Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: MEuwoxPeU9wO+RKzd7bU78Iiu+RVA/oBORYfS16TpJU=
Subject key identifier: F1:75:5F:B1:91:A6:46:05:A7:A1:55:31:97:F3:C6:80:7A:20:0F:1B
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019750EAED100FED81794160F707CCD0F19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: A4
Signing time: Sun 08 Jun 2025 19:01:02 +0000
Manifest this update: Sun 08 Jun 2025 19:01:02 +0000
Manifest next update: Mon 09 Jun 2025 19:01:02 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: clDEpBAZ8gumt5+K+aV6tov3BO9OLq0E9YoC5dteUG0=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:ed:10:0f:ed:81:79:41:60:f7:07:cc:d0:f1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Jun 8 19:01:02 2025 GMT
Not After : Jun 9 19:01:02 2025 GMT
Subject: CN=f1755fb191a64605a7a1553197f3c6807a200f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:5a:07:a8:92:06:25:d7:57:fe:1d:3b:f1:
79:0f:e2:a4:ad:8e:ef:1f:d3:ab:da:1b:44:06:c5:
cc:3b:bb:6a:e8:d1:f4:5c:b2:c1:9a:23:d4:e5:a9:
a1:d4:9a:7f:e1:a9:28:88:6a:86:f1:8d:7b:71:92:
96:f6:70:f4:fd:82:2b:07:1b:42:2d:06:f9:5a:f3:
3d:4f:c8:53:12:c5:75:00:fb:72:7c:6e:f9:d0:df:
25:6d:ed:07:0c:a4:78:68:da:7c:c8:0e:97:1a:74:
6f:6b:69:57:3e:c6:ef:63:8b:38:da:61:1d:62:96:
45:7f:5b:b2:bb:f5:65:aa:69:ba:03:0a:53:42:e3:
46:61:c6:d5:8d:ac:eb:92:0e:9f:ae:94:25:41:51:
21:52:cc:08:09:b7:20:a3:c4:c7:1b:d3:f9:46:e0:
20:3a:27:af:49:95:d2:b9:4f:6e:60:ab:23:88:a2:
1a:b5:86:b0:ab:af:94:72:a2:6c:b7:4f:f4:03:b0:
61:b1:45:ad:e7:71:05:8a:81:0d:ff:43:ad:35:12:
c2:d7:43:93:bc:36:fa:c1:d1:65:fb:26:ef:2d:73:
1f:00:4a:82:f1:91:1f:75:7b:ae:34:e1:bd:0c:19:
a3:30:7c:fc:c1:ac:58:61:90:e6:ca:8b:a6:51:03:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:5F:B1:91:A6:46:05:A7:A1:55:31:97:F3:C6:80:7A:20:0F:1B
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:02:62:e2:b0:d1:d9:b1:87:d8:0f:bb:97:b6:5b:89:71:
5b:d9:cb:99:d3:8b:c0:41:b7:7d:76:b0:cc:72:01:61:46:cc:
f4:28:a7:c9:6a:e7:a4:50:c6:41:4b:42:b8:9d:43:96:db:18:
83:d0:4d:a4:a8:75:5a:9a:8d:15:51:f7:c6:9b:7b:dc:8b:5a:
cf:59:f2:45:3c:fb:53:cf:e0:8f:bf:00:1c:d0:9e:69:2c:dc:
f5:fb:17:75:11:28:21:33:8a:c8:fe:78:4a:19:ff:f8:26:45:
03:8a:b2:97:e6:09:01:f5:a1:1b:0a:ef:ac:36:f1:08:9c:74:
17:9a:0c:b0:59:e7:70:00:0e:d5:62:0e:9c:1f:b9:73:ce:7d:
2f:89:c0:3a:01:49:e8:02:6f:23:11:5b:29:58:5b:8a:7c:d0:
c6:0d:40:11:57:2d:18:4e:c7:97:a9:40:29:29:f0:e3:25:5f:
10:e4:a1:95:93:77:75:90:25:31:94:0e:c4:4b:03:b0:5c:3f:
a9:e9:53:4c:a5:a9:47:e4:63:6e:98:d7:0a:c3:de:a8:e1:c0:
fb:93:9e:1a:5c:b1:94:e2:c4:21:a4:4d:55:e5:90:2f:32:67:
33:5e:a2:87:c4:8d:d6:c8:52:fc:87:08:22:db:48:ea:e5:17:
82:bf:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:20:54 2025 by rpki-client