Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: Ht0aJ/m+v5O2ImXKYicUOO74wVDVr6sMwUtXeiDx5cM=
Subject key identifier: 00:68:1C:BD:50:91:18:45:F2:97:7E:D8:C6:D2:82:AC:14:4E:FF:E4
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019748554387C3186D0F414DE9E22324978A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 05E2
Signing time: Sat 07 Jun 2025 03:00:36 +0000
Manifest this update: Sat 07 Jun 2025 03:00:36 +0000
Manifest next update: Sun 08 Jun 2025 03:00:36 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: aI3Gr70T5ZKUCWMJtp41e6IrbFIV3FV5JqP5ARFUXLo=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:43:87:c3:18:6d:0f:41:4d:e9:e2:23:24:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jun 7 03:00:36 2025 GMT
Not After : Jun 8 03:00:36 2025 GMT
Subject: CN=00681cbd50911845f2977ed8c6d282ac144effe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:ba:5f:c3:66:c9:fe:bb:55:34:07:e4:a5:
f7:61:41:73:b5:59:85:51:a0:b8:53:de:89:69:7e:
67:f4:09:88:65:24:2d:61:bb:0c:ab:10:8b:4a:5b:
73:9c:5f:40:31:a6:50:c2:e0:0a:db:d2:8a:60:88:
80:fe:8a:39:85:f0:60:37:31:e7:f3:99:74:3f:c5:
e8:13:5a:b3:6b:8f:08:af:3b:29:b7:ad:53:52:68:
b1:e8:8c:07:b9:2f:57:80:17:12:c9:a3:8b:c6:6e:
90:4b:e9:36:eb:94:4f:8e:a7:f3:90:f4:f2:89:e9:
c8:cd:88:5d:75:46:63:77:27:96:4d:0b:9c:aa:e7:
99:8b:8c:10:5e:c4:bd:f8:5c:1f:dc:92:e6:17:73:
a1:08:5d:0c:6a:96:ca:c1:9b:15:fd:41:76:15:32:
85:b0:20:d9:4b:99:88:bb:75:f0:c4:3e:b6:cc:8a:
2f:88:d9:2a:11:c8:8c:9c:8c:8f:85:07:00:ea:77:
1d:c7:a3:0e:fa:cf:31:53:f7:ba:67:70:b1:8a:3d:
c4:4d:82:86:6c:ff:bc:c1:0e:4f:aa:1f:73:a8:97:
d8:25:fd:6e:35:14:b3:c9:94:5e:37:61:1a:1c:10:
49:06:5c:1a:d5:41:ca:b1:84:93:84:a6:d2:06:cd:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:68:1C:BD:50:91:18:45:F2:97:7E:D8:C6:D2:82:AC:14:4E:FF:E4
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f7:30:5d:65:3f:94:f6:12:6b:ef:2c:f2:17:d4:08:dc:39:
5a:b9:09:cd:9f:de:70:f1:ce:52:66:62:5a:28:29:af:5b:45:
a1:41:d2:40:c6:f1:1b:a1:8d:a2:aa:a7:3e:79:67:d6:2a:2a:
99:43:d3:b3:bb:36:9f:5d:f0:8c:d5:2f:df:e3:c9:32:02:09:
19:3d:e4:4e:f0:8d:d6:11:55:c6:3a:54:f0:18:4b:a0:aa:45:
34:d2:42:36:7b:b8:67:e9:53:6d:92:8c:b4:69:f6:76:9d:a1:
92:99:de:55:4d:0b:b3:a9:09:74:06:2f:96:b3:f0:f6:3d:ef:
6a:bd:f7:86:47:0a:1c:72:e0:e2:90:40:2c:51:19:22:18:7d:
70:87:53:46:ae:54:19:ab:02:d7:45:31:69:75:ad:27:bf:9d:
18:65:28:f7:a7:b6:8e:71:36:1e:6c:09:50:21:f6:ec:b1:35:
3d:72:c7:78:10:ce:8c:51:df:1b:1b:5f:9b:1b:b4:9a:d8:02:
d6:25:c2:4e:37:b5:b2:f9:03:c7:08:e7:d2:92:11:4f:06:95:
88:5b:0f:05:15:fd:e3:3d:74:da:e0:89:bc:2c:ed:96:59:e6:
0e:79:28:28:64:15:76:55:1b:44:a6:37:4f:96:39:ff:43:73:
d1:39:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:29 2025 by rpki-client