Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: qGSbi9chy2kOaXI3VkXDC8JXj+fMzalsmSVAXKBE970=
Subject key identifier: 04:41:F8:88:E2:31:D0:C1:B1:4E:A5:AD:39:BA:E3:12:BE:2F:F7:AC
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 01974BC4413A9C1B702C79E06F289F6DFF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 19:00:42 +0000
Manifest this update: Sat 07 Jun 2025 19:00:42 +0000
Manifest next update: Sun 08 Jun 2025 19:00:42 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: 4k3W68LmRve3Ea6GTVH2b1UegAcECrZsDNERX8MZqMc=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:41:3a:9c:1b:70:2c:79:e0:6f:28:9f:6d:ff:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jun 7 19:00:42 2025 GMT
Not After : Jun 8 19:00:42 2025 GMT
Subject: CN=0441f888e231d0c1b14ea5ad39bae312be2ff7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:08:c9:b5:94:13:69:fa:2f:ad:ff:aa:8e:
02:27:d9:aa:53:e1:88:9c:59:b1:54:e1:da:34:5f:
42:2b:cb:32:20:e3:00:d7:31:79:3e:ac:b6:66:f7:
dc:2a:af:22:fa:ae:a7:a9:19:aa:76:0e:16:35:d9:
0f:8f:70:bf:6b:23:07:83:35:2a:8a:c9:16:c9:88:
cb:33:3e:4d:35:6c:5b:70:01:47:1e:89:db:54:8f:
b8:28:50:ed:9a:7f:ba:20:87:be:c2:cf:f4:72:31:
da:9e:d4:c6:76:69:59:a8:19:04:cf:19:ce:75:c4:
91:75:16:b8:50:25:85:42:f2:84:dc:ca:b9:10:d1:
88:f6:6d:af:ae:e4:58:4d:65:1a:d5:8f:50:22:4f:
e2:31:9b:1d:8e:1b:c0:61:b1:9f:1c:a0:f9:69:2e:
f4:71:e5:ba:fb:a4:95:ef:47:25:c1:8e:25:35:b6:
e1:fd:58:1d:36:e5:5d:98:db:26:d4:ac:37:1f:4e:
01:7d:0b:11:42:d3:89:59:10:8c:a3:28:0f:69:60:
8b:16:fb:d4:8a:6c:25:cb:e8:39:be:ea:60:56:a2:
bd:f4:2e:63:61:3f:aa:8d:fa:7a:5f:cb:63:d1:8d:
0c:b8:59:3b:cf:88:8b:74:e8:b3:77:d6:ef:43:19:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:F8:88:E2:31:D0:C1:B1:4E:A5:AD:39:BA:E3:12:BE:2F:F7:AC
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:58:a9:81:4b:6b:4c:0b:2f:f8:20:2f:fd:49:08:5b:b5:
1f:4f:66:67:2c:de:23:7c:9d:7f:b3:bf:6d:ce:dc:a8:42:02:
12:e7:79:45:6c:10:c8:61:6f:11:c0:04:11:18:08:63:95:77:
d9:2a:45:b1:a3:89:23:07:da:25:18:c8:e3:98:7c:88:50:00:
cb:42:4c:e6:af:95:da:bc:dc:45:22:1b:0a:c3:a3:70:68:03:
6a:1a:f5:0f:5a:af:2c:ae:31:b5:c8:fd:fd:c7:78:64:4d:b5:
0b:9f:f8:64:46:c9:55:80:bc:04:3e:4c:ea:b3:e0:92:47:4b:
06:68:af:8e:37:85:53:d8:56:29:85:bd:42:5b:39:1e:9b:12:
51:9a:88:6f:33:ae:01:1e:f1:bf:08:ba:2d:c0:19:a4:fa:46:
99:cc:21:f4:d5:57:eb:09:ce:f2:07:d8:67:9b:b2:d9:17:61:
08:37:09:71:cc:52:19:d1:f9:57:80:d7:77:9f:ba:b2:3e:ac:
20:35:b8:fd:30:97:01:af:2b:42:ce:de:67:3d:85:29:18:4a:
d3:db:a0:c0:96:e0:85:a1:8e:0d:fe:d6:2e:24:5f:25:10:73:
ad:f9:d7:ee:b3:47:14:db:5f:30:14:d4:e1:cb:e4:ef:31:02:
3d:09:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:26:43 2025 by rpki-client