Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier: 8IeEFI/lWqvaLpgK4R7uJSmiue6QRZVxLtdPTHb30iY=
Subject key identifier: 1E:68:89:3B:28:6C:D0:31:05:CA:95:C3:8A:7D:B1:3A:90:B9:E2:0E
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 01976CCFDB0D113F68DFA3AB761D283B7E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 05:00:50 +0000
Manifest this update: Sat 14 Jun 2025 05:00:50 +0000
Manifest next update: Sun 15 Jun 2025 05:00:50 +0000
Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: NtfqEMtGaoUalHwr/tNnvMXXq4+36y4Z+vaxeml1xY0=)
2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
4: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
5: Tuxvba9WYfbnEvHd3kzqapBEZ_Y.roa (hash: k++irbF5tx+uarYSpIOQsyD8NQHcKQnnHY3y6c8vNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:db:0d:11:3f:68:df:a3:ab:76:1d:28:3b:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jun 14 05:00:50 2025 GMT
Not After : Jun 15 05:00:50 2025 GMT
Subject: CN=1e68893b286cd03105ca95c38a7db13a90b9e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:d8:ea:65:9f:d0:1a:da:4a:bb:e8:40:2e:
0a:e5:a2:cd:b1:04:c5:84:54:59:9f:5c:13:3b:3a:
88:3c:e4:bd:9d:f2:26:2f:93:3e:9e:8d:01:c5:3e:
75:8e:f1:6d:01:8b:d5:d8:69:5f:97:44:fe:92:37:
a5:7b:56:8c:7f:bd:fc:79:dc:70:ff:11:3b:43:23:
99:d6:38:d6:a1:b0:87:4e:5c:a6:9d:29:02:c6:35:
50:6f:6d:95:cd:7e:29:10:f8:71:d5:95:a4:d6:83:
8d:1f:a6:6c:1c:e0:dc:d1:fa:54:75:af:93:d1:29:
67:63:a7:51:6f:b4:ef:a0:8b:d1:d9:c7:f7:e3:a4:
92:f4:ea:58:37:b7:44:6b:73:6b:4e:cf:98:f1:bd:
e1:cc:96:e3:da:8b:85:ee:d7:4a:c9:77:25:9f:54:
56:96:25:e9:ea:1b:3c:8a:f2:08:34:1d:d0:d3:7f:
c6:34:8b:18:7f:a0:a3:02:49:44:bd:cc:23:07:1b:
fb:19:71:2c:04:50:7f:a8:64:f8:59:e5:5c:6f:1e:
f6:43:d3:c7:57:4c:31:50:af:ae:09:46:9a:5a:3d:
8d:85:04:ce:fe:ed:65:c5:b2:c6:7d:65:ca:f1:2b:
a0:01:18:57:da:34:5e:94:d6:e0:76:7d:10:4b:61:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:68:89:3B:28:6C:D0:31:05:CA:95:C3:8A:7D:B1:3A:90:B9:E2:0E
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0f:45:19:85:93:d9:be:c7:2b:62:97:d4:69:29:a8:dd:e5:
97:80:1d:20:2d:98:2f:58:85:16:24:ad:51:29:4e:09:a1:d4:
f6:88:9b:1e:13:00:85:24:fd:c6:28:7c:93:b7:d3:4e:7e:a0:
70:d5:54:e7:2b:2f:d7:8a:eb:73:ba:77:7f:13:11:78:84:a6:
14:83:72:a7:8b:7b:ad:b6:8e:3a:44:95:ad:0f:dd:ad:c7:30:
08:ab:84:3c:c5:7f:86:73:f1:33:1c:77:f8:b1:e6:c7:d9:3c:
2e:c1:63:50:bc:f0:4a:3d:9e:7f:83:da:bd:97:55:44:d5:0e:
4f:ec:39:28:9e:0f:6b:3f:1b:68:6c:40:3a:02:8a:98:cb:93:
fe:47:e7:e0:ea:8c:b8:da:82:95:99:dd:0f:ef:00:5a:7a:bf:
94:64:54:c1:88:64:c4:57:bb:c9:0a:33:0d:f9:8d:26:57:a0:
94:10:88:29:7d:98:59:fc:d1:91:9c:e7:b4:b3:f9:17:f6:e7:
f1:fa:73:45:22:19:06:58:90:c7:d5:be:31:15:d3:48:d5:4a:
72:e7:7d:1a:8f:da:0d:45:32:0c:b0:0c:5a:65:c6:e9:07:36:
be:9a:38:04:a3:9c:49:b1:b5:0b:91:9f:c3:29:95:61:f9:ff:
48:bd:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:48 2025 by rpki-client