Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier: kFyOf8cpRhqoLPmWtbV83fyO4EKtunhlxVViSOZH4dE=
Subject key identifier: B1:BD:C3:33:ED:36:7E:A3:6D:54:41:43:59:11:15:3F:1A:9D:98:58
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 019755A2FF155406F1A2909F4D0AA2FD56B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number: 158A
Signing time: Mon 09 Jun 2025 17:00:34 +0000
Manifest this update: Mon 09 Jun 2025 17:00:34 +0000
Manifest next update: Tue 10 Jun 2025 17:00:34 +0000
Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: ON+FkiyMP0fqpczlYwM0OneJwQIRbUb+dcpin4NAy8U=)
2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
4: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
5: Tuxvba9WYfbnEvHd3kzqapBEZ_Y.roa (hash: k++irbF5tx+uarYSpIOQsyD8NQHcKQnnHY3y6c8vNEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:ff:15:54:06:f1:a2:90:9f:4d:0a:a2:fd:56:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jun 9 17:00:34 2025 GMT
Not After : Jun 10 17:00:34 2025 GMT
Subject: CN=b1bdc333ed367ea36d5441435911153f1a9d9858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:af:8a:75:6e:bb:3f:95:ab:ac:2c:2c:4f:
e8:58:a6:a8:f4:eb:0b:8c:81:d9:9a:4f:96:d4:df:
4a:d0:02:2e:de:a7:19:c0:10:19:f4:be:2b:65:f1:
e9:41:03:83:fe:be:07:62:01:da:db:e1:b1:20:f3:
1d:5d:f9:49:82:bc:43:e6:0c:f1:e5:0b:2e:86:5d:
b5:5b:b3:90:88:e2:6f:eb:8c:b1:f1:7f:23:cc:a6:
2c:3d:88:9f:a6:aa:a6:da:9b:aa:29:f0:57:bb:33:
bc:7c:a4:b6:21:15:9d:38:d2:d9:6a:07:7d:24:6f:
8c:4f:04:68:ee:57:ac:6b:d7:72:87:6f:35:08:af:
53:c9:63:f0:15:0c:d1:50:8d:0e:a3:1f:97:f3:b8:
05:fa:9d:3e:8b:89:a4:f3:58:5a:1f:25:48:7d:a0:
9d:a7:77:20:e9:06:76:f1:fc:29:2e:79:07:1d:90:
f3:c3:b6:5a:ad:4f:c3:a8:32:98:ad:16:27:d7:47:
d2:86:5f:62:0f:ac:49:bf:87:76:fa:16:60:74:f1:
d1:c2:84:e5:fd:47:9a:b7:b1:d5:96:38:e5:f3:90:
05:18:5a:7a:60:d8:fd:ff:d6:fe:5d:8e:7c:9b:63:
0c:03:22:08:75:07:f3:de:9f:ab:e5:f5:22:de:26:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:C3:33:ED:36:7E:A3:6D:54:41:43:59:11:15:3F:1A:9D:98:58
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:25:32:ed:6b:ca:a2:07:9c:1e:91:4a:06:2c:7f:ce:ad:b0:
e3:86:56:74:7e:3b:64:3b:bb:6a:34:a0:85:84:c8:36:1e:e2:
ec:7d:29:d8:2c:cf:48:fa:05:28:19:32:8c:d7:d6:1e:17:5d:
91:6c:0a:09:49:90:ac:49:82:d4:57:d2:e6:22:2a:e8:f7:f1:
9e:f2:d6:ed:5a:6d:21:4e:a2:dc:14:4f:06:af:b2:88:4c:2a:
f2:5b:b2:5c:76:a6:24:4c:7d:e7:e2:93:d6:00:a5:09:21:2c:
b4:aa:51:d2:b6:b2:14:f9:f2:6c:3c:0e:38:83:2d:32:81:af:
55:80:3e:20:08:88:e3:c0:40:77:ce:4e:7e:4f:7b:6e:95:42:
80:f9:8e:d7:68:52:33:70:51:71:8a:d2:ef:2e:b5:ef:55:a3:
9c:db:6b:78:55:38:52:25:02:dd:9d:31:f5:28:9b:d7:cf:fa:
00:34:98:47:14:9e:56:ff:d3:e0:ae:2a:24:25:07:92:25:30:
27:d8:36:f1:e3:6b:f6:bc:d7:f8:c5:e9:7c:e4:53:db:d1:5f:
03:52:25:c0:be:64:f3:f9:bb:71:9a:e6:7b:94:f8:1b:c5:15:
e3:b5:77:48:3e:04:4f:07:3c:b0:03:26:40:0a:c2:c8:fd:c8:
74:c2:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:43:52 2025 by rpki-client