Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: aRPd3X+UCMuhLngBC5hbJ0FPRjjqN1weADIQTRDNtvM=
Subject key identifier: 2B:5D:B9:F0:AA:3D:23:C7:67:2A:BF:8D:CF:82:E1:97:C2:A0:96:29
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019776E5C917353F520B45FBBE435A353D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 04:00:59 +0000
Manifest this update: Mon 16 Jun 2025 04:00:59 +0000
Manifest next update: Tue 17 Jun 2025 04:00:59 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: 3xcraDF8ccujju2Xtn53VJ79pQVzyKSItiNjdH5+J1g=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:c9:17:35:3f:52:0b:45:fb:be:43:5a:35:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jun 16 04:00:59 2025 GMT
Not After : Jun 17 04:00:59 2025 GMT
Subject: CN=2b5db9f0aa3d23c7672abf8dcf82e197c2a09629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:db:6c:51:da:c2:a6:5d:9e:99:c0:ec:66:
b4:75:79:c5:b4:4e:69:56:3e:3e:75:1e:af:b5:0a:
f6:85:42:30:45:73:d3:bb:c4:5c:fb:c8:cb:c6:0f:
86:f1:c3:9a:d8:d9:2e:2b:79:95:ea:dd:dd:c1:ce:
16:a8:04:60:68:f9:f9:8e:5f:9b:ef:f0:f0:1e:93:
2f:1f:fa:23:c4:ba:90:48:41:97:a2:6e:4b:99:42:
4c:8a:52:c4:56:7f:9e:dc:d5:72:44:6f:f4:97:65:
ba:6e:6d:84:05:26:c7:50:4e:20:a5:9e:66:99:04:
03:c4:e8:d9:bf:4c:a5:02:56:4d:6b:b0:82:81:a3:
86:e1:6a:0f:b0:da:9a:1e:64:70:9f:c1:a0:e1:c2:
74:d6:ca:ee:27:c0:83:03:99:30:fa:d8:fa:3e:22:
c2:92:30:57:4a:5d:57:7c:27:79:0f:68:1d:ad:f5:
cd:55:6f:fe:e8:5e:77:26:ee:a1:96:f1:12:be:39:
67:46:4a:54:4d:f4:c9:c0:15:eb:6c:72:2d:87:ed:
0c:15:94:f5:d5:09:13:6f:86:c8:b1:d0:88:63:68:
f5:35:35:74:d4:ef:d1:e5:71:f5:37:df:49:ae:5f:
a4:63:a1:61:f3:c6:fe:0a:74:aa:82:e4:13:24:c2:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:B9:F0:AA:3D:23:C7:67:2A:BF:8D:CF:82:E1:97:C2:A0:96:29
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ab:78:bd:8f:e7:d9:a3:11:02:8e:f9:83:d4:ba:d9:2a:b0:
cf:50:f2:96:05:01:29:3b:85:bd:72:2c:bf:7b:30:1b:bc:9d:
57:8f:d5:7a:a8:d0:d4:9c:72:94:31:b1:6a:c2:a0:2b:da:3f:
73:7a:bd:0a:d7:f3:68:f0:cb:14:99:5b:3d:96:92:37:93:50:
80:90:c5:63:67:e1:7f:32:75:72:16:0e:41:0c:15:19:1b:39:
18:0d:1c:7b:5a:ab:65:79:5c:f6:c1:cc:64:5d:5f:c3:d1:0b:
63:58:46:35:d5:27:bf:7e:2e:3b:58:94:92:73:f2:a0:e0:71:
93:43:ca:b7:4e:2b:7c:c4:16:e7:4a:cc:e2:5a:5c:4d:1d:35:
1c:4e:ef:84:bf:f3:43:49:63:eb:8f:1b:cd:3f:54:8a:06:e8:
d6:74:08:98:0a:a1:82:aa:43:ab:52:90:81:37:ae:52:29:97:
33:ed:10:55:ff:eb:c4:1e:25:35:7e:67:f8:66:86:0f:19:aa:
65:00:25:52:6d:ab:0c:22:8a:11:7a:d9:ab:e0:3e:91:8a:ee:
25:2b:e3:9f:4a:30:e8:97:6e:5c:7e:30:3e:17:9e:c8:37:06:
99:13:49:05:02:77:39:ec:ca:8f:5b:e2:9f:18:43:95:41:a0:
96:ec:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:21 2025 by rpki-client