Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: YaGWj5vrZbzVHLEx0opIjM28SIbbzCINUJwDzGV4e68=
Subject key identifier: AF:7A:6A:8A:CF:2E:4B:39:6C:B3:44:55:24:EB:1F:65:58:EA:DF:74
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 019755A2EA3319FCC87B892C798C6B585EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 17:00:29 +0000
Manifest this update: Mon 09 Jun 2025 17:00:29 +0000
Manifest next update: Tue 10 Jun 2025 17:00:29 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: DX+aHV4wb7d4ZrM3AZAT/wWumkkcWVpiW7I3UtQQxak=)
2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:ea:33:19:fc:c8:7b:89:2c:79:8c:6b:58:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jun 9 17:00:29 2025 GMT
Not After : Jun 10 17:00:29 2025 GMT
Subject: CN=af7a6a8acf2e4b396cb3445524eb1f6558eadf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:97:cd:19:50:5b:00:0f:0a:64:bc:fa:ed:
a4:2c:7f:20:4e:56:77:0c:cb:a3:6e:dd:c4:43:d7:
a7:18:c5:16:82:d6:b8:06:65:e2:12:10:f8:33:1c:
63:1b:24:b6:25:f5:87:8c:fc:2f:69:37:a7:52:3b:
f4:8b:85:71:c9:37:21:e3:ff:2b:41:15:28:21:4b:
c6:69:d7:a4:85:ee:9b:69:52:c4:af:15:75:3e:bb:
74:cf:3e:f1:f2:e3:cc:cb:73:3d:18:cf:a2:b7:03:
c3:0e:f7:24:ac:40:dd:8c:13:08:42:ef:cb:7d:27:
80:1d:05:e3:49:c3:57:63:5a:09:df:74:d3:cd:50:
e7:c0:1c:37:3a:0c:11:40:c0:bd:8a:2c:35:55:7d:
ab:af:89:08:c1:6f:9f:09:19:de:2d:d8:ca:07:78:
4c:71:25:ce:14:c7:83:39:e4:07:5d:91:d2:4d:5c:
8c:d8:23:09:a7:a1:80:f3:fd:95:6f:6c:b4:80:ee:
39:b4:92:60:0d:b2:0e:84:14:34:2f:a6:40:df:bc:
68:93:bd:f8:71:4a:e1:41:9e:37:97:23:a7:31:2c:
ba:eb:de:d6:bd:c8:9e:aa:ab:9b:e0:2d:db:94:50:
29:85:ab:a2:21:6a:c7:bf:a5:9b:b8:63:57:ce:b9:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:6A:8A:CF:2E:4B:39:6C:B3:44:55:24:EB:1F:65:58:EA:DF:74
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5e:88:44:b9:6c:23:84:65:f0:de:35:d9:c4:2e:58:08:57:
6e:a6:b2:b7:0e:c1:7b:2a:de:aa:bd:83:5c:3d:13:54:09:8a:
f4:29:e0:7f:19:03:35:b1:e5:a3:f8:2f:2b:3c:f2:82:20:e1:
08:b5:65:aa:70:b2:d6:6f:66:82:55:a5:4d:83:88:3b:22:e6:
b2:29:fd:b4:22:68:33:cb:11:65:c9:01:73:37:1f:ac:7c:14:
d3:a1:8a:50:f4:c3:48:79:69:c1:d8:01:cc:27:37:59:58:26:
a6:24:31:e5:1d:17:0b:35:bb:17:fc:06:5d:0b:9a:fc:5f:34:
d2:85:63:d8:89:78:36:b7:90:2b:f5:a1:f5:e6:19:db:e5:7b:
c6:fb:8b:ef:d6:0d:06:ed:7c:f0:8f:83:d2:c4:27:61:97:1f:
8a:7a:ac:66:b8:5c:dd:56:b5:96:29:e3:2f:d3:7d:ce:21:ce:
b9:84:12:27:99:70:be:dd:4d:3f:45:2a:1c:16:0c:0b:ac:94:
34:f1:f6:95:8b:00:39:40:08:46:91:78:ad:fa:6e:01:bf:19:
66:4d:7d:5a:a8:16:9c:84:bb:ba:9b:63:b4:38:96:38:68:a8:
66:82:cd:b1:82:70:86:29:e8:b0:1f:29:42:c1:f7:6c:7e:d1:
58:9a:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:29:22 2025 by rpki-client