Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: afMPrvhm2Ul3OHqGOxScp0KVxG9ksNmgg6/ysy/jYkk=
Subject key identifier: 4B:EC:F6:C1:3E:AB:BD:F9:3E:1D:1C:C8:C8:34:68:E7:26:A2:1F:ED
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019782B28695B5ED441C1AC2F48EA6909958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 1281
Signing time: Wed 18 Jun 2025 11:00:27 +0000
Manifest this update: Wed 18 Jun 2025 11:00:27 +0000
Manifest next update: Thu 19 Jun 2025 11:00:27 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: faagVB/+oE0QKppi2uw+qEEATjRyPQ/4VVxwaZWMgLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:b2:86:95:b5:ed:44:1c:1a:c2:f4:8e:a6:90:99:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jun 18 11:00:27 2025 GMT
Not After : Jun 19 11:00:27 2025 GMT
Subject: CN=4becf6c13eabbdf93e1d1cc8c83468e726a21fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:87:19:47:4c:2d:eb:12:cf:17:7e:7f:a8:
08:8c:e1:6c:91:f9:3a:50:74:99:cc:4d:7c:13:f9:
55:08:e4:b1:67:f5:4e:03:c7:14:d5:e5:36:91:2b:
b7:34:21:29:bb:d9:da:86:82:8e:8a:c3:ef:86:c2:
6a:2a:7e:e3:56:7e:f3:cc:99:f8:10:11:a8:31:27:
d8:2a:a4:3a:66:63:d1:39:09:15:6e:0a:36:6c:cc:
3f:78:1e:82:1e:62:29:db:7e:6e:2a:d8:2b:f3:72:
8b:ca:6d:3d:9e:80:a0:80:42:0c:d6:05:d3:a5:6d:
3a:a8:50:0b:db:62:6f:fe:26:86:35:5a:0a:08:d0:
b2:f3:b9:53:52:84:eb:c7:11:ed:5c:7a:80:4f:db:
19:38:03:0e:bc:d5:65:49:1c:f0:7d:89:0e:6d:9b:
1b:09:3d:de:82:69:7b:54:93:06:0d:cb:77:b3:fc:
af:51:75:57:e6:ca:fa:b5:2b:57:d2:b1:ff:31:a7:
de:5a:c1:c3:8c:af:68:b6:e2:87:97:b7:35:f0:25:
cd:45:01:dc:bd:d9:fd:c0:4f:9f:02:80:70:02:26:
c7:41:7e:a0:c5:55:ef:12:72:a7:c1:0a:c1:0e:6a:
db:3a:37:39:66:04:7e:21:fb:ac:04:a6:df:10:fb:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:F6:C1:3E:AB:BD:F9:3E:1D:1C:C8:C8:34:68:E7:26:A2:1F:ED
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:55:5b:bf:5d:6a:93:30:48:77:d0:75:29:f2:b2:e9:44:7f:
8e:e7:13:57:a1:42:51:77:3a:b4:12:ee:cb:6b:14:52:d0:b8:
ea:f3:b2:da:5a:1d:3b:05:88:eb:d9:2c:34:5c:cb:b8:6e:7c:
87:79:f5:14:7a:3f:d3:26:86:01:26:82:0e:e3:2b:dc:a1:5a:
50:79:09:6c:26:ba:e0:24:cd:30:4a:65:89:b6:83:d4:fc:a1:
c8:ce:cd:4e:40:bc:c1:a7:74:f0:35:ed:93:d9:ce:65:33:ac:
00:53:dc:80:1c:25:77:b4:5c:f5:c0:c2:9c:a4:35:27:df:3a:
88:f9:eb:96:fb:66:54:66:57:90:90:77:a4:7a:1f:9a:3f:0f:
b6:25:c5:3c:47:98:2a:48:77:fa:3a:de:7e:48:df:c0:15:56:
6b:fb:a9:6a:4a:c0:30:6f:62:6e:bd:2d:7c:78:0c:fd:f7:aa:
d2:ad:ec:a6:23:24:ec:11:05:07:f7:77:d2:36:e1:7e:33:25:
26:a6:f8:d1:6f:b7:56:8b:ed:62:b4:c3:94:74:56:9b:2f:cc:
b1:cf:b7:fa:10:c6:f8:6f:24:41:0f:92:63:be:8f:ef:ae:cc:
40:35:f1:11:26:22:82:e2:4a:0e:52:6f:e0:64:44:09:89:34:
3e:6f:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:06:46 2025 by rpki-client