Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: lRleW8pxlqR4iijmtl5OvgSoSnSgiWak7cHCBHKn9LY=
Subject key identifier: 22:6D:C0:80:54:CF:00:96:FB:69:7C:C8:3D:AC:C8:49:64:3A:19:9D
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01977308F31F2BB3B8111AD34A4ABE5EE727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 10:00:55 +0000
Manifest this update: Sun 15 Jun 2025 10:00:55 +0000
Manifest next update: Mon 16 Jun 2025 10:00:55 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: fjUjsDV+P3VQTPVXwYVxoBmWKpIB8ayTq2hbnGYYCZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:f3:1f:2b:b3:b8:11:1a:d3:4a:4a:be:5e:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Jun 15 10:00:55 2025 GMT
Not After : Jun 16 10:00:55 2025 GMT
Subject: CN=226dc08054cf0096fb697cc83dacc849643a199d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:3d:a0:78:93:8f:cd:ff:79:16:21:af:8e:
43:32:b1:6d:d7:2e:35:3a:ac:79:ea:78:be:5f:81:
ce:b5:9e:6c:e8:31:d2:08:c2:3e:dc:66:2c:70:71:
2e:bc:3e:ce:e7:72:db:6c:22:22:fa:98:ea:b3:48:
0e:86:0c:63:b5:df:b6:37:31:bc:8d:50:e4:ac:c0:
20:a4:b8:76:c7:89:2e:b8:9a:b0:53:f9:2d:1e:0d:
38:f3:b1:7d:27:53:c6:72:c3:3f:06:9b:e4:e7:ee:
8f:99:2d:c5:f2:62:01:b6:25:41:66:b6:3a:ca:ad:
e9:2b:a2:e5:93:d6:8c:24:1b:04:e0:e9:61:b0:74:
27:7e:64:da:fb:66:ab:a8:71:c9:7f:73:8a:c8:d2:
59:a7:db:7e:19:89:25:11:1f:5a:c5:f0:0a:7a:f6:
9e:7d:aa:a1:e4:1c:f9:ff:ce:25:8d:6e:78:e9:5d:
59:17:a9:60:6e:8d:81:6c:75:ad:ec:c0:75:3a:b0:
fb:dd:08:98:b0:07:4d:bf:b1:a4:1e:19:dd:96:a4:
ef:cb:10:52:55:27:d5:f1:ca:a1:bc:f8:b8:3b:31:
15:c7:e0:d6:a4:63:f9:4f:7c:01:7e:31:5c:09:d7:
f8:6b:7d:fc:c0:97:f0:b6:b2:35:8c:6e:46:74:3e:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:C0:80:54:CF:00:96:FB:69:7C:C8:3D:AC:C8:49:64:3A:19:9D
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c6:55:ed:f3:52:bb:4a:02:b8:d6:a7:00:8a:2e:91:5b:66:
3d:15:9c:ad:f0:8d:b5:4d:bb:b5:c0:25:45:75:35:0b:f1:1b:
d9:fb:5d:b1:b5:2c:12:5f:6c:f1:3b:3f:9f:4c:d0:43:1d:10:
91:c6:45:8f:66:ee:13:6a:64:77:19:6e:07:f7:6c:87:0f:5c:
de:c4:a2:bb:08:9c:12:c4:79:8f:94:32:22:bc:6a:cd:66:2b:
1b:da:18:ed:9f:90:6e:7b:b5:d4:8b:fb:02:b9:0e:ad:8e:26:
d5:8a:32:50:3a:25:25:73:67:70:64:4a:13:ef:ed:31:25:20:
b5:04:15:4c:80:08:75:8b:5b:d6:30:67:54:f8:a1:d4:4a:d9:
33:50:21:d6:9e:b7:a3:c0:71:4d:bc:d7:95:b2:8d:aa:1e:7e:
cc:bb:4b:1b:fe:1e:e9:6a:50:9a:0f:d5:dd:a6:13:1b:e3:ec:
d2:40:9f:73:24:7c:65:33:3c:6d:df:e7:e7:24:10:a4:2b:dc:
ba:d6:94:ac:73:eb:79:75:85:ac:1d:f5:00:2d:f2:79:d7:ea:
f4:94:c0:0c:a6:96:ef:aa:b0:55:d7:a8:72:a2:b1:eb:c7:1a:
0f:0c:e2:a4:ee:57:96:95:e5:ed:9f:a5:81:dd:6e:3e:ea:8c:
09:e2:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:21 2025 by rpki-client