Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: yEyO6v5o43vlgBT2aw1NKz3fD7XsH1LmlyVvjPwTzug=
Subject key identifier: 8E:31:7A:89:5B:4E:72:B4:2E:F5:2E:F6:93:6C:94:BD:7F:52:49:7E
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 01974AB1479CBEBCEAF45B36D132BF0B1260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 04A3
Signing time: Sat 07 Jun 2025 14:00:21 +0000
Manifest this update: Sat 07 Jun 2025 14:00:21 +0000
Manifest next update: Sun 08 Jun 2025 14:00:21 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: 1l/Bape6kKQr7UJ+xT6IFbArgBzn/Z39fWMgHD1EhcU=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:47:9c:be:bc:ea:f4:5b:36:d1:32:bf:0b:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Jun 7 14:00:21 2025 GMT
Not After : Jun 8 14:00:21 2025 GMT
Subject: CN=8e317a895b4e72b42ef52ef6936c94bd7f52497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:28:b2:2a:c0:c5:2d:06:0e:dc:da:03:52:
e9:fe:12:62:32:54:2b:3d:2c:55:d9:da:2e:2e:18:
17:0a:c7:86:37:4e:71:9e:cc:a3:84:78:5a:c7:38:
c3:15:84:f3:7b:1e:56:e9:ef:73:8c:7e:d8:11:f0:
d4:c4:98:af:06:94:c8:67:24:a4:35:ea:c4:11:09:
e1:81:07:32:de:69:c1:42:a1:52:e4:b2:c0:86:c3:
08:e7:fa:00:c9:f8:b5:79:e0:ac:7c:3a:c5:78:fc:
a4:5f:d8:cb:8d:a9:47:2c:34:8f:06:96:85:32:ca:
96:18:65:99:68:d8:21:e7:92:af:2a:c3:49:1a:1d:
f2:2d:b9:38:cf:9b:df:31:94:58:98:7e:ed:54:fa:
41:30:2e:40:65:c6:ae:00:67:8b:8e:85:f7:0f:e3:
5c:c8:bf:a1:da:63:76:bb:8b:4b:17:9d:0e:8d:57:
00:d8:6d:aa:50:ee:b3:68:9d:83:c8:ec:c8:06:d7:
db:c0:c9:c5:15:08:56:2d:a7:00:41:18:79:87:aa:
75:4f:ec:9b:6f:29:18:75:b7:48:b1:96:46:96:c6:
7f:09:d7:34:90:f8:11:7e:6b:48:81:13:72:2e:d8:
95:d1:bc:68:de:42:75:27:91:37:53:4c:6b:01:74:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:7A:89:5B:4E:72:B4:2E:F5:2E:F6:93:6C:94:BD:7F:52:49:7E
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6a:9c:bf:ec:ad:51:43:dd:bf:23:60:50:52:83:c1:f6:82:
44:72:97:05:65:4c:a2:56:dd:b4:36:9c:45:0f:55:f5:58:5f:
18:c6:4e:0b:8e:ba:a5:8a:9c:27:ae:d4:da:90:cc:6e:87:cc:
5a:b4:5b:03:90:0c:32:2e:fd:fe:93:34:6e:01:5b:e4:e7:00:
db:0e:81:9b:18:e3:17:a5:8c:84:64:88:77:dc:52:01:44:e3:
ed:98:e8:80:f9:99:c0:9d:b7:4b:d1:ff:e2:ba:d3:82:34:92:
ca:b2:3a:80:2a:a1:74:44:e2:09:c1:3d:05:8f:5d:e2:58:94:
49:84:5f:0e:43:2e:11:19:c1:fe:86:c8:90:90:38:f6:40:04:
c1:fa:aa:ff:a1:67:d5:00:fc:f1:4e:ae:5e:d1:1d:8e:a0:c7:
38:03:4a:1a:48:33:e6:87:ae:71:44:40:ef:fd:8d:9f:21:45:
0a:fb:dc:86:db:d7:98:19:1d:14:37:23:4f:37:f6:68:39:26:
cf:a4:6f:1a:67:68:44:5f:cf:7f:83:cf:ba:8f:92:61:84:c4:
99:76:3a:99:0b:5a:f4:36:05:b8:ff:55:35:13:ba:5f:42:a2:
4a:cc:be:9f:3a:7d:5d:61:82:65:56:08:08:5c:55:91:5a:26:
19:90:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:01 2025 by rpki-client