
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: HTZIEG7I4QaXCHPmlDdQ+PGB12x0DNvnvdU+jiO5hZ0=
Subject key identifier: 3E:2F:7A:15:AB:51:D7:3C:B4:29:00:DE:2E:B0:9D:02:50:27:37:05
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019772640895961CA5698BF2C7A01FCB53DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 07:00:47 +0000
Manifest this update: Sun 15 Jun 2025 07:00:47 +0000
Manifest next update: Mon 16 Jun 2025 07:00:47 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: hFtnkPbR34Sxo46XlgUHRr9wcMQzSFVJGM5YslWql30=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:08:95:96:1c:a5:69:8b:f2:c7:a0:1f:cb:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Jun 15 07:00:47 2025 GMT
Not After : Jun 16 07:00:47 2025 GMT
Subject: CN=3e2f7a15ab51d73cb42900de2eb09d0250273705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:bd:db:f2:bb:d1:3c:83:6f:dc:d0:cc:fe:
0c:49:b0:01:cc:49:ee:fb:15:51:08:20:d1:f8:71:
05:f8:20:2b:71:49:bd:6a:09:a8:5d:51:78:d8:b0:
74:6c:d1:1e:77:3e:c7:77:a6:aa:bb:cd:ec:55:33:
d0:4d:51:ec:1d:f2:f2:b0:80:68:1b:84:b3:59:da:
ad:2b:97:06:f3:1b:23:1b:b5:5e:28:e4:8e:fd:3e:
60:ad:d2:76:17:58:36:b5:d9:42:56:85:f8:1e:59:
da:66:73:27:16:9f:ff:a6:4c:4c:41:24:34:24:57:
b4:c9:39:f2:20:2b:d6:2b:4a:02:97:41:de:12:c9:
2f:be:f1:cb:b2:c9:a5:0e:f0:ca:ca:9c:04:56:a0:
fc:66:4f:19:34:60:2f:63:8e:8b:94:c4:a7:c5:3b:
f2:5f:cd:e5:26:3c:3b:4c:07:9f:6d:5b:36:37:71:
96:f0:a9:04:ab:79:b2:ff:5f:68:03:2c:1a:23:98:
68:3b:c8:e8:8a:bb:36:68:c9:08:d5:6d:6c:de:b0:
0d:1d:5a:52:24:ac:16:63:56:4c:da:7f:b8:57:69:
24:9d:3f:c7:95:72:4d:e6:ac:a7:d3:4b:d6:02:86:
92:61:35:9c:d5:e8:eb:2b:17:be:9a:d6:fa:4d:76:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:7A:15:AB:51:D7:3C:B4:29:00:DE:2E:B0:9D:02:50:27:37:05
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:c5:10:85:f5:e8:e7:ec:ba:c9:78:fb:5b:79:42:4c:6f:
17:b2:94:ad:a8:24:80:1d:29:55:ad:c6:ce:4d:e2:f2:fc:f0:
2b:8f:76:98:14:c9:38:1f:8a:98:c4:1b:c0:7b:82:e7:2f:51:
64:c3:35:5a:9e:e9:80:ab:6d:f4:bf:a2:29:88:ba:12:25:33:
bf:a2:37:b2:33:c8:49:0a:76:b7:36:db:de:53:ad:4a:a0:a7:
8a:72:27:d2:5e:20:09:29:38:d6:3b:45:c2:c5:65:f7:5e:44:
a8:22:42:64:59:93:1e:71:f2:19:cc:c6:49:25:1d:e6:35:8f:
15:2e:65:11:70:63:20:dd:1e:83:f8:bb:bb:e5:00:b2:59:62:
ef:dc:d5:be:c9:81:ab:cc:52:aa:6e:88:3f:9d:9c:5c:ba:c6:
5c:c6:aa:1d:24:4b:84:3a:2c:91:0f:aa:8e:b9:58:06:d3:07:
f2:09:3b:eb:28:db:76:6a:92:e9:b4:a5:76:74:4a:3d:0e:af:
2c:9c:39:2c:5a:39:af:7d:62:ba:09:04:fc:5c:51:8f:3d:13:
fe:20:b6:8b:3e:07:a3:a5:2f:d8:ea:e2:40:87:af:ca:32:09:
21:7d:0c:95:a3:19:47:0f:3e:15:2d:33:c0:94:cf:f0:dd:f3:
63:64:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:34:56 2025 by rpki-client