Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: 7i8o5olu0srzzWCXPtUdI+vtW1d0Oh1fp7gAMIUmpYg=
Subject key identifier: 47:3F:0C:0C:C8:9A:92:80:80:D2:C0:C2:D5:3D:25:83:27:BA:D9:42
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 01975121F6F4D1BDF8C3334C0AF349BB45A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 20:01:09 +0000
Manifest this update: Sun 08 Jun 2025 20:01:09 +0000
Manifest next update: Mon 09 Jun 2025 20:01:09 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: /O1H0y0Euv7lQmTaiQx0Bv4kdMH6l7r/uHp/FATXoBE=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:f6:f4:d1:bd:f8:c3:33:4c:0a:f3:49:bb:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Jun 8 20:01:09 2025 GMT
Not After : Jun 9 20:01:09 2025 GMT
Subject: CN=473f0c0cc89a928080d2c0c2d53d258327bad942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:b0:85:55:08:57:65:03:fa:a8:88:a9:fb:
d2:60:db:21:4f:3d:d8:e1:bc:97:10:af:c5:9d:46:
6b:08:0f:9f:90:fb:38:75:26:13:98:2d:a2:c7:1a:
64:0b:0c:2b:4d:83:16:ed:b9:c4:45:ff:84:96:26:
14:81:c8:73:c4:7a:46:f8:ac:79:50:fc:54:12:f4:
98:67:1b:6f:f0:67:6e:a5:3d:1a:fb:4d:4c:a6:3a:
b6:4b:ca:d7:df:95:2b:24:30:08:50:8d:4a:82:c4:
87:c0:0f:3a:a5:1e:3f:77:63:dc:50:91:06:10:7a:
2b:f4:5c:11:8b:be:28:82:3d:94:ad:da:a1:7e:a7:
b8:fc:50:4a:80:4b:21:5c:b3:23:ba:b5:5c:a7:66:
15:b6:ef:8c:9b:c1:d4:cf:5c:b3:e6:c8:b7:af:b6:
99:8e:10:2f:de:75:1d:c4:58:5d:0b:3b:5c:d6:0e:
68:0b:94:0b:e9:af:08:75:9d:da:11:29:75:b3:2e:
29:c7:85:d3:16:6b:db:f9:72:c0:81:8d:fa:b3:48:
6f:df:79:e5:e3:ec:da:ef:b1:a3:80:61:45:77:24:
23:da:67:a4:bc:ec:df:df:c5:a3:58:6d:c7:55:2b:
cc:93:f1:d2:33:a3:c0:14:db:0a:3c:c5:cf:27:ef:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3F:0C:0C:C8:9A:92:80:80:D2:C0:C2:D5:3D:25:83:27:BA:D9:42
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:c7:7c:de:65:47:1b:b4:fa:eb:83:fb:e0:32:91:3a:d2:
10:eb:9d:7b:ed:23:94:de:7d:3d:01:42:f5:23:0f:cf:94:5a:
25:de:ed:65:2b:ac:89:a8:57:43:d5:f4:ee:ee:c7:72:f8:58:
bb:41:51:9c:12:a8:b4:8f:b0:e7:db:c8:65:21:9c:ae:92:57:
be:f8:85:98:23:72:e4:a9:43:49:ee:c7:3d:f6:17:42:a6:49:
69:b1:28:fc:ac:4c:ea:20:39:2c:cc:f1:9a:7a:39:54:ea:55:
e7:40:3d:94:8a:3d:73:44:51:1b:1c:ee:3b:1f:f7:11:f4:b8:
5f:e5:84:fb:14:b3:4e:41:0a:56:93:72:eb:a2:d0:5a:4c:43:
e6:7f:a2:29:56:d2:9e:bb:cc:65:6e:fe:fd:2c:53:1d:b5:52:
87:6f:98:55:7f:a8:ee:d9:ca:25:86:90:64:d2:32:92:17:0f:
cc:cb:6b:34:58:6d:1b:86:d1:93:ef:5c:f4:f7:75:1a:d2:09:
83:d1:0d:cd:bf:f1:d0:34:27:10:b1:46:47:77:a9:25:3a:12:
8d:20:a1:a3:1f:be:31:0d:a6:6c:cc:1a:0a:dd:7e:93:13:e6:
78:06:19:5a:93:8c:9c:fb:69:ab:18:ae:6b:05:b3:57:c7:35:
47:3b:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:04 2025 by rpki-client