Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: 65k7+4F+iSrfE/0xGkphrs4nQAO8Ctb9taucN/hSZQE=
Subject key identifier: 2A:D8:80:B8:8C:01:08:DE:21:82:CC:90:E7:6D:6B:78:49:31:42:60
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019753EBB2E9B4A8D14BCD236C02DD263B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1590
Signing time: Mon 09 Jun 2025 09:00:45 +0000
Manifest this update: Mon 09 Jun 2025 09:00:45 +0000
Manifest next update: Tue 10 Jun 2025 09:00:45 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: vLMSAvOOCzx0vvHku2IAexMYKHdLbuNl7JPrlymjq5w=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:b2:e9:b4:a8:d1:4b:cd:23:6c:02:dd:26:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jun 9 09:00:45 2025 GMT
Not After : Jun 10 09:00:45 2025 GMT
Subject: CN=2ad880b88c0108de2182cc90e76d6b7849314260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:34:3b:54:69:cd:aa:06:92:8e:43:8f:8a:
16:b2:d9:f6:ca:23:73:cb:ec:d2:bd:0b:84:53:93:
f9:86:cf:a9:96:06:f3:ab:8e:51:37:2d:67:9c:84:
36:4a:5d:7e:fa:76:4c:af:0a:98:f4:f8:aa:6e:6f:
32:f6:33:d7:62:d6:1d:ab:f4:ce:ec:0a:7b:4f:43:
f2:95:5c:39:89:84:b1:e6:f0:4b:41:7f:0f:2b:9d:
be:6f:83:2b:cd:54:7d:97:58:6a:63:e2:c1:04:fb:
ba:49:41:55:bb:9b:41:e3:8d:5f:c2:62:c1:00:1a:
80:fe:65:91:53:dd:0d:94:69:79:31:8f:16:0a:e9:
1e:7f:05:e0:d6:8a:a4:23:b8:9d:c4:50:39:b1:31:
cc:f8:a3:2d:7c:f1:23:18:91:e7:e5:c1:c6:33:5c:
3d:c4:62:30:8a:47:67:22:42:fd:be:6c:f6:57:a8:
0a:c6:f5:95:96:18:97:54:59:0c:82:20:42:8f:7e:
b3:2e:f9:01:45:74:b2:f0:c9:e3:7b:26:04:44:be:
d1:4f:ef:d2:34:16:d6:bf:c7:ad:64:6f:2a:cf:3f:
7c:23:e7:5e:c7:1d:01:5c:4a:39:1c:58:aa:f4:96:
7c:e9:e4:72:d1:7e:e8:d0:55:9a:0a:8f:1e:45:c7:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:80:B8:8C:01:08:DE:21:82:CC:90:E7:6D:6B:78:49:31:42:60
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a0:57:29:d6:95:cc:21:21:3c:e3:ba:ba:be:77:80:f2:29:
8d:69:3a:3c:0f:75:53:21:74:6c:e5:92:6b:ce:1e:f9:b4:91:
df:a8:85:93:81:15:d1:89:f1:61:03:35:31:8b:f0:dc:db:b8:
1a:2d:75:5a:e4:11:ef:65:47:9d:f4:a6:c0:ac:64:50:d3:19:
15:ca:84:74:76:42:0b:50:8e:82:a3:40:0d:7c:05:a2:7f:f5:
33:f4:e2:17:07:e7:fb:da:b8:e7:a1:b4:21:7b:b6:73:7c:3c:
7c:dd:39:37:02:e1:1f:2a:b0:0b:04:05:07:16:4e:96:e0:fa:
b8:95:1d:ac:8a:24:fa:4a:43:23:c2:18:ad:b7:de:55:be:04:
d8:dd:b0:db:f1:bd:0f:0c:8c:39:c4:36:08:71:55:6b:ea:2d:
54:b5:6e:63:ea:07:5f:da:f2:a0:26:5d:31:3d:8c:84:4c:4a:
92:e4:c3:40:29:a6:9a:ef:a8:33:8b:0d:b6:e6:16:6a:11:c0:
85:c2:70:57:fa:21:03:0a:52:d8:5f:18:53:3b:d3:ba:e4:c3:
a3:55:d7:be:5c:54:5b:2e:54:ca:c5:5b:fa:9d:11:08:69:69:
d1:0f:fa:3c:dd:e2:2a:ad:36:39:29:37:47:8b:99:5b:13:ca:
b9:c2:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:41:18 2025 by rpki-client