Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: JCRjbpkbN4ESVu9tKI1cTdR45vubmZ/+Tu9ql9prXcA=
Subject key identifier: 12:05:7F:31:D7:21:84:0B:50:1B:56:3F:87:40:03:C2:CB:A7:AD:E4
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 01976BBCC6ADA4E2E358D1247015D59BE263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 00:00:23 +0000
Manifest this update: Sat 14 Jun 2025 00:00:23 +0000
Manifest next update: Sun 15 Jun 2025 00:00:23 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: u90vW81APk7/aBiMcTljyVL11dv8lfv9wtCyWTAIbl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:c6:ad:a4:e2:e3:58:d1:24:70:15:d5:9b:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jun 14 00:00:23 2025 GMT
Not After : Jun 15 00:00:23 2025 GMT
Subject: CN=12057f31d721840b501b563f874003c2cba7ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:8f:3b:3b:53:12:88:ef:83:e2:9e:56:5d:
3e:d6:d5:cc:0a:c7:ee:02:64:3d:ed:48:6d:73:6e:
db:df:48:19:44:cd:76:f4:3d:ec:26:be:45:c8:2b:
87:24:7f:1d:ff:f1:ec:9b:15:f5:84:07:e1:30:d3:
27:6d:38:f8:ce:9e:e7:13:69:50:aa:1f:22:b6:b0:
d6:cd:b8:17:87:ea:30:48:20:30:2f:4c:2d:49:51:
c9:3c:16:8d:28:cb:47:70:2e:ee:b3:20:3a:0a:d3:
05:51:d6:bf:ab:f2:c0:36:4f:47:a7:21:b6:ee:5d:
42:4d:9a:1b:02:94:13:f3:96:49:ea:ba:24:79:62:
8a:1b:85:48:ff:4f:a4:ec:03:73:d0:1b:0c:7f:c2:
c1:d7:34:f2:f9:c2:57:89:52:5d:96:23:b1:8e:c2:
78:d0:03:21:0f:09:76:df:59:a3:98:70:c4:a8:0e:
8b:33:b0:be:26:39:4f:9d:d3:22:d4:43:11:46:ae:
ef:d5:b4:0d:39:a4:03:7b:69:99:af:13:09:27:ce:
c4:72:33:7d:28:d9:29:c9:31:72:b9:64:53:75:6a:
69:63:c5:39:8b:44:70:2d:82:d1:31:e0:0a:01:47:
03:bc:74:39:97:5d:ad:fb:f0:89:d9:11:7d:a8:7b:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:7F:31:D7:21:84:0B:50:1B:56:3F:87:40:03:C2:CB:A7:AD:E4
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:21:4d:ac:85:30:02:b2:35:69:5f:23:ac:b4:6a:e5:42:
70:f3:01:24:18:3b:85:b0:fd:63:8c:a9:bc:a3:43:53:07:16:
8d:50:9e:44:e5:60:63:2a:5d:8a:19:39:65:b1:24:0f:87:dc:
bb:22:b2:15:3d:c9:e1:2a:ae:a3:eb:f9:81:9a:f7:19:6a:37:
25:05:2c:bf:08:d3:22:06:cd:de:04:91:43:78:08:34:35:8d:
70:bd:7c:44:1a:40:f6:aa:25:4c:a3:c6:e2:ab:19:cc:69:cd:
ad:37:37:66:25:00:bf:cf:43:d2:b4:e7:1e:3c:77:f6:e4:11:
c3:28:c1:e3:7b:1d:fa:03:58:73:69:df:2a:bf:02:d2:c6:1d:
d5:03:07:30:b3:b9:67:86:4e:60:59:50:b9:77:04:9d:cb:95:
50:0a:53:ad:20:8c:fd:c3:6d:f1:bb:0a:d6:d0:f1:22:3a:8d:
fb:aa:28:aa:55:02:53:99:e6:b7:ff:14:22:a2:88:7a:ef:cb:
2c:41:3b:a1:b2:9e:19:ad:ef:8d:ea:cf:4e:93:12:ff:cb:f1:
da:91:77:c7:aa:e3:1b:31:4b:7a:2c:a8:4a:2c:bf:be:85:37:
e3:4d:64:a9:27:fb:3f:ec:68:c1:a4:1c:0a:ad:95:25:bc:72:
f6:fb:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:48 2025 by rpki-client