Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: CgNHXcmEOb70jbp5inma1th42nqIjeB6k8e73xYcamg=
Subject key identifier: 4F:1E:D5:72:80:57:1A:2B:BE:E5:83:A0:13:83:0C:E0:EC:CF:E3:6D
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 01984A7803C04EDF3EA60E1D961EF8050196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 06:00:35 +0000
Manifest this update: Sun 27 Jul 2025 06:00:35 +0000
Manifest next update: Mon 28 Jul 2025 06:00:35 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: 0DVY3l9szzldyh8Cvg7+pE8agGWV/rmuEhBHC85Vh0M=)
2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:03:c0:4e:df:3e:a6:0e:1d:96:1e:f8:05:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Jul 27 06:00:35 2025 GMT
Not After : Jul 28 06:00:35 2025 GMT
Subject: CN=4f1ed57280571a2bbee583a013830ce0eccfe36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ce:93:97:f8:a3:d0:45:6f:64:12:87:a9:a4:
8c:5a:d0:3b:69:6e:a5:90:42:ae:fd:62:73:b5:6e:
34:1a:61:05:a3:14:48:43:08:c1:5e:fd:10:d6:47:
6b:76:34:60:e9:6e:43:a2:d7:a5:5f:ca:ed:42:b8:
4b:68:b3:ef:79:3f:8a:69:80:be:be:b0:7e:18:43:
ae:34:db:b4:30:73:af:dc:90:b1:93:8d:f2:92:3e:
bf:e3:4b:b0:82:ed:3e:bb:5b:91:af:81:3b:47:f7:
90:e9:aa:1f:68:08:e1:2c:9d:05:a0:a8:44:c3:7c:
95:51:b3:db:0f:c6:be:d4:98:54:2c:a9:22:04:9e:
ae:90:b4:90:e9:3e:14:8a:4e:75:45:e3:80:df:3a:
75:c3:58:d5:87:97:83:ca:c1:da:6f:e7:e2:3f:12:
3b:c9:7e:53:bf:a8:6d:cc:1a:bd:f5:b0:55:b5:3f:
59:4b:ff:27:9f:19:46:82:0b:3b:e7:31:54:8b:56:
3a:5a:1e:77:d7:f3:fd:a5:14:3d:b2:52:bd:bf:15:
0b:d4:f7:eb:1e:f2:c3:48:55:6c:47:28:9a:f8:64:
14:7a:7f:9f:ec:9a:1e:ec:d1:4e:d9:26:0d:41:57:
c8:a9:21:c4:16:35:10:4d:36:64:b8:6b:34:39:0f:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:D5:72:80:57:1A:2B:BE:E5:83:A0:13:83:0C:E0:EC:CF:E3:6D
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:aa:ea:e4:fc:62:2d:31:0e:6c:32:18:de:3d:af:6a:41:
09:2a:b6:1c:9c:25:e1:59:90:0d:32:22:d2:78:b2:62:7f:46:
3b:0b:ad:77:da:67:a5:2e:52:41:e0:dd:8b:d3:09:32:9f:4b:
cd:57:fe:bb:a7:39:71:00:66:4c:df:2b:1f:d9:52:23:68:31:
67:07:f0:2d:01:2b:08:28:5a:23:3d:a6:30:48:a4:30:db:f1:
a1:33:72:75:71:9a:25:c4:78:fa:8c:10:a0:2d:a0:bc:5d:65:
a5:2b:08:66:c4:06:31:8e:4f:d4:57:71:51:bc:7a:50:99:de:
32:7e:88:30:14:0d:32:63:86:13:f5:34:0f:de:bf:66:18:2c:
d6:0a:b7:a3:cd:5b:aa:38:fb:e3:9d:7b:7a:8e:c1:bb:d2:ed:
2b:e9:c9:28:99:94:4b:8f:43:be:13:bc:02:8b:a0:39:66:8e:
a6:5a:3f:50:82:25:c1:4b:69:4b:ef:31:d5:39:0e:75:5f:25:
16:cb:51:75:65:c2:10:df:89:f7:95:c3:a8:ef:df:7f:ad:e0:
cc:aa:68:fd:bc:2d:5d:32:67:cd:dd:e0:1f:e9:68:c9:69:81:
ea:ee:16:48:67:9d:ff:21:e9:be:98:0a:ce:43:63:b5:ba:f0:
6a:74:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:36 2025 by rpki-client