Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: T+kfe2lbqXs9p+sTi/stWa7iOcv+F6XnchyBKFZGQic=
Subject key identifier: 88:48:96:A5:35:2D:6C:87:1C:D2:64:FE:5E:83:FF:FC:53:C2:DD:00
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019775650407E823C0A7B835E36159F1BE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1598
Signing time: Sun 15 Jun 2025 21:00:43 +0000
Manifest this update: Sun 15 Jun 2025 21:00:43 +0000
Manifest next update: Mon 16 Jun 2025 21:00:43 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: KojYt9tyT3ROwMWYSrNmVbdSY33aC7Hmo7uObEG/2wk=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:04:07:e8:23:c0:a7:b8:35:e3:61:59:f1:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jun 15 21:00:43 2025 GMT
Not After : Jun 16 21:00:43 2025 GMT
Subject: CN=884896a5352d6c871cd264fe5e83fffc53c2dd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:63:d8:25:82:70:af:f3:b5:d4:c9:09:75:
f7:5f:11:cf:cf:91:79:c7:01:7f:92:b3:dc:ec:e2:
9f:d2:d2:93:4b:87:54:a9:98:42:8f:83:4b:35:23:
ba:02:92:04:27:bd:cf:a4:81:5b:69:13:86:b2:e0:
7c:3a:73:bf:2b:5e:72:92:22:f4:e8:ac:c0:22:8c:
2d:99:d4:f8:1b:48:ca:6e:ca:52:c8:a1:c6:9c:50:
bd:48:44:7a:19:a4:88:f7:e7:4d:c6:55:b4:1c:ac:
c8:f8:9b:d1:84:84:bc:20:7c:bf:c2:a9:5c:79:f0:
4e:26:b5:14:1c:a7:86:2f:b5:d5:94:1a:0f:60:33:
6d:b0:8e:7c:3a:8d:b7:17:ba:b3:6c:ea:84:af:7e:
47:37:58:45:d5:7b:41:38:5a:14:38:f1:fb:30:a5:
04:0c:69:f5:34:14:89:d7:14:87:2d:3d:2e:ba:95:
95:eb:33:5c:84:b5:fe:4a:25:71:36:97:47:af:75:
6c:5e:7d:5c:39:92:4f:4b:d7:ad:ad:cc:ba:ff:69:
9a:ff:ac:82:55:e0:62:c8:ad:96:a6:d2:8d:9a:f6:
d8:2a:9b:41:40:5a:89:d3:9d:be:51:83:1c:49:81:
df:f7:1f:a1:6c:ed:1a:12:7f:0c:bb:a2:29:5e:6b:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:96:A5:35:2D:6C:87:1C:D2:64:FE:5E:83:FF:FC:53:C2:DD:00
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:85:18:84:85:97:69:18:7a:12:9e:e1:97:ff:77:ec:c7:59:
48:22:2c:eb:9c:56:ac:43:82:48:04:a7:52:c2:03:77:b7:8f:
fb:66:80:68:4b:2c:35:66:ee:10:91:50:82:27:15:cb:a6:1b:
c9:dc:56:d9:19:84:f2:c3:7f:e7:19:12:8e:03:07:a6:ee:9b:
49:9e:cb:1a:78:d6:78:44:cc:59:b7:30:5a:dc:da:af:ec:00:
f4:29:cd:d5:54:16:d6:5a:6b:49:a6:c7:38:b8:35:43:77:41:
0d:30:ed:93:82:89:41:58:bc:47:b7:28:1e:c2:63:24:6c:58:
fe:ca:25:3a:45:48:d8:e3:b1:47:99:b6:b9:88:38:a6:62:0c:
1a:46:3e:c9:8e:cd:49:a6:ed:30:7d:78:a8:57:85:6f:bd:6a:
70:5a:97:f3:ac:ec:4b:97:2e:1a:f5:b1:8a:85:52:d9:7e:8e:
ef:7f:ad:9b:e6:99:24:f5:63:1f:8b:a6:44:5d:fc:5e:fe:46:
85:fe:71:dd:14:b5:76:e0:da:12:76:61:c8:be:15:89:a9:87:
c8:fc:f8:a7:33:2b:93:fb:00:fc:4e:b9:b2:25:55:19:c1:84:
18:fc:31:47:6b:cc:bb:20:f1:de:9f:7d:b8:f2:d9:69:e9:15:
cb:9e:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:47:15 2025 by rpki-client