Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: czoVyCCDWvPayPi9xO8MKmV5oWAD7jbM7ifaO3PHYqc=
Subject key identifier: 43:DA:48:2F:6F:52:05:16:3C:AB:E7:6D:91:AA:66:C6:F3:A6:23:AD
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 01974FD7E978E74069D8EB00907A1CD4AE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:39 +0000
Manifest this update: Sun 08 Jun 2025 14:00:39 +0000
Manifest next update: Mon 09 Jun 2025 14:00:39 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: ri9JUDf7OrfBD3plesIiBCkUQDQGHu9rLXoaUZabt74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e9:78:e7:40:69:d8:eb:00:90:7a:1c:d4:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jun 8 14:00:39 2025 GMT
Not After : Jun 9 14:00:39 2025 GMT
Subject: CN=43da482f6f5205163cabe76d91aa66c6f3a623ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:c7:9f:e9:d5:de:9b:52:dd:d9:d7:d1:57:
5f:07:08:2b:a6:be:c1:d8:23:5b:97:40:23:00:93:
1a:89:98:2f:eb:04:78:19:b4:2b:2a:a0:7b:a0:a5:
02:c0:81:4f:3e:28:57:8f:26:8e:16:d5:96:dc:2d:
01:d3:13:d0:13:6a:42:14:6d:16:0c:e7:b7:3e:6f:
c8:91:7d:7e:67:c4:ad:0a:e3:ee:ba:64:14:5f:4a:
c5:de:04:39:fe:87:72:8b:8d:f7:9a:5d:4b:02:f7:
1c:93:b6:1f:89:60:2f:4a:ee:08:b0:d2:55:cc:bc:
ca:6b:7d:26:82:b7:fd:ae:ae:f0:1d:7f:02:d0:9b:
cb:54:44:c8:8a:20:f0:f8:cb:72:22:9a:b2:de:0c:
ce:54:08:9c:b3:4a:06:df:11:67:5d:1a:a0:17:62:
aa:4d:59:3d:1a:ce:c0:60:65:b9:8e:7f:af:10:05:
60:b2:4c:d4:1f:3e:58:e1:b3:9b:ec:f1:02:8f:2b:
d8:f0:83:e1:ae:a5:3f:81:1a:3f:76:5e:45:8f:34:
fa:68:52:42:10:86:45:24:4c:b7:6f:fb:cd:64:37:
d5:a5:e0:07:4e:8d:6f:7a:89:80:94:ce:31:d2:15:
4c:2f:5c:e1:30:61:5e:c1:2f:ea:5a:40:e9:1e:60:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:48:2F:6F:52:05:16:3C:AB:E7:6D:91:AA:66:C6:F3:A6:23:AD
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:0b:2a:49:f0:af:33:49:3b:03:9d:0f:c7:42:82:6d:6e:
76:2a:53:09:44:e1:ce:88:71:99:1f:5b:ca:6a:f2:a2:cd:53:
58:0a:32:1f:d2:46:72:3a:05:3d:f1:69:d6:05:9c:b6:ab:38:
37:2f:5d:be:9e:ce:fd:6b:f6:f5:5d:1e:1f:82:76:67:3b:0b:
df:a8:15:d1:d5:a6:d6:9f:d3:61:65:24:0c:c5:19:f2:3c:cd:
8c:52:47:e3:60:06:d2:91:35:d5:ac:01:06:e7:cd:89:2f:84:
de:2c:af:bb:f5:3f:f8:41:52:79:a6:7c:3d:7a:a8:4d:5e:da:
b0:32:da:3a:1a:50:97:7b:b1:ce:d1:f6:e7:f3:74:0b:77:6c:
c5:11:e8:4d:8f:9e:28:a9:53:a5:7e:2e:11:d5:8c:93:41:75:
ee:50:fd:ac:82:4b:80:ae:fe:23:a6:e4:7e:ea:a2:e7:fa:c5:
4d:9b:50:36:b0:93:9a:41:6f:04:a6:92:42:59:95:95:14:d3:
4f:85:46:41:41:ff:86:a3:ca:fc:0c:41:e1:c7:5d:59:fb:14:
71:2b:6b:29:4c:7e:72:85:40:c5:4c:83:bb:73:f5:99:2b:76:
de:1a:d8:86:d6:fe:37:c3:68:5f:e6:0b:9d:ca:b5:e4:c0:50:
67:4c:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:59:14 2025 by rpki-client