Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: B28pREcGjSjLkTfmKxAZ7fPMZRwVPUqJlCroTdoEDeU=
Subject key identifier: 4A:B4:0B:BB:90:49:5F:6B:F7:4A:48:5C:40:D1:6F:B6:8B:CB:74:9F
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 01977B306176745ECB0F3FC4BB9FDDF40DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 00:00:57 +0000
Manifest this update: Tue 17 Jun 2025 00:00:57 +0000
Manifest next update: Wed 18 Jun 2025 00:00:57 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: B2PGF6ZyRuwFrbyQWToNg6uZ1awVIQizIwhoJw+/I/8=)
2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=)
3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=)
4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:61:76:74:5e:cb:0f:3f:c4:bb:9f:dd:f4:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Jun 17 00:00:57 2025 GMT
Not After : Jun 18 00:00:57 2025 GMT
Subject: CN=4ab40bbb90495f6bf74a485c40d16fb68bcb749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:fc:f5:24:78:54:71:28:fa:96:cd:46:cc:
c2:b5:5f:4a:9a:18:0d:26:73:11:2a:30:fe:2a:c0:
31:6c:0d:8b:09:61:b0:d4:ab:86:ef:93:fa:e1:75:
a3:3e:c2:42:43:de:5e:9a:c4:2e:67:d0:0f:14:bb:
3b:b1:46:36:e2:42:eb:1c:ca:27:4d:9c:cc:ab:3a:
6c:ac:a1:0c:fc:b6:e2:3c:9c:e8:4c:37:6f:99:65:
26:62:14:02:a1:fd:1c:8e:7c:57:df:c8:0e:89:ff:
69:51:bc:c1:1d:ac:4d:1c:64:ef:56:be:f7:6a:d4:
a3:f1:b2:15:2e:41:2c:5d:d4:d6:ce:3a:e8:13:d2:
4d:e2:96:23:63:b6:16:1c:62:8e:16:5a:99:ec:0b:
a2:d8:32:a7:57:7c:bc:2a:53:29:09:4d:b1:57:9e:
03:15:36:33:95:52:02:4e:27:ff:b5:b8:48:1e:3d:
51:9a:17:b0:23:da:59:37:19:25:c9:3c:a3:18:f8:
ee:4a:21:3e:29:9c:34:ab:a1:87:3d:c2:c5:3c:9f:
c3:42:a6:11:70:47:3c:ef:68:04:f4:9b:41:46:f2:
f3:e8:47:ef:af:92:94:ff:a6:1d:26:a1:af:90:4e:
5e:a1:2a:85:72:63:5b:a8:d4:98:72:57:88:5b:66:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B4:0B:BB:90:49:5F:6B:F7:4A:48:5C:40:D1:6F:B6:8B:CB:74:9F
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:59:21:1c:cd:0c:cd:4b:b8:dc:08:3d:da:db:5d:8d:b3:88:
e5:3e:4e:0a:60:41:1d:39:9c:57:62:08:14:7f:16:7a:3e:d6:
0c:93:33:a3:99:ae:03:dd:95:f4:9c:92:4d:28:60:8c:32:d5:
23:0d:be:54:10:83:1b:9b:76:38:85:97:80:62:ec:4f:60:36:
70:e3:b3:60:6c:a8:3c:22:a6:66:d9:b9:d6:1f:d1:b2:64:eb:
94:6a:a5:db:fb:44:f8:de:8d:28:ee:50:7c:a0:a3:80:03:89:
dc:6d:02:fc:34:8b:a4:9e:a3:14:22:88:19:76:f6:4d:f9:4e:
14:29:e0:2c:e6:8d:61:cf:35:c5:45:d3:d5:5a:d0:30:2c:9f:
e2:73:38:3b:f4:f5:33:08:95:b8:2e:d3:52:15:a7:bc:18:bf:
d5:76:a9:b3:da:9a:91:6f:3f:45:8e:69:c0:f5:cc:26:c6:b7:
68:e2:0d:96:d0:5c:17:cb:e9:92:8b:57:4d:f2:06:66:3a:c1:
38:cb:97:d2:7d:77:ea:6f:da:b5:d5:53:21:96:a7:de:67:e4:
05:65:5b:6c:0b:ce:79:85:07:81:e5:4d:69:45:c3:c7:e0:97:
5a:99:dc:84:52:ca:39:21:02:d7:75:c6:5f:63:4d:6c:9d:8b:
47:97:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:01:14 2025 by rpki-client