Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: 3edlY2vO0DDiUOLE0KGGGQakxUDneKwcPYgMQWD891s=
Subject key identifier: 17:48:FB:92:74:4F:D9:31:7A:B2:18:29:80:B3:22:F7:90:BC:45:5D
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 01978661F7D7D118C40B44931F7A6488EE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 04:10:56 +0000
Manifest this update: Thu 19 Jun 2025 04:10:56 +0000
Manifest next update: Fri 20 Jun 2025 04:10:56 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: zyzbNL0GGswmcjmr6CHG2OE1tVp1IQFl6tvXgIXj/NA=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:f7:d7:d1:18:c4:0b:44:93:1f:7a:64:88:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jun 19 04:10:56 2025 GMT
Not After : Jun 20 04:10:56 2025 GMT
Subject: CN=1748fb92744fd9317ab2182980b322f790bc455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:cc:37:f0:56:3b:d5:d0:35:67:e6:e3:8a:
8e:c1:81:8c:9c:e9:1f:a4:13:34:aa:28:88:76:f8:
de:21:6e:a1:ca:4a:c5:66:b0:c2:16:3b:d4:8c:f2:
7b:fb:84:88:e2:94:da:bf:e5:e8:6c:07:59:8e:c3:
cd:9e:fc:00:48:3b:0a:ab:82:d8:91:d3:e4:59:af:
3b:90:65:06:0c:9d:20:69:79:19:a9:f9:f9:7a:b5:
ba:aa:eb:50:9a:2d:bd:fb:7e:5f:35:21:b9:8d:ba:
0e:0a:f2:54:54:46:dc:0d:ea:4c:ee:0a:0a:c3:7d:
cd:8c:fe:35:3a:0e:1c:25:c0:26:21:6e:74:67:6c:
c4:7f:24:77:53:82:96:0e:0e:61:89:9d:b2:60:ad:
a5:43:a3:d0:c1:e6:35:43:36:bf:62:53:28:85:74:
18:15:44:61:82:3d:c9:68:bc:3b:48:1c:dd:d8:da:
39:dd:ef:d0:d6:9c:54:47:b2:04:44:71:7e:5d:97:
41:2a:55:7d:4b:cf:44:39:e8:4e:37:19:15:01:ce:
59:27:12:4d:d1:6f:dc:5e:12:4d:5f:66:37:c6:fd:
37:b1:69:07:6e:ea:a7:3a:4f:6d:7e:f2:d4:1a:b7:
9a:37:89:81:b1:b0:2b:c9:d0:ec:b6:e1:f9:ea:74:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:FB:92:74:4F:D9:31:7A:B2:18:29:80:B3:22:F7:90:BC:45:5D
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a7:0f:0e:e1:ee:85:6a:21:9a:b7:94:89:9b:9b:e0:6a:e8:
0b:57:65:eb:53:2f:40:1d:5b:41:c2:2e:51:26:60:63:4c:87:
22:36:be:26:ad:6b:cb:bc:48:cd:b7:e3:45:f6:32:90:95:3f:
f9:0f:68:11:41:04:a1:a4:4b:f6:25:58:e7:62:bc:f7:b5:5a:
61:c1:2b:92:4b:13:41:14:2e:e3:d8:cf:08:04:d1:75:0f:e1:
86:de:d9:a9:14:ec:15:71:77:3e:c5:43:d3:7e:0e:f7:e9:d6:
3f:93:bf:cb:05:3c:dd:da:31:2d:b3:90:c9:59:21:da:0f:71:
c0:d8:ca:3b:f7:2f:98:7e:31:32:0d:76:25:9d:2a:17:4e:d3:
80:ac:93:e8:2b:4a:cb:e7:ca:d1:5f:4d:5e:aa:06:77:c9:ae:
73:f4:4d:77:3e:6c:8d:32:db:8e:ac:5c:0e:18:0e:6f:ec:3c:
21:f3:eb:54:a5:73:c9:4a:ba:b4:c0:b5:9a:7d:ba:36:7b:bb:
1c:a7:03:44:13:71:fd:2c:f2:62:3b:b0:1a:03:c5:65:ac:c1:
7f:f5:48:77:df:19:96:b9:0f:35:4c:f1:88:9b:8b:2b:96:e6:
0d:ed:20:45:52:dd:7d:11:bd:db:94:70:5d:72:8b:5d:ba:d4:
33:f5:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:59:40 2025 by rpki-client