Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: GbsVddGn8DPOjYQrp4zePN1N4V7c5B7PxcnqczRvs+4=
Subject key identifier: A3:29:8F:1A:0F:37:99:2C:A9:46:34:22:17:F3:DB:71:84:A6:2A:48
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 019746D4AF53F8C53E7C117EAF7B9008B24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 1262
Signing time: Fri 06 Jun 2025 20:00:32 +0000
Manifest this update: Fri 06 Jun 2025 20:00:32 +0000
Manifest next update: Sat 07 Jun 2025 20:00:32 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: KFxga9rirFcxWlyHzeIQt6ionf7fou2guh4DlHZ7pzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:af:53:f8:c5:3e:7c:11:7e:af:7b:90:08:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jun 6 20:00:32 2025 GMT
Not After : Jun 7 20:00:32 2025 GMT
Subject: CN=a3298f1a0f37992ca946342217f3db7184a62a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:b5:2f:e7:81:42:fa:2a:c6:db:6c:6a:a5:
d3:0c:de:ed:c4:96:54:d9:80:c2:a6:3d:14:74:4c:
3e:f4:c0:17:44:22:c4:b8:d4:50:d2:06:b4:21:94:
2c:d2:98:97:88:59:51:e7:3d:28:5a:d0:cc:5b:da:
e7:52:03:ad:a7:2c:1f:41:b4:aa:77:83:5b:04:72:
3a:80:47:7c:f0:c9:5e:4b:dd:13:9c:00:f5:d6:a4:
e7:7e:d2:98:7e:a5:25:dd:42:40:99:5b:7f:f3:57:
ce:75:b0:cb:4f:79:43:c3:61:7a:ca:d4:dd:72:4f:
f2:3b:26:42:86:f5:87:7f:39:32:8f:ab:bf:03:c2:
8d:79:8c:33:39:c5:a6:e1:43:ce:c4:fa:81:ce:88:
db:f9:ac:22:38:28:63:76:86:21:6d:6a:92:03:d9:
bf:a7:ae:22:c1:c6:62:9f:3a:42:da:4e:59:4d:28:
76:d5:19:4f:5c:cc:2a:10:fe:76:81:81:44:52:75:
6e:21:f7:f1:33:18:c0:ba:6e:5c:8d:6b:16:e2:95:
05:ad:95:43:e8:50:77:f3:31:c6:43:8a:b0:9d:6d:
85:b8:48:d3:fd:ec:26:75:99:a7:e4:0b:5f:d8:5d:
ee:41:53:1f:c5:f1:de:8a:83:c8:26:6b:7a:ed:91:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:8F:1A:0F:37:99:2C:A9:46:34:22:17:F3:DB:71:84:A6:2A:48
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:17:ea:5a:eb:8a:dc:de:c1:c1:13:a4:14:42:8a:79:0c:
71:94:e5:2f:76:9d:97:65:1e:e4:b4:19:a8:e5:4b:05:5d:e4:
73:28:49:51:f3:5e:7f:58:5c:ab:59:76:88:6d:2d:8b:74:33:
9b:8f:1a:cc:e8:c1:40:80:f7:48:72:33:93:dc:b2:83:67:4c:
a7:0b:d8:ef:81:84:12:e9:44:27:38:dc:83:68:9b:4a:7c:fa:
8d:2f:dd:ba:bf:13:b6:58:59:b8:c0:b5:11:68:32:7f:36:40:
74:07:59:7c:36:79:82:84:f8:b1:62:9d:f1:3f:85:d4:50:76:
5f:dd:31:cc:ce:3c:88:8d:ad:da:d1:62:78:1b:0f:17:ce:18:
10:41:fb:12:c9:d0:a6:cd:71:68:66:b5:7f:f2:e7:b2:81:55:
c3:6b:65:07:d4:19:f2:bd:a2:53:ad:e0:76:64:96:09:c0:78:
91:41:58:c2:6f:fd:fd:c7:39:5f:01:25:56:65:16:90:6b:d2:
86:8f:02:ad:39:c1:93:cb:72:de:1b:ce:c5:93:9b:ae:0f:5b:
e4:5e:42:62:2b:54:b5:2e:de:95:08:a0:e2:1a:ad:5d:2f:37:
13:cc:42:ed:01:27:1a:9f:bf:41:06:c4:39:70:94:de:bb:f4:
88:fe:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:21 2025 by rpki-client