Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: sJZ3W2xa10gxpKaejrXUezkbS9xbvcHRXSFJDt5L28Y=
Subject key identifier: 47:B2:27:61:98:27:4A:AF:9E:B8:B2:2F:47:03:F7:68:72:92:86:AE
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01975D934C7D43544BA9AA62FA6771FAD43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1595
Signing time: Wed 11 Jun 2025 06:00:23 +0000
Manifest this update: Wed 11 Jun 2025 06:00:23 +0000
Manifest next update: Thu 12 Jun 2025 06:00:23 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 1p3jELSs1I+GuIdrdSBXmO+BoabXnDJxAsWA5cYJR20=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:4c:7d:43:54:4b:a9:aa:62:fa:67:71:fa:d4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 11 06:00:23 2025 GMT
Not After : Jun 12 06:00:23 2025 GMT
Subject: CN=47b2276198274aaf9eb8b22f4703f768729286ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:13:53:b2:44:a3:65:8c:74:50:2a:17:1b:
d3:57:eb:9c:23:d0:41:26:b6:99:cf:c1:2c:e2:fd:
2c:f2:fe:f8:74:08:b3:4d:7d:03:70:4e:ca:9e:de:
c0:a6:15:ff:21:6a:94:f4:3b:cd:27:6b:6d:8c:77:
af:f6:41:e7:f5:a3:b2:cd:d5:7c:c0:42:df:9e:61:
5b:6f:e5:3f:9e:91:35:4a:22:91:63:bd:d5:ab:68:
31:bb:98:34:95:30:98:be:ca:29:a7:49:f6:96:aa:
fd:48:08:b3:d8:0b:f6:e8:5f:47:2d:c1:b6:b7:94:
f8:91:27:80:55:a8:06:6a:52:d5:e7:47:1a:ca:e8:
55:08:5d:9d:56:0b:53:4c:2a:5b:7c:14:52:32:13:
bc:e3:ae:f4:8b:b4:79:42:2b:e9:ee:c5:4b:21:6f:
a7:f2:21:c9:11:f9:31:91:dd:67:92:41:aa:33:da:
23:fc:80:36:e6:1e:1d:68:d3:7e:6d:21:e3:d4:31:
cb:77:44:1f:f9:da:41:63:7a:b3:8a:31:1f:d6:c0:
ba:11:25:34:fc:c2:d8:33:cb:b3:76:6b:37:cb:c1:
74:ba:51:6b:d1:b4:b3:41:40:83:f0:38:01:21:cb:
60:c3:6d:cf:97:d1:08:6b:35:82:83:8d:b7:b9:00:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:27:61:98:27:4A:AF:9E:B8:B2:2F:47:03:F7:68:72:92:86:AE
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:e9:4c:49:48:cd:2b:86:40:0a:b1:e1:d2:bb:7a:e8:19:
1f:0f:2a:c0:18:c6:b1:0c:a5:0e:b3:74:40:0e:9e:3c:0e:e6:
f6:a1:f8:51:d4:fd:30:57:3e:f9:c8:2d:88:80:20:11:8b:8e:
84:6a:1e:d3:97:b0:9d:3d:3f:96:2c:c5:6c:4d:bc:e1:f6:69:
e0:52:05:a6:fe:89:d1:85:23:91:99:bf:c6:a2:2a:ba:01:c1:
71:f5:8f:c0:1b:0b:9f:15:56:6f:4e:34:d9:b8:43:c0:f0:a8:
63:48:9e:41:bd:c5:a0:60:6f:dc:b0:57:3e:bd:01:70:f7:bd:
e7:4c:a6:6b:c3:1d:3c:e0:50:12:f8:d1:f4:a7:54:ee:fa:b9:
77:9e:cd:16:3d:b8:4e:c5:d6:a9:ba:ff:e7:6a:f8:3a:f2:3e:
9a:ce:95:72:0a:67:fc:a7:38:ff:13:42:e2:18:97:4f:54:87:
c1:ba:28:12:21:b0:f0:89:f7:5b:ed:5a:56:de:3d:1d:bb:21:
38:4f:c9:f2:cd:09:96:30:ed:7e:92:6b:65:76:81:6c:f7:b6:
25:f6:63:ff:9d:d6:02:58:4f:8f:43:11:fa:a4:9e:19:ab:f7:
1f:2e:8f:b7:e1:60:60:9a:55:52:55:bd:f4:69:7e:42:43:d1:
ce:3b:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:12:25 2025 by rpki-client