Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: Y/ny/mB/2zbcECCTfwKFkzz1FFgrrI3N2xedD1az+R0=
Subject key identifier: 84:E6:07:E9:BF:9A:10:C6:C3:DD:5D:7C:F4:8C:70:20:4C:10:2C:4C
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019750B394C3781B6A2E1D96E3FFA1D76E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 18:00:35 +0000
Manifest this update: Sun 08 Jun 2025 18:00:35 +0000
Manifest next update: Mon 09 Jun 2025 18:00:35 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: Sn7wqDmk4fPBQyDI24ijSlD0WMxRIRVXJ/ipSxkyMlc=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:94:c3:78:1b:6a:2e:1d:96:e3:ff:a1:d7:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jun 8 18:00:35 2025 GMT
Not After : Jun 9 18:00:35 2025 GMT
Subject: CN=84e607e9bf9a10c6c3dd5d7cf48c70204c102c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:83:28:b4:db:71:f1:78:26:8e:31:fd:b5:
69:cb:91:ca:2a:22:d4:40:49:5f:0a:d9:21:a5:c2:
af:19:3d:a7:91:91:c8:ea:ca:20:28:08:84:99:94:
19:1b:60:ab:fc:bd:d9:37:40:7b:ad:58:b3:77:36:
0b:2e:30:d6:3d:c9:d6:8d:8d:f5:b5:a7:67:45:22:
36:3f:51:ec:d4:93:80:b2:91:d7:bf:0f:a1:44:0c:
1e:5e:81:bf:3b:b7:6b:47:db:f5:bc:1d:29:ac:1a:
28:fb:7b:05:d5:27:ea:3d:17:f4:e5:fb:43:03:1f:
39:2e:cd:f4:29:fd:70:6a:2b:4e:99:07:12:65:b6:
f5:28:6d:29:9d:5c:7b:87:7a:57:c5:d5:16:62:4a:
b9:a5:57:39:b2:73:1b:2e:b1:93:f1:d0:fe:41:c2:
67:22:a7:44:8a:49:4b:71:00:7b:f5:b6:dd:ec:40:
a3:38:e1:fd:cd:53:ff:96:84:88:79:ac:0e:ac:5b:
96:d7:2a:c4:11:d2:9a:91:a5:9f:85:19:d3:e2:43:
b0:34:95:57:0e:b8:47:d1:2d:26:03:6d:61:7c:2e:
c6:0a:3a:3c:09:cf:99:b1:a2:c8:25:6f:6c:4b:cd:
67:82:48:7b:61:e0:44:7c:d6:35:f2:0a:3d:63:d6:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:07:E9:BF:9A:10:C6:C3:DD:5D:7C:F4:8C:70:20:4C:10:2C:4C
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b8:31:ce:00:49:ba:86:25:ee:76:19:10:be:bc:09:9c:48:
db:5d:b4:11:6a:dd:a8:d0:b1:f7:21:a2:d1:3c:2a:c9:d7:33:
86:40:5c:6f:0b:96:3d:39:dc:87:48:29:c2:33:2e:98:c2:02:
a5:54:0b:ee:cb:29:f7:ed:6a:47:20:ef:3c:c0:12:10:0c:43:
6a:50:0d:b3:68:62:02:4d:c1:57:21:c1:36:91:fa:f0:fc:91:
ac:9f:80:7f:d0:47:c7:72:2f:22:ed:2f:fc:96:63:8e:40:d6:
fe:3b:88:89:09:19:06:ab:c1:93:3b:23:ac:83:5d:b8:51:ea:
1a:22:e8:19:0d:f5:e7:36:ae:25:1b:ec:a4:32:d7:48:d0:53:
10:39:d0:9b:61:c1:2e:9d:0d:97:ac:ae:a5:cc:51:78:b3:10:
2f:d3:b0:7b:60:e1:e7:0e:8d:65:a9:f6:6e:0b:34:18:71:5d:
b2:73:88:64:8f:a8:08:2f:ca:b7:33:8e:72:cb:5b:2e:7f:93:
8f:07:a0:94:e2:e9:c4:a7:a1:7b:d5:ed:78:af:e2:8b:eb:66:
47:a4:74:44:d3:c7:0e:17:3e:1f:ec:d5:e0:5c:42:f6:20:26:
a1:78:3a:b3:ce:5a:38:57:6a:95:24:e9:32:48:f3:1e:59:f3:
89:fe:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:36:24 2025 by rpki-client