Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: sIUHI9Fllzsb4GVT3UpiA9APyYw/h0psl35H5EOrbI8=
Subject key identifier: C1:99:DC:43:18:F7:89:80:08:27:25:C2:08:61:85:EF:69:41:D7:0F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019768BC473C9C23A03FF97015B78A3B7772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 15C8
Signing time: Fri 13 Jun 2025 10:00:58 +0000
Manifest this update: Fri 13 Jun 2025 10:00:58 +0000
Manifest next update: Sat 14 Jun 2025 10:00:58 +0000
Files and hashes: 1: 00VNIWPkHk-eYeOCQl7mONDXy6M.roa (hash: pDq1pZp3C4Sqn1X3rX/G/la9ae1lH4HMURDoELo17/o=)
2: 1BHVcdS3kmkGH_bI9qfHON5UHfk.roa (hash: AuazvzToypQPnv8ss86Zt+CVshNBwKgwrntRNHToSZU=)
3: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: 7+9nlT5gb0Vcqp2e8sPdGU4cMxOd5YIR7jmMB4LwaTE=)
4: 8BE87qjZ_YzeOfLNdwdedbKrhNM.roa (hash: y4H1lZp3OfxaXMKEpq+PSjjHa3Z9ishqljKxtowY4Rw=)
5: Gq5LjD46Wfjhio7d9iqIJDoHctI.roa (hash: hNIDxt9EAkLYgEqpa1TAGbSGsQ4erxVNMwWk5NfcogI=)
6: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
7: VEIOP5CvViNk7vFxFnYuZv7tB1E.roa (hash: VpQJLJpNz6bqxTmb3xeuudtD/HduXOUl+jk53g4K7m8=)
8: rmZqjN8Le7Lhxr8nmiAOtv3GMP8.roa (hash: fLQapcdkz83ll1G3Z6c9GnseLufz0CzHLdVlExrzp/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:47:3c:9c:23:a0:3f:f9:70:15:b7:8a:3b:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jun 13 10:00:58 2025 GMT
Not After : Jun 14 10:00:58 2025 GMT
Subject: CN=c199dc4318f78980082725c2086185ef6941d70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:6d:1f:f1:0c:14:bb:22:2d:a5:7e:d6:99:
1f:7b:4a:f5:94:76:be:9a:eb:21:90:5a:4b:16:6e:
66:c7:bd:f6:fc:bd:04:6e:68:16:d9:f8:cd:ea:f8:
72:10:cf:03:ec:fa:6a:43:83:73:3d:06:96:7d:d4:
54:86:84:1e:dd:cf:9c:7d:9d:9e:52:e5:23:c5:3c:
2e:cc:d2:ed:47:15:6d:d4:9c:6a:ab:55:76:93:03:
5a:17:77:5e:55:64:dd:20:63:ce:b3:2e:a2:d6:f0:
23:95:fe:28:a4:7f:d5:dd:dd:8e:ab:94:08:98:1d:
4f:b2:b3:d9:0c:85:e2:ee:b2:9a:46:b0:1d:0f:b8:
3a:f7:f8:8a:9b:76:7c:c5:9c:9c:02:2d:c2:b9:44:
00:34:a1:8e:30:3e:6b:ab:86:a4:11:bc:10:31:1d:
2b:af:da:8c:b3:55:93:6d:e6:c5:b6:98:cb:69:75:
73:2b:7b:7c:4a:24:23:c8:3b:c9:c4:c6:e9:0b:21:
a4:3f:ee:42:67:ba:c4:21:74:1a:af:78:b5:0b:54:
0f:44:77:ef:09:40:6d:9e:0f:61:e0:a7:d7:c3:26:
7b:be:07:84:f0:bb:13:0f:a1:92:cf:75:dc:f2:53:
39:20:16:6e:4f:fe:59:ae:ab:ee:3d:ef:9e:f0:f5:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:DC:43:18:F7:89:80:08:27:25:C2:08:61:85:EF:69:41:D7:0F
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:74:66:5e:c7:9d:2e:a0:e3:fb:e9:a2:2c:40:a2:15:c7:
50:41:91:50:e9:b9:f5:d7:f3:46:e1:8d:9b:e9:7f:e1:a8:a7:
ef:d0:c2:60:50:d9:64:e1:a2:46:8a:f5:13:c4:8a:6b:66:f7:
dd:6f:86:d9:27:e5:34:93:3f:2c:b2:eb:08:b3:48:ea:e0:a4:
dd:92:57:c1:ab:b8:44:63:6d:2a:cf:63:d8:74:5f:1b:68:98:
9b:f8:76:54:06:b4:9a:67:20:2b:3d:ee:ac:66:d8:4f:a7:6d:
5d:53:da:34:54:a7:29:89:2a:8c:b4:ce:f9:e6:82:0a:e7:1b:
20:75:76:19:62:51:81:3e:77:3c:4f:62:db:9a:e8:7e:91:0c:
d9:b9:fc:d3:a2:91:21:51:80:bd:0a:8c:52:a7:7c:8c:e4:99:
7c:b6:bc:c0:93:df:bb:9a:61:e4:76:44:81:8c:84:0b:d6:41:
f7:ff:39:48:1f:fb:7c:91:67:12:03:2e:62:25:c6:97:1b:82:
09:f2:56:c9:df:01:11:32:11:04:90:04:ec:8b:4a:47:01:56:
63:73:a1:7e:01:55:90:ce:af:a2:38:0f:0d:27:06:42:f1:f1:
68:de:ae:e3:08:33:91:ab:f8:15:15:30:48:69:e9:cd:44:c1:
cd:dc:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:15 2025 by rpki-client