Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: S4IYMH+13zdOzeMrXixQCY01ohvtO5rX3MY4ofazN/E=
Subject key identifier: 34:4C:0F:77:9E:22:1E:08:E8:91:F4:99:49:24:DA:12:AA:57:3C:E4
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01976929E598F12CBBC7C8A4042259878C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 159B
Signing time: Fri 13 Jun 2025 12:00:42 +0000
Manifest this update: Fri 13 Jun 2025 12:00:42 +0000
Manifest next update: Sat 14 Jun 2025 12:00:42 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: Z7JbnRUkmkyZFitHJt59b2rJ2tl/Pj+8upqySxS7a8s=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e5:98:f1:2c:bb:c7:c8:a4:04:22:59:87:8c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 13 12:00:42 2025 GMT
Not After : Jun 14 12:00:42 2025 GMT
Subject: CN=344c0f779e221e08e891f4994924da12aa573ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:65:26:f8:9a:b0:cc:21:4f:e5:f2:14:56:
36:77:0d:0e:92:17:a4:2f:03:22:a7:6f:b5:81:3f:
47:53:74:6c:25:4a:e0:96:ab:54:eb:c0:04:20:30:
a7:27:67:c8:71:cc:41:d7:8b:26:8d:cb:54:35:c9:
86:b7:47:5c:e1:7d:90:ac:96:6b:b9:04:c9:27:03:
f8:47:c6:56:0e:85:09:56:3e:ed:62:88:ca:e5:26:
41:a6:c1:e0:e0:4a:6f:d9:6d:f9:94:99:9b:e2:2a:
24:91:d3:c3:56:b4:19:0d:4f:9f:54:3a:0f:56:07:
98:19:48:d4:85:b2:9a:95:fb:44:04:87:01:b9:23:
02:b0:c6:22:ce:f1:0a:f0:97:86:9f:8a:40:bd:8e:
3d:33:76:fb:38:3c:88:4e:63:29:00:4b:fb:76:3a:
f3:69:ae:25:8f:c9:90:34:0d:2f:3a:7d:5d:aa:09:
10:4e:f9:f6:6e:fd:34:a9:80:8c:46:94:ae:d4:5b:
01:fd:48:c9:e2:58:78:36:04:be:7b:35:e4:39:67:
d5:95:82:ea:f9:6e:01:24:bd:a0:b6:5b:8e:87:6f:
80:24:90:8a:1d:1f:7a:7b:6b:51:79:aa:a9:93:63:
5a:f8:71:d6:bf:0a:80:b0:c0:eb:11:f8:ca:4d:60:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:0F:77:9E:22:1E:08:E8:91:F4:99:49:24:DA:12:AA:57:3C:E4
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c6:00:91:4a:1b:8d:85:16:e8:2d:5c:d0:ed:6c:f1:a2:79:
83:0f:00:41:98:ae:85:c1:e6:c6:a3:97:e4:3a:9f:c7:13:56:
05:75:98:44:55:10:ee:a7:54:8c:f1:24:bd:4b:b1:b5:cb:00:
e5:a2:97:de:d0:49:4c:be:43:c9:68:79:2e:78:21:31:e5:db:
33:b3:cf:1b:76:ad:02:80:54:34:11:b9:23:4c:c5:5f:d7:5a:
98:5e:13:ef:b0:7a:fd:1b:f4:d9:ce:b3:ac:8f:8d:84:3c:f4:
b8:1f:31:08:4d:20:b5:ef:3f:79:2f:eb:86:1b:35:cf:01:99:
e0:5c:e6:de:df:11:49:54:ca:21:de:99:c7:30:5d:15:d6:86:
83:94:9f:3c:b8:07:da:45:fe:68:cf:f5:7e:d3:31:ae:d1:08:
22:c8:d2:50:d7:c6:9a:eb:0b:0e:75:8f:d6:3f:26:8b:d8:91:
2d:eb:cb:fb:e0:6c:64:9e:d3:89:61:89:3b:b9:60:72:35:ea:
78:6c:0b:6f:f7:5e:21:90:58:ce:b9:50:1d:46:cd:b5:92:bb:
01:ca:5f:9b:5b:60:87:c2:b3:6a:a9:90:6d:3f:7b:01:5e:19:
5f:9e:df:4d:51:1d:3d:6b:e9:68:8a:36:33:fa:c4:4f:6f:2e:
48:4a:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:31:29 2025 by rpki-client