Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: SeqIbn93zvWK+GYLsmy1m6Zjrr0f9So1Iax+rOnNNaw=
Subject key identifier: 91:E9:42:B3:3E:DC:09:78:C6:72:1B:78:F4:E4:F0:DC:44:12:E1:25
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019757C8805DAED3AAC05B7C1A31E5DD1B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1592
Signing time: Tue 10 Jun 2025 03:00:46 +0000
Manifest this update: Tue 10 Jun 2025 03:00:46 +0000
Manifest next update: Wed 11 Jun 2025 03:00:46 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: qzC+NJjWar+k0tm4gMXGkdrI2zzggdoliRB1iadoT20=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:80:5d:ae:d3:aa:c0:5b:7c:1a:31:e5:dd:1b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 10 03:00:46 2025 GMT
Not After : Jun 11 03:00:46 2025 GMT
Subject: CN=91e942b33edc0978c6721b78f4e4f0dc4412e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:42:9e:a4:9a:a0:08:a9:7a:11:75:f8:e1:
75:1b:77:2c:3a:52:0e:df:75:45:7d:37:97:4d:52:
39:b2:4d:4e:5c:40:21:b2:71:13:db:37:f2:0e:af:
b0:e5:31:dd:c0:11:4c:b7:fe:30:74:d7:9b:ac:3e:
a2:e3:d7:40:87:9b:c2:49:90:75:3b:a4:72:4b:a5:
21:0e:19:98:4f:c3:1c:a3:7a:17:71:87:45:67:6b:
4b:8d:20:dc:62:63:a8:fc:5c:32:96:34:36:89:1b:
31:02:26:9e:d0:b4:ac:4e:52:3f:9c:66:9e:9d:14:
a3:1a:02:f0:37:ab:5c:70:75:59:98:42:f0:21:c8:
ac:0b:41:c6:3a:58:4d:64:b1:cb:57:1f:fa:00:27:
f0:43:c6:47:56:26:82:b5:0e:21:9d:30:cc:8e:2f:
e3:8f:6b:b9:a0:70:b4:dd:97:9d:39:09:02:c5:e8:
99:21:e5:c4:4e:85:80:fd:60:92:90:92:49:fb:24:
50:79:54:68:26:35:41:12:91:1e:b8:b4:56:ab:16:
47:d2:c6:a9:a6:09:c3:e2:40:b3:cc:0f:dd:f9:dc:
0c:39:87:8d:ae:d1:3c:12:93:67:62:80:a4:2b:ad:
a2:d1:59:7e:56:d0:10:68:17:ca:c0:2f:40:0a:be:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:42:B3:3E:DC:09:78:C6:72:1B:78:F4:E4:F0:DC:44:12:E1:25
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c4:b4:10:7a:05:a4:6e:00:47:9b:98:55:46:c4:a6:73:8c:
66:9a:9e:b1:1f:99:a9:15:04:f3:16:40:b1:94:7d:2f:87:15:
99:4f:2c:a1:b9:b9:d3:0e:59:c3:0a:e2:34:07:fa:ce:ae:5b:
97:c8:5d:34:77:9d:f6:50:df:73:e0:f7:14:89:8a:21:b0:f8:
8a:8b:dc:5a:d6:b3:7e:a8:f3:63:8c:f1:d3:f9:3e:e9:73:9c:
3d:70:68:27:08:69:77:88:03:0a:4b:6d:79:c1:1d:a7:dd:aa:
55:5d:86:12:c1:b1:42:bb:b3:21:10:3e:c1:32:1a:58:a4:f1:
8c:18:70:a7:60:f0:5e:aa:58:8b:eb:3a:8f:ae:25:fa:6e:bd:
4c:88:c4:2a:16:a4:e7:00:93:4c:f7:a9:d4:29:97:28:48:d5:
62:1b:39:7c:78:12:af:2d:f5:e4:01:ac:36:3e:10:1c:d9:f5:
db:da:64:8c:75:ba:16:4c:f2:f4:08:57:dd:57:08:21:0a:7e:
58:75:ee:02:98:59:95:60:03:38:d2:f5:c8:82:2c:6d:39:5c:
05:92:46:e9:f7:9c:1c:f5:06:36:d8:f4:29:f2:ec:dc:32:02:
ef:99:d9:20:ae:8b:11:a8:59:a8:31:4b:96:56:ff:08:6d:59:
e7:ec:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:12:36 2025 by rpki-client