Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: Mm7IeztPxXSQ+tvObK6fLRJXThiRkmtlE5nGfN9X9rs=
Subject key identifier: CD:59:3C:CF:D6:F0:03:C3:1F:FF:7C:16:57:A6:9B:DE:BA:3E:9E:B2
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01976CCF665A278B6526F8D6139A154B5C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:20 +0000
Manifest this update: Sat 14 Jun 2025 05:00:20 +0000
Manifest next update: Sun 15 Jun 2025 05:00:20 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: Zy5QBlnlXPDgXzFZJeVydsa3XwsNzdS30SYeYi//nQg=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:66:5a:27:8b:65:26:f8:d6:13:9a:15:4b:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Jun 14 05:00:20 2025 GMT
Not After : Jun 15 05:00:20 2025 GMT
Subject: CN=cd593ccfd6f003c31fff7c1657a69bdeba3e9eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:45:bd:6c:57:10:39:bb:45:c2:c4:3c:fb:
7f:80:b7:a3:41:7d:f6:64:68:10:c0:13:3b:dd:f6:
dc:24:42:9e:ba:a6:7e:e4:69:58:0f:14:ae:01:71:
33:5f:00:de:37:db:f3:ca:ba:cc:a1:95:c4:fe:c5:
e7:34:79:5a:4f:69:49:47:95:f9:6d:cb:ba:24:0e:
00:a7:61:47:28:f4:f4:85:a2:f1:45:85:bd:de:e8:
ee:eb:fc:eb:55:d1:f0:fa:f9:dd:ff:0e:97:4f:19:
03:ac:c5:b5:cc:0a:77:57:a0:c1:65:7b:b8:f1:be:
5a:dc:c8:47:5f:70:d2:99:89:48:a3:92:1f:3d:4a:
22:10:84:51:ce:d6:60:7c:d9:db:04:78:fb:d4:d5:
a1:77:de:0c:47:2a:2c:49:5f:d3:b8:2c:27:05:b8:
b4:16:fb:97:37:5f:99:ea:a3:94:e9:12:b8:5a:55:
0d:a9:fc:8c:a7:e0:38:84:4a:68:fe:4b:a5:3f:87:
9b:0d:9f:ef:47:0a:22:44:c9:39:77:b7:13:c6:41:
c2:bc:01:34:40:be:f9:3d:ba:cd:24:2f:ad:3e:f1:
50:20:03:2b:3f:26:b0:b2:91:51:49:4a:48:db:27:
68:05:13:e0:e7:8d:31:8c:0b:bb:13:85:12:b9:47:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:59:3C:CF:D6:F0:03:C3:1F:FF:7C:16:57:A6:9B:DE:BA:3E:9E:B2
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:7f:e5:16:eb:3d:69:a3:23:c6:aa:b5:c7:78:ca:1f:f8:
f0:4d:07:08:ab:0f:38:03:10:e5:91:a1:55:3a:28:df:95:13:
4b:88:c0:42:1b:c1:12:0a:51:5d:0e:09:09:38:83:8c:38:92:
df:a0:c5:54:cd:46:82:a5:3e:58:88:21:7c:52:97:73:f8:5c:
3a:bc:79:c8:03:78:39:6d:8b:0d:92:b2:3e:2b:e5:89:b8:2b:
2f:fc:ba:30:2a:08:82:e6:7d:ce:bc:32:37:06:69:3e:57:88:
da:8b:0b:c1:11:d0:ea:2f:db:32:3c:bb:41:bc:6e:da:57:5d:
40:76:96:fc:01:69:b6:3b:92:03:d6:b3:30:89:83:5f:21:f8:
e3:6f:94:da:65:72:5b:23:f0:30:eb:1d:2e:d5:57:4f:1f:5d:
7b:ea:74:10:84:a1:8a:fa:f2:67:a0:1e:c2:9e:3c:c6:f9:7a:
88:64:51:c2:c7:e2:9c:d0:3b:de:0e:21:ef:a0:d7:e4:f4:c2:
30:ea:04:aa:ca:1f:45:8c:ce:d7:ba:04:d2:19:bb:fa:6f:e3:
1e:d8:89:2b:98:b7:05:18:04:c6:5d:14:24:14:5d:c7:93:bb:
90:b9:0d:03:ee:2a:20:66:42:e2:e4:6c:16:68:00:24:ef:5e:
be:55:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:13 2025 by rpki-client