Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: KzfZb6i1ZDNfCMFkhe1P3j95XYxnd/QiGaQngVw1sRg=
Subject key identifier: 49:20:FF:CA:63:0A:59:75:2F:75:0A:8B:CC:82:8E:5E:EC:7F:15:CA
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01976BF4152DFCC0210812305144DE05B113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 01:00:47 +0000
Manifest this update: Sat 14 Jun 2025 01:00:47 +0000
Manifest next update: Sun 15 Jun 2025 01:00:47 +0000
Files and hashes: 1: _-ujCkb2AK4IkutlVxIW61CZKcg.roa (hash: ZnHaosgaFt/JXW9m08DluSmRz1C9FDWxKl8XbDANYsM=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: cLFWKzgxz6aJ3V1sDkaAGKOLBIfVL8frgGfNsfk1UuI=)
3: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:15:2d:fc:c0:21:08:12:30:51:44:de:05:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jun 14 01:00:47 2025 GMT
Not After : Jun 15 01:00:47 2025 GMT
Subject: CN=4920ffca630a59752f750a8bcc828e5eec7f15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:cd:14:99:cb:5a:de:00:23:0d:0b:95:39:
0b:3f:cf:56:a5:a2:e1:1c:e9:2e:a6:64:0f:d5:d0:
1d:b6:0f:a6:c4:db:8e:aa:0a:59:a2:4a:e9:3d:a8:
40:1d:fb:d1:3b:03:c6:27:99:94:15:2e:03:29:96:
06:d1:1a:6e:81:2e:82:d8:56:59:e4:5e:c1:5f:d3:
c7:aa:39:31:16:17:be:6e:ba:eb:8b:27:10:dc:55:
90:55:6c:87:8f:b3:b4:31:b6:3c:7a:9f:5e:54:33:
b2:cb:64:f0:e7:7e:19:be:92:af:5d:b6:30:fb:d6:
98:ee:be:59:4a:e6:7d:45:ce:f4:46:ae:b8:e5:e7:
1d:1b:e8:a1:b6:a9:79:47:d6:ab:12:a4:82:0a:78:
bc:6e:1c:94:3d:c8:61:b8:c9:b2:7f:e6:c1:8a:3d:
3c:34:ae:97:07:7f:95:92:65:7f:0e:3c:e1:0f:4b:
2b:32:b3:3e:a5:4c:9d:b3:73:6e:06:fa:95:d6:9c:
7e:3e:2a:4a:c8:ea:91:88:69:b1:ac:00:bc:ba:ea:
06:84:79:d1:24:7a:c0:9b:1d:b6:f8:b9:1e:8c:d8:
9a:ff:39:27:40:44:53:91:04:42:d7:92:c5:94:71:
90:5c:85:9a:18:e9:6e:54:06:ee:64:81:37:09:02:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:FF:CA:63:0A:59:75:2F:75:0A:8B:CC:82:8E:5E:EC:7F:15:CA
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:44:27:d2:5e:a1:02:4f:ef:d0:1b:73:59:b0:39:3f:9f:
4e:23:a9:bc:a6:4e:3b:2f:38:27:58:27:be:a8:1b:8a:44:df:
8d:50:1e:38:9e:cb:66:ea:c4:e4:17:e4:19:cb:b4:59:cf:af:
8e:11:31:31:37:0d:d3:79:21:fe:0f:19:b8:b8:f8:4d:1d:5e:
ca:dc:58:3d:c2:ba:09:fa:6b:0b:d2:22:df:a0:c2:64:5a:7a:
0d:03:8a:49:82:dc:1f:1d:8d:b8:12:49:70:37:5e:0d:4d:31:
5a:e6:4f:7e:d8:6c:0f:8f:f4:61:9b:88:83:6b:eb:bf:67:e7:
ce:69:a9:e8:3a:35:e4:68:af:7d:fb:fc:3f:c2:24:75:30:bf:
c2:ee:fd:55:d4:59:da:24:c7:47:31:55:36:fe:08:b8:3d:a5:
b2:1e:52:b7:13:10:2e:18:d2:20:95:72:49:cf:7a:53:41:92:
9d:93:30:da:eb:cd:20:a6:18:cf:2f:f8:59:95:58:77:ca:3c:
76:87:69:2c:a8:81:60:2f:53:83:04:28:f9:5a:10:35:c0:2d:
0b:96:16:ec:4d:16:b9:78:1d:db:47:17:6b:9b:f5:a9:1d:3f:
2c:a6:e1:bb:67:3b:d3:dd:56:33:ec:c0:7d:81:7e:02:4e:9f:
16:30:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:01 2025 by rpki-client