Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: VGO+cCKWwdEweK3BB023IHfJIU+RHehlwP5nOrRMy3w=
Subject key identifier: C9:1F:F9:12:C0:38:0F:F7:B6:CF:6D:5B:47:DC:73:35:AE:88:1F:8D
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01976D06E63FE1A9CEA2154FFD8672BE8CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 05F5
Signing time: Sat 14 Jun 2025 06:00:58 +0000
Manifest this update: Sat 14 Jun 2025 06:00:58 +0000
Manifest next update: Sun 15 Jun 2025 06:00:58 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: RFd8NV2od/QjKzC+ZHr43q41HMGYThFZiq8PdGAWb2g=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e6:3f:e1:a9:ce:a2:15:4f:fd:86:72:be:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jun 14 06:00:58 2025 GMT
Not After : Jun 15 06:00:58 2025 GMT
Subject: CN=c91ff912c0380ff7b6cf6d5b47dc7335ae881f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:69:80:6c:be:62:ec:6c:04:83:4d:68:fd:
b2:67:f6:b4:d4:58:83:5c:7d:80:ff:08:b8:7a:6b:
28:e7:f4:79:15:dc:0c:b9:0a:d9:f5:4d:cc:42:2c:
56:53:60:3f:d9:86:2a:5b:09:5b:ae:11:a7:ed:f9:
14:b9:28:88:cf:2f:c4:b1:74:ff:d1:56:e6:ec:00:
e3:89:d2:41:4b:87:ce:82:4b:d1:c3:33:6e:c2:68:
e4:f7:a7:2f:97:71:45:5b:28:4f:89:a5:aa:0d:9a:
90:58:5f:fe:c1:24:0d:50:61:aa:3c:36:60:c9:b8:
8f:18:73:1a:22:56:d0:ad:f6:3b:cc:2c:7a:3b:78:
6b:ec:c2:59:b3:8d:99:a8:5c:60:d4:6d:b4:e0:58:
8f:26:20:d8:77:73:8a:99:28:36:2c:e9:e0:9f:a5:
85:96:70:bd:6b:2c:61:ba:e5:30:3b:8a:be:30:8d:
ab:13:87:d0:fa:e2:14:ac:7f:d4:0a:00:8f:e7:91:
23:14:b9:ad:63:ae:ac:16:0e:00:95:8d:e3:c0:8b:
9e:70:ba:ea:2e:ee:de:50:45:9f:25:66:13:1d:f5:
ba:77:d2:25:a8:e2:1c:d9:40:7c:9a:9f:06:2e:33:
59:3d:84:78:7d:70:a2:30:d7:c5:d8:73:fd:0e:70:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:F9:12:C0:38:0F:F7:B6:CF:6D:5B:47:DC:73:35:AE:88:1F:8D
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:be:df:b0:c6:07:9b:07:ec:b1:17:3e:0d:38:23:60:c7:24:
a8:0e:69:b1:fa:a8:e5:11:99:04:81:04:1d:02:f8:da:61:2d:
aa:df:b7:7b:9f:12:15:2d:e0:43:c8:6f:a0:f3:4f:7a:fe:00:
b7:63:e7:97:96:7f:84:a2:ba:a0:87:44:a5:1d:f0:16:73:55:
84:64:64:ed:af:50:ac:26:6d:31:98:ff:2f:f7:54:52:ab:41:
f2:d7:86:0e:71:07:c4:58:19:d5:77:e8:5e:4e:b8:30:65:ea:
30:6a:bc:91:3a:8d:10:54:7c:fb:b3:f5:7a:46:de:5a:02:bc:
11:8a:6d:c8:1f:12:bd:14:3e:4d:2b:63:dc:bc:70:d7:cf:d7:
d6:98:6f:0a:0e:18:93:f1:11:4c:42:63:b2:51:a6:1b:9b:25:
f0:18:5c:d6:a8:dd:2d:a1:a5:4e:bf:cc:f3:cd:44:99:04:6f:
ec:8e:78:60:3b:65:5c:7b:00:61:81:7d:9e:be:67:21:f3:cc:
5e:ce:d9:58:73:f0:c2:b3:90:af:f4:09:9c:22:cd:3c:3b:00:
2a:6c:f8:c1:12:64:c8:64:a4:b8:eb:bf:a6:44:d8:33:03:25:
c7:e8:10:5d:83:2e:6d:9f:40:fd:aa:12:da:ff:c6:b7:db:32:
8f:49:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:24 2025 by rpki-client