Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: VE/dw6x61gAhXV9doQt3ENLKzvlZixlfnHDn1L4R5dQ=
Subject key identifier: 58:D8:CD:4D:89:C9:93:F6:E2:1F:4A:A2:A1:96:43:07:5F:7D:D2:BB
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019770E36AAA74CC5F5BF197BC67A4494FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 00:00:41 +0000
Manifest this update: Sun 15 Jun 2025 00:00:41 +0000
Manifest next update: Mon 16 Jun 2025 00:00:41 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 5i2q1N8smyXLouRtaivepYAYQxT5TvCa+03Pedcn6wU=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:6a:aa:74:cc:5f:5b:f1:97:bc:67:a4:49:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 15 00:00:41 2025 GMT
Not After : Jun 16 00:00:41 2025 GMT
Subject: CN=58d8cd4d89c993f6e21f4aa2a19643075f7dd2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:5b:f2:08:9e:b2:36:6b:ef:41:1d:54:76:
7b:ae:04:ba:d8:90:18:fd:fb:e3:5b:d4:2f:8b:12:
bb:54:9b:d1:97:1f:13:4c:69:4d:0b:88:1e:5b:6c:
5d:db:cb:1e:a7:7a:e2:f6:3e:bf:b1:79:55:fe:68:
fc:13:bd:72:17:a8:11:ad:a7:6a:e0:f6:54:df:a1:
ea:b9:e4:71:a2:ba:62:60:09:5c:ba:4b:22:6a:25:
ee:2b:e6:fb:dc:62:2a:19:f9:38:bf:02:3f:64:41:
fe:39:f9:32:56:d7:a3:fd:09:54:77:39:90:68:e7:
d8:2c:4c:84:56:d4:5d:28:0c:4e:6b:76:62:dc:66:
e5:21:1d:d9:70:b1:b5:40:95:8e:99:7a:f7:ff:33:
7a:bc:a4:3c:dc:09:fd:92:23:b3:d5:52:a4:46:45:
62:48:0d:85:37:18:63:b0:98:d4:48:e0:b3:f7:98:
42:76:a0:57:0c:15:94:6b:c9:b9:bc:f3:8e:b4:58:
cd:06:6c:94:9c:58:50:c1:1f:32:b1:0e:98:2d:6a:
69:95:8a:2a:57:28:6c:55:57:25:bb:12:27:92:d2:
3c:a8:0f:0c:dc:90:16:5c:3d:66:2b:27:58:c7:20:
01:6f:2f:16:ea:90:77:59:f0:89:9d:3f:9f:4f:51:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:CD:4D:89:C9:93:F6:E2:1F:4A:A2:A1:96:43:07:5F:7D:D2:BB
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:84:0b:4f:ac:57:9c:5e:53:c7:77:5d:e8:11:e6:5f:22:
f5:c8:28:e1:a5:34:6c:b7:5d:a1:7d:7c:21:eb:b5:2e:3e:10:
f1:b4:6b:6a:02:d9:b2:39:8a:fa:70:eb:cb:b5:c4:03:92:45:
5b:29:f8:07:c1:26:5c:c6:6f:aa:eb:75:9e:32:bb:0e:03:ad:
6b:30:47:81:2b:2b:1c:91:44:2a:71:1c:2f:fc:01:d3:14:a5:
06:f6:da:b7:c9:d6:36:73:b8:fd:e7:d9:c6:3b:7f:56:63:76:
a0:94:3c:a2:74:ab:68:f9:20:07:fe:df:a2:2c:02:16:ac:cb:
14:d3:44:0e:0f:e9:cb:3a:7e:71:de:f9:73:11:56:5a:46:ea:
55:ee:6c:00:3b:43:8a:f6:2c:6e:38:79:0b:00:5e:f5:65:c3:
ff:d4:3b:06:37:25:2e:17:93:9c:b7:68:a6:ee:1a:46:21:3b:
2e:81:c6:9a:00:bb:25:96:ce:71:9b:ce:7b:d3:35:eb:48:5c:
ef:ea:8b:cc:9e:c6:06:ec:0d:b6:0b:9d:0f:04:d5:b0:19:8c:
51:a6:a8:28:20:4e:1a:d0:e5:0a:31:63:b8:70:59:e3:34:f9:
57:d9:36:4d:16:bd:4f:8f:ae:55:01:43:81:08:5b:ba:12:37:
fa:e1:22:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw42qqdMxfW/GXvGekSU+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz
YWYyMjgwHhcNMjUwNjE1MDAwMDQxWhcNMjUwNjE2MDAwMDQxWjAzMTEwLwYDVQQD
Eyg1OGQ4Y2Q0ZDg5Yzk5M2Y2ZTIxZjRhYTJhMTk2NDMwNzVmN2RkMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tVb8giesjZr70EdVHZ7rgS62JAY
/fvjW9QvixK7VJvRlx8TTGlNC4geW2xd28sep3ri9j6/sXlV/mj8E71yF6gRradq
4PZU36HqueRxorpiYAlcuksiaiXuK+b73GIqGfk4vwI/ZEH+OfkyVtej/QlUdzmQ
aOfYLEyEVtRdKAxOa3Zi3GblIR3ZcLG1QJWOmXr3/zN6vKQ83An9kiOz1VKkRkVi
SA2FNxhjsJjUSOCz95hCdqBXDBWUa8m5vPOOtFjNBmyUnFhQwR8ysQ6YLWpplYoq
VyhsVVcluxInktI8qA8M3JAWXD1mKydYxyABby8W6pB3WfCJnT+fT1FCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjYzU2JyZP24h9KoqGWQwdffdK7MB8GA1UdIwQY
MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct
ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5
LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSiEC0+s
V5xeU8d3XegR5l8i9cgo4aU0bLddoX18Ieu1Lj4Q8bRragLZsjmK+nDry7XEA5JF
Wyn4B8EmXMZvqut1njK7DgOtazBHgSsrHJFEKnEcL/wB0xSlBvbat8nWNnO4/efZ
xjt/VmN2oJQ8onSraPkgB/7foiwCFqzLFNNEDg/pyzp+cd75cxFWWkbqVe5sADtD
ivYsbjh5CwBe9WXD/9Q7BjclLheTnLdopu4aRiE7LoHGmgC7JZbOcZvOe9M160hc
7+qLzJ7GBuwNtgudDwTVsBmMUaaoKCBOGtDlCjFjuHBZ4zT5V9k2TRa9T4+uVQFD
gQhbuhI3+uEiUg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:49:21 2025 by rpki-client