Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: AsdyaTvaK5cMe8fVznkqrTLTM52Bur74u/C6fvyOkSU=
Subject key identifier: 85:A1:9A:47:D2:40:3D:36:BC:02:52:7C:6B:74:C2:14:3D:B4:9D:8E
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 0197700768921B47BE1108C1F9EFA99AA929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0546
Signing time: Sat 14 Jun 2025 20:00:22 +0000
Manifest this update: Sat 14 Jun 2025 20:00:22 +0000
Manifest next update: Sun 15 Jun 2025 20:00:22 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: VhwwkoY15+5IPuUy8HCcGSofBamVwAEn/DD+KJNVWXc=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:68:92:1b:47:be:11:08:c1:f9:ef:a9:9a:a9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Jun 14 20:00:22 2025 GMT
Not After : Jun 15 20:00:22 2025 GMT
Subject: CN=85a19a47d2403d36bc02527c6b74c2143db49d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:4c:5e:c2:ef:a6:45:08:08:71:5c:62:45:
e6:fa:78:fa:1f:10:ad:cd:49:32:88:df:b3:49:d0:
97:c5:41:67:de:5e:bf:65:dc:0e:ea:75:98:1d:ca:
42:7e:a8:78:cc:b0:37:34:fe:0a:9c:ea:b4:a2:df:
b2:06:5d:2a:0d:6b:4e:7a:85:55:c0:64:80:88:0f:
35:03:62:fe:44:7d:3a:94:c0:53:8b:7c:26:fa:6f:
7f:e2:e6:98:0e:2a:7a:dc:bc:78:5c:d4:61:d1:57:
03:b7:ab:68:4b:c5:4d:05:88:c0:80:53:f6:4b:bd:
69:ac:e8:f4:cd:cb:d6:0b:8c:0d:d6:da:1a:bc:01:
47:2d:dc:69:ca:f7:72:a8:10:74:4e:8d:61:6b:da:
0f:77:a6:08:dd:1d:f6:dc:fe:42:8a:22:8a:10:b2:
37:4e:b7:4e:43:7a:5b:86:3b:44:1b:00:8a:07:13:
24:0d:15:b7:0b:57:85:51:04:57:b5:c6:a7:42:35:
e5:aa:6e:78:7b:59:93:63:f0:15:42:5a:b7:83:72:
6f:4d:74:fc:a8:13:b7:93:d4:f0:cd:40:c3:63:5c:
bd:78:b7:d8:8f:9a:90:5a:03:6e:38:66:36:36:c4:
74:4b:99:ad:12:ec:92:62:0b:46:2e:c4:6e:69:48:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A1:9A:47:D2:40:3D:36:BC:02:52:7C:6B:74:C2:14:3D:B4:9D:8E
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:5e:b9:59:f1:6c:39:d4:85:d9:3a:08:33:22:4f:bf:b6:
60:d2:cd:12:18:9f:ae:da:b6:2d:14:77:ac:14:27:56:ee:6d:
6b:cd:78:5c:b7:1c:9b:41:33:09:b8:97:36:87:ac:04:6d:50:
8f:b5:ab:2d:b7:df:65:af:0e:6e:49:54:e9:70:6c:bb:20:cf:
17:bc:2a:da:89:76:cd:63:32:1c:e8:41:4b:f8:ca:f8:ca:e8:
75:d2:d9:2d:40:60:0f:b8:22:ed:4a:ef:b1:73:c3:ae:fe:b3:
aa:5c:da:23:96:c4:8c:e4:47:4b:25:1e:bb:d2:9f:c7:2b:2c:
eb:ed:0c:58:83:aa:c1:33:86:f6:74:a1:69:a0:85:cc:3d:d9:
5f:43:a5:bf:7e:b6:0f:61:27:92:fe:8b:37:17:50:c0:85:b1:
58:7a:8a:9d:ff:a5:e3:72:f2:fd:ca:ab:6f:89:51:6c:38:9d:
75:95:c6:26:f4:6a:0d:b2:7c:45:87:53:72:a3:7e:02:68:d4:
aa:f9:4b:68:a8:cd:f1:27:ff:1e:5d:99:65:88:0e:1c:0c:88:
dc:65:38:51:5c:74:30:73:9e:ab:82:6e:92:71:a9:d9:1c:24:
8d:e0:7b:3e:a5:b0:b9:86:4c:20:a0:9f:35:a6:96:9c:d3:fb:
24:ab:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:27 2025 by rpki-client