Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: nN/GLUsHk70KIRLHX/GoNVljfZSOKd9uHT7Y/tWqEZ0=
Subject key identifier: EF:D0:64:4A:F6:F1:8D:DF:82:96:83:18:C3:1D:43:D7:18:01:21:A8
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 0197462FF5DAFC7BFC22FE11A8103AC9AD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 17:00:37 +0000
Manifest this update: Fri 06 Jun 2025 17:00:37 +0000
Manifest next update: Sat 07 Jun 2025 17:00:37 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: NC+DMZEFHKNv6AlGHvlakKfGEhxgMu6JQlD8CEvbBxE=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:f5:da:fc:7b:fc:22:fe:11:a8:10:3a:c9:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jun 6 17:00:37 2025 GMT
Not After : Jun 7 17:00:37 2025 GMT
Subject: CN=efd0644af6f18ddf82968318c31d43d7180121a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:64:b3:67:9d:53:08:c9:ac:a6:1f:43:a1:
f4:67:ad:2f:08:69:93:5e:6a:e0:83:a2:00:65:49:
e1:e6:35:b0:d4:d2:6c:7e:73:3b:cf:2c:74:36:3f:
12:4e:46:eb:4a:1d:7a:a4:2d:34:3f:ad:3c:02:1c:
01:d4:68:f9:1f:92:04:9f:2e:f1:e8:51:24:8c:28:
ff:7b:57:da:c9:b6:42:9c:13:9a:ea:eb:31:a7:68:
88:89:b0:a0:98:89:84:6a:ee:72:d0:a3:c8:28:36:
cb:c0:06:41:9e:91:51:e9:d8:93:66:f6:16:f4:be:
31:0f:77:37:10:7a:00:16:05:b4:ec:51:a2:7c:93:
a2:67:bb:98:46:c5:4b:3c:32:66:c6:74:00:d3:24:
a7:69:5e:1f:54:be:bb:34:44:99:88:9a:aa:53:35:
1a:9f:22:72:af:57:ad:c5:2f:80:74:8b:19:88:ee:
21:2d:82:ac:f8:84:a4:d1:77:3f:5e:b2:1a:46:44:
62:45:39:0a:db:db:be:54:71:1e:2d:1d:75:03:98:
b4:3e:67:96:24:23:37:94:75:2b:fa:35:f3:92:e7:
b9:1b:f1:e2:d1:60:7a:e1:64:72:37:66:56:08:83:
38:2a:90:83:88:54:00:73:28:69:5d:05:1d:a4:d1:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:64:4A:F6:F1:8D:DF:82:96:83:18:C3:1D:43:D7:18:01:21:A8
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dc:ed:2d:36:5a:24:5d:db:af:02:6a:8d:41:a3:b3:2e:6b:
4f:19:e7:20:50:fa:72:15:7d:09:82:07:0a:67:1e:e1:13:52:
b5:51:75:41:83:07:08:24:ae:c8:12:f0:8c:6d:c6:f5:d7:21:
df:cb:ca:b6:bb:08:25:1a:ce:71:c1:f5:9e:4c:4f:84:da:ee:
75:06:16:51:e4:e6:4a:d6:c2:6a:04:d0:4a:62:83:15:f2:1a:
25:60:f1:e3:05:8a:d5:c4:d9:bd:d2:2a:51:2a:f7:a2:b8:d5:
41:ad:f8:6c:94:f3:73:2a:05:7d:5e:d8:bf:cf:50:c0:fa:8a:
29:66:3f:8f:34:50:db:a7:98:8d:51:cc:23:d9:0b:45:fc:2b:
96:f4:fe:b4:8c:c2:17:b3:48:68:e9:e0:1a:2e:a6:c3:b7:59:
dc:f8:57:45:21:dc:28:18:09:60:90:0b:57:eb:d9:81:22:75:
43:c0:16:bb:1f:8f:aa:90:72:fe:26:5c:32:fc:49:3a:09:67:
a9:df:e6:bc:b7:63:1f:d1:76:3d:27:85:47:bf:0a:0f:bb:f7:
84:b4:45:d2:0d:b8:35:85:9d:7f:74:48:42:bc:ca:dd:05:16:
0d:66:e6:e8:d1:8d:6b:8c:80:67:9e:78:d3:9a:fd:82:f6:8f:
81:6d:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:12 2025 by rpki-client