Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: Yx4/1d23geJmP4Ek5FvX0Kk5F9t5bCqmappQQdwNTuk=
Subject key identifier: 52:7F:40:B0:C0:0E:D4:98:14:97:50:6A:9B:DA:4A:46:B4:FA:DF:41
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 01976C98B7C3A8E01946214ECF454B2D8D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 04:00:37 +0000
Manifest this update: Sat 14 Jun 2025 04:00:37 +0000
Manifest next update: Sun 15 Jun 2025 04:00:37 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: fP01y2q0SzgW18D25LfQovtwMFihbJD0OxSuZff9mLg=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=)
5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
9: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:b7:c3:a8:e0:19:46:21:4e:cf:45:4b:2d:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jun 14 04:00:37 2025 GMT
Not After : Jun 15 04:00:37 2025 GMT
Subject: CN=527f40b0c00ed4981497506a9bda4a46b4fadf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:64:d6:45:33:a1:94:a7:76:8f:90:b8:7d:
27:d2:d0:f3:cd:1a:9d:21:7e:67:af:18:c9:59:89:
1c:75:28:8e:a6:19:9d:d4:72:cf:ad:db:93:c9:5f:
e6:0b:76:ef:66:5a:86:e2:55:66:b2:53:c2:60:7c:
ba:d6:7a:d5:7d:7d:97:81:ae:8c:79:75:f5:55:57:
39:76:17:cf:28:a0:09:24:7f:e6:4f:f0:56:a4:47:
a7:db:fb:45:1e:9f:58:32:8b:ab:77:21:34:19:84:
27:94:e7:33:76:99:19:ee:34:59:f7:3e:c2:19:ba:
bb:66:f3:19:e4:f4:59:81:f4:90:b9:e0:bb:25:2c:
84:f7:ef:98:a3:ce:0f:d3:e8:b9:1b:b0:21:82:27:
62:9f:c4:01:c5:cd:67:91:8b:65:1c:b4:a6:39:36:
bd:42:dc:7c:70:a8:0b:2e:79:7a:6c:6c:52:48:b8:
54:26:fa:2c:80:f1:94:2f:20:9e:0a:43:77:3d:ab:
be:39:8b:1c:80:88:4f:f0:b9:fd:bc:66:35:84:3a:
8e:10:66:c1:16:de:86:d0:d7:26:8b:bb:1a:ef:08:
d4:6f:31:a5:5a:47:f5:45:72:5d:5d:b5:46:ad:d6:
4a:cd:c2:95:5a:c0:69:9b:83:95:52:c6:16:94:01:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:40:B0:C0:0E:D4:98:14:97:50:6A:9B:DA:4A:46:B4:FA:DF:41
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:56:f8:1f:82:f1:99:74:81:fe:de:b6:a3:52:d5:91:fb:
83:aa:d3:13:5d:77:67:ba:3a:ee:9a:a4:ea:68:4c:38:4a:d3:
9f:79:be:a4:e1:c2:da:0b:91:e0:96:c5:d0:b0:3d:2c:07:ae:
bd:68:e7:60:71:10:dd:9e:25:f2:86:5a:a1:e2:97:0e:52:7e:
a8:a3:00:aa:df:d3:b2:4a:8c:38:e4:cf:f1:3b:89:23:7f:ea:
e6:13:0f:e3:77:89:07:00:6d:d4:6a:4b:18:d0:93:6e:f6:c9:
3e:dd:c2:cf:1c:66:db:62:0d:6c:d9:69:5a:d6:10:dd:58:44:
fa:23:52:ba:d0:7b:fe:f2:5f:d6:90:94:75:c5:59:b0:56:8a:
94:13:5b:0f:e8:8b:84:8b:a3:04:3f:93:af:e6:e7:08:d9:e8:
de:47:e0:f8:62:e4:78:10:44:d5:f0:8a:60:d7:c2:0a:5f:a1:
c5:79:95:eb:78:c3:dc:04:92:14:13:59:76:0d:2a:d4:2d:ea:
9a:71:d8:6b:29:f9:87:ad:af:89:84:80:67:ad:84:95:c0:7e:
12:1f:e6:a0:85:ff:74:df:f1:89:09:cf:2c:a3:61:c0:b5:99:
1c:27:bf:5d:31:00:91:33:63:4c:7a:f7:ac:1f:32:57:3b:67:
83:25:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:14 2025 by rpki-client