Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: iBbW2Sy/48IUDefb14SYoO0BBl90udMj1SlmEy4lAhQ=
Subject key identifier: 5E:F1:8F:4F:0E:EE:12:84:54:CA:66:36:36:B6:25:60:E0:6C:F3:06
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019785EAD33FCC01AA17D23EBA815100D02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 159C
Signing time: Thu 19 Jun 2025 02:00:48 +0000
Manifest this update: Thu 19 Jun 2025 02:00:48 +0000
Manifest next update: Fri 20 Jun 2025 02:00:48 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: jILbt89dS7H/Vw6kHHxz+1loMYFE0BFmFsnUczqqgS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:ea:d3:3f:cc:01:aa:17:d2:3e:ba:81:51:00:d0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jun 19 02:00:48 2025 GMT
Not After : Jun 20 02:00:48 2025 GMT
Subject: CN=5ef18f4f0eee128454ca663636b62560e06cf306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:78:6e:3c:6d:d1:17:aa:1b:ee:21:59:d3:
01:6e:a9:94:e5:4a:d2:ef:df:2d:a6:db:4c:63:3c:
21:5c:c0:38:cc:fe:9f:65:a8:17:5e:e2:76:b2:59:
50:6c:29:32:59:76:0a:1f:fe:5f:ed:38:06:02:5a:
7d:7f:71:40:4a:d9:43:77:b3:f8:ad:6f:f3:dc:78:
9a:f2:2b:8d:b8:10:4e:54:dc:e2:7f:d5:c3:c1:e6:
8f:ee:9a:3f:4f:79:f0:56:d2:b8:f9:11:f3:e4:b3:
aa:8c:42:3b:cb:fb:ba:8a:a6:c9:78:e1:50:97:3f:
ca:1c:75:48:41:d9:ad:6c:6d:8a:cd:cf:7b:20:2e:
58:96:eb:4d:fb:46:33:fe:ff:41:9c:52:71:02:28:
27:9f:0d:53:29:7a:74:86:87:1e:fd:ce:4f:0d:0f:
dc:f5:17:53:d1:bc:75:ac:4c:30:0a:70:21:e1:02:
54:0f:d7:50:0e:f2:62:38:b6:45:c7:48:3c:07:09:
70:90:80:30:b7:65:a9:39:e2:56:68:4d:75:2c:c2:
cc:9a:d3:42:e7:ba:29:60:b4:1e:15:0c:54:38:a0:
e5:59:8f:e3:1c:07:77:a8:06:02:73:e0:32:a4:20:
75:cc:d2:6b:01:e9:86:d1:00:05:31:8f:fa:9a:95:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:8F:4F:0E:EE:12:84:54:CA:66:36:36:B6:25:60:E0:6C:F3:06
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:6c:41:ec:7e:93:c2:1d:56:eb:09:e9:c4:a2:7b:64:2e:
21:e0:ef:11:c5:85:0c:24:4f:1c:f0:b0:3e:12:ed:14:0f:cf:
10:5f:9f:97:79:45:39:cb:f7:ef:83:d9:aa:7c:b0:ca:41:d9:
9c:13:cb:73:45:32:3b:f8:c6:3e:3b:42:1d:0b:4b:26:a4:4f:
1a:15:53:b4:20:74:fa:7e:5e:c7:9e:d7:e2:d7:73:10:13:82:
0e:2e:cc:5d:7a:a9:a8:63:29:cb:73:10:9e:80:5e:c1:66:41:
83:cc:51:d3:e9:c3:70:7b:4c:9d:d0:86:13:54:86:5e:23:f1:
ed:4a:b1:cf:5d:c9:dd:63:7e:b6:77:82:86:74:87:fa:ab:9c:
51:32:a4:9d:2c:fc:0c:bf:4b:ee:a6:65:bd:0d:c4:36:7e:0a:
3f:72:81:34:dd:c6:f1:77:04:6e:2d:47:02:95:88:b6:eb:db:
86:ae:4a:59:e3:76:04:a5:64:84:34:1f:e4:32:c7:42:f2:8e:
44:6a:62:39:82:20:07:ca:b9:5d:d6:07:2a:65:58:33:05:02:
96:2b:97:68:fe:4c:41:6f:bf:2f:ed:7b:d3:47:6a:d5:9b:ff:
d8:f8:fa:9b:47:5e:2d:04:96:b4:41:8b:6e:f8:43:e7:2c:73:
56:bd:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:08:34 2025 by rpki-client