Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: JBI88qVMSwn6z31IwCSbyezTt//G4OBWoimxmMAcnVo=
Subject key identifier: 8E:DD:56:57:C0:C8:47:77:48:89:51:C7:5C:06:EA:99:D2:96:1F:9B
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 01977007A4D9DB89A85CE4E032EADC7C89B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 20:00:38 +0000
Manifest this update: Sat 14 Jun 2025 20:00:38 +0000
Manifest next update: Sun 15 Jun 2025 20:00:38 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: M0qe2zNucZc6m1Kf/RnISS6RMhtVGOjLSCf9gUF/0w8=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:a4:d9:db:89:a8:5c:e4:e0:32:ea:dc:7c:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Jun 14 20:00:38 2025 GMT
Not After : Jun 15 20:00:38 2025 GMT
Subject: CN=8edd5657c0c84777488951c75c06ea99d2961f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:bf:cb:c0:86:34:9e:f4:3b:9e:e9:12:3d:
bf:e1:f4:95:b2:fd:92:af:32:63:f6:89:2c:7c:03:
5b:27:2b:40:c8:40:98:1e:be:84:de:d0:f2:54:e0:
56:09:29:7b:83:b6:20:8b:fd:87:c1:5b:e6:8f:a9:
a6:76:a2:64:19:b7:08:52:1e:16:ca:49:11:dc:6a:
3c:b4:be:e8:a8:22:a2:f0:05:0a:17:d1:44:e9:24:
d2:81:52:4f:5f:6e:4d:0f:39:1a:d7:f3:58:d8:c6:
24:31:9c:51:c1:56:df:37:34:51:9c:2b:b6:9e:14:
19:23:91:98:85:e4:b9:c2:d7:62:79:77:df:be:ab:
44:06:b8:42:01:d2:ed:79:c8:4e:18:98:91:0b:8e:
ec:d3:3a:88:b4:7d:b6:e5:f7:67:4f:ea:4c:b6:f1:
eb:58:13:4e:d6:dc:76:30:a8:fa:5a:da:04:fc:02:
d5:4a:1c:e6:12:86:eb:00:8f:f8:28:e0:a4:e7:90:
ad:cd:28:cf:cd:ab:4b:1d:e4:09:fd:e1:64:5d:45:
31:6f:60:25:e5:f4:3b:a9:2f:a3:f8:9d:57:ab:12:
55:42:0f:7b:5c:ba:56:14:d1:f6:61:70:2e:f5:86:
68:20:87:5c:f8:51:31:82:38:7f:5b:34:c0:d1:8d:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:56:57:C0:C8:47:77:48:89:51:C7:5C:06:EA:99:D2:96:1F:9B
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:9f:8e:2f:e1:83:58:f2:05:6b:b4:dd:cc:52:9a:44:c1:
b2:af:99:53:a3:68:8e:e2:02:a6:21:10:dc:7a:8b:ee:12:3c:
01:b2:f4:e3:80:c4:51:7b:1d:cc:6f:85:e4:28:3a:e2:33:2b:
40:d9:d5:49:b6:12:37:ad:14:3a:05:e4:cd:0c:48:2b:70:18:
c2:d6:91:d3:5b:6e:84:5e:ce:81:53:65:11:02:d6:64:03:d0:
90:95:60:58:59:2d:99:de:a2:0a:df:bc:a5:43:39:c8:7a:10:
9a:dc:b3:8b:47:b1:41:38:26:65:07:71:47:f7:f4:cb:08:5f:
76:00:34:cc:6f:01:d4:e2:72:de:e5:28:44:33:52:9c:3e:39:
32:ec:26:13:c9:c2:2c:0f:1c:8d:0a:b5:79:a8:06:f8:11:cb:
82:dd:6a:65:a5:78:ba:3a:25:69:ff:fc:03:26:25:80:7f:b6:
df:cd:75:31:86:95:62:43:8d:47:ca:44:e1:ce:8e:c3:2d:bc:
ce:93:b8:60:c6:7d:be:23:4b:da:da:5f:2f:bd:3c:15:bb:ed:
c0:51:12:41:a3:6d:52:29:9d:62:45:10:0b:80:83:3e:04:eb:
a3:59:0e:85:43:4c:23:52:ba:ac:46:a4:1a:24:37:cc:70:fb:
11:54:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:41:36 2025 by rpki-client