15 +0000
Manifest next update: Sun 15 Jun 2025 10:01:15 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: LJaSMSbzwV6ldE32jzrKUwG1jzpkrE9hbX6IRG1zR8c=)
2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:e3:ac:53:5b:3a:72:e4:4a:fa:e5:64:be:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jun 14 10:01:15 2025 GMT
Not After : Jun 15 10:01:15 2025 GMT
Subject: CN=90569b0644c13b75bfd4ddd371a1d2c88cb946a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:2e:89:68:c6:88:88:86:b8:d0:7d:ad:3d:
6c:17:db:12:c3:b9:69:c5:df:c5:0d:8c:4e:af:a3:
97:9b:b9:06:ce:6a:9e:26:aa:06:d9:8e:b5:fb:86:
81:14:1b:61:d5:3b:c4:ca:e6:f5:38:2d:6c:65:57:
db:79:d2:76:21:18:dc:fa:59:2f:26:7d:5c:32:b2:
46:b5:31:7e:f1:1c:fa:72:44:9d:33:2e:b0:4f:5c:
a4:b1:f3:22:96:18:04:ba:a8:32:d8:c1:4d:c5:23:
72:a3:ae:ec:83:fe:3e:b3:cf:b9:ee:63:7c:78:2e:
bf:d2:10:48:ff:22:bf:ae:55:50:ca:73:24:91:80:
d0:cb:c5:8c:79:b1:cb:af:aa:07:de:b1:ad:f3:b5:
7c:8e:67:39:df:64:af:a9:6b:82:7f:0c:1e:c7:43:
74:d8:04:f0:6d:e7:44:ab:5a:0f:a7:65:13:34:a9:
d4:67:1a:bc:37:fb:f9:f6:7b:23:c6:a4:93:08:ee:
e1:9b:51:02:17:ed:5a:74:a0:ba:3d:6b:cb:8f:fd:
bf:60:c3:2b:9d:d0:ed:7a:0e:f9:c4:e7:59:5b:c1:
56:3b:ea:e8:90:51:db:b0:75:a9:8b:82:ce:93:67:
3b:4e:6f:84:ff:f1:23:f5:fb:58:b8:d8:16:a6:bb:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:9B:06:44:C1:3B:75:BF:D4:DD:D3:71:A1:D2:C8:8C:B9:46:A8
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:68:ec:35:3f:4a:32:01:14:cc:3e:86:fe:4f:16:f1:8a:4f:
64:9c:58:85:9e:ad:14:8d:0b:c2:3f:e3:4e:f5:0c:a4:f3:11:
fc:85:59:f0:ae:7c:23:84:3b:f7:fd:e2:d5:b9:3d:84:20:49:
77:27:f9:72:35:f1:76:8c:1e:2f:4a:f7:3e:b2:66:0a:71:37:
68:64:4a:ef:a2:2f:cc:d2:34:ef:ff:82:19:75:e7:e1:b7:32:
d9:41:85:d0:20:cc:84:41:ec:6e:b8:19:82:03:e0:15:b6:7b:
01:81:09:9c:d5:34:04:16:a2:06:77:23:75:c7:a8:6e:02:e6:
8c:7c:c9:f6:11:7c:14:b7:1d:0c:1b:45:4b:49:bc:26:38:8c:
97:17:3b:38:15:c1:29:b1:72:d4:01:47:30:b0:8f:37:c3:39:
4f:01:f1:57:52:0b:e8:77:68:a5:50:5c:af:73:b2:72:be:b8:
27:4e:81:88:e4:00:5b:20:e2:b2:b7:10:ea:5f:6c:d1:59:6a:
d6:78:2e:a8:f8:c4:3b:74:56:bd:16:14:00:5a:c1:1b:a8:9c:
54:2a:e9:af:66:e8:27:45:83:41:42:d0:3a:33:16:2f:8a:b6:
4d:03:00:2e:07:65:c1:dd:4c:65:71:2a:a1:36:ce:b7:66:2a:
a7:80:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:29 2025 by rpki-client