Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: ZHW87V862QXJdlXjHkTlomwk8HPpAmDw4BGWRO7ua7s=
Subject key identifier: EC:B0:50:54:73:3C:6C:1E:C0:53:CA:78:29:F4:CE:FB:46:C0:EE:8F
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 019755D9D526D72435CA103B3504470C9679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 68
Signing time: Mon 09 Jun 2025 18:00:28 +0000
Manifest this update: Mon 09 Jun 2025 18:00:28 +0000
Manifest next update: Tue 10 Jun 2025 18:00:28 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: mqryB5CORJl0Iu8bNplh8d/l2saX4fx6vi3tDDfQDvE=)
2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d9:d5:26:d7:24:35:ca:10:3b:35:04:47:0c:96:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Jun 9 18:00:28 2025 GMT
Not After : Jun 10 18:00:28 2025 GMT
Subject: CN=ecb05054733c6c1ec053ca7829f4cefb46c0ee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:f1:b1:c6:25:74:99:0f:c1:fb:52:75:e3:
b3:04:ff:d8:dc:c4:4d:3a:fe:60:70:2a:4f:f1:91:
eb:9d:c4:20:30:69:b6:68:d4:a2:b5:38:ff:af:d6:
6a:e9:13:ff:cb:48:07:fe:1e:2d:ba:0d:05:3d:e7:
14:f5:55:54:1e:f2:2a:0a:2a:c6:97:37:8c:66:62:
62:b7:c6:11:a9:f4:b3:8e:75:ed:3b:ca:f4:0e:07:
ca:a5:23:56:28:b0:a2:86:a7:fc:ec:b4:90:94:c3:
f5:cd:81:95:c2:95:b9:5e:5b:d9:97:d6:3e:69:3e:
93:c6:7c:c3:2a:79:47:c7:f3:7d:4e:91:b7:e2:cc:
b3:62:10:06:4d:ba:c8:2a:83:58:b8:e4:6c:15:11:
4a:48:99:f5:26:ea:0b:3f:80:1d:c2:d2:6d:fb:39:
ca:f8:44:14:6c:aa:90:e8:fc:ab:10:77:0d:06:a8:
c8:aa:1c:15:ab:50:b8:ab:1c:f0:56:63:90:67:68:
df:7f:e0:78:f3:e3:bc:c5:b3:84:f6:73:cf:ee:0e:
5c:f8:e5:b4:c7:0e:13:dd:f7:d3:e6:7d:45:1b:8b:
8f:e8:73:52:31:a9:be:73:de:e2:72:b6:c2:65:6f:
cb:9d:02:76:02:b1:8f:e2:41:56:c6:c8:24:24:f5:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:50:54:73:3C:6C:1E:C0:53:CA:78:29:F4:CE:FB:46:C0:EE:8F
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c1:fb:20:6d:eb:75:05:2c:e6:39:ac:e1:a3:15:57:78:c5:
48:d4:d1:1c:2d:b9:cf:04:cd:0b:80:f0:73:f3:9e:bb:3c:ea:
96:04:30:55:bc:79:a0:b9:2a:b3:0a:d8:32:e1:8b:ce:0d:12:
af:89:9c:dc:b4:a1:19:9b:aa:ae:2e:55:67:c7:48:45:80:0b:
23:e2:ea:d4:ae:a6:0a:66:44:47:66:5e:b2:8f:d9:73:e3:e2:
a6:b5:14:47:f2:34:0b:b6:bf:c3:31:d2:1f:c2:cc:28:51:16:
0c:77:c6:39:da:5e:44:24:6c:a6:1f:9a:0a:3e:7b:c3:2b:b0:
45:be:35:4a:19:a2:87:83:3d:75:0a:ca:47:33:48:3f:f5:93:
78:7b:df:af:35:2b:5c:b1:54:68:20:8a:6f:b6:cb:ef:07:0c:
00:23:6f:02:24:13:0a:ec:8f:1b:81:8d:d1:03:46:47:e1:01:
b7:0c:e4:41:d6:90:27:a8:d1:4c:1d:d4:db:6a:9f:05:43:1f:
22:df:ad:d7:aa:01:ec:14:1d:08:71:d9:73:60:82:e0:88:55:
3b:8d:78:9e:48:2a:07:b0:72:74:cf:0e:5f:9f:63:d1:f8:cc:
9b:e1:9a:15:e0:76:60:93:d6:32:3a:b0:79:87:57:a0:02:e6:
6f:8b:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:12:39 2025 by rpki-client