Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: 67MAYQtyA6kG3btATKEoPvokTewmmShe3tv4EjIamMo=
Subject key identifier: E1:A4:01:F3:FC:18:70:F3:7C:8B:6C:64:4C:28:26:E8:9E:B5:62:69
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019749D607FF242B9604FDBBF9DF2DC64747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:52 +0000
Manifest this update: Sat 07 Jun 2025 10:00:52 +0000
Manifest next update: Sun 08 Jun 2025 10:00:52 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: U7vAPsod6TMdq/tsNRj++NE52EI5/1fQSWGAtDdbD94=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:07:ff:24:2b:96:04:fd:bb:f9:df:2d:c6:47:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jun 7 10:00:52 2025 GMT
Not After : Jun 8 10:00:52 2025 GMT
Subject: CN=e1a401f3fc1870f37c8b6c644c2826e89eb56269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:4a:c9:77:6a:76:44:4c:c1:2f:ed:a5:ee:
1a:46:6e:67:19:2a:88:cf:3f:9c:92:35:2e:01:17:
28:2a:99:fa:0c:c8:fe:dc:76:e6:00:ac:5b:13:fd:
ce:e1:e7:d8:f3:0f:c9:45:3b:61:ea:de:2f:8b:60:
82:7b:b0:b4:6b:a1:66:eb:b5:df:aa:cc:a0:51:d1:
3b:2d:99:bf:b1:50:ae:88:ea:d5:25:bd:29:02:e1:
75:79:6c:c5:fc:39:ce:36:dd:77:18:02:65:51:1f:
dd:c8:f6:d0:f1:a2:48:38:77:d7:4b:e0:c1:cb:60:
3e:fa:a1:cd:f7:41:a6:47:eb:d3:37:39:b3:9f:91:
e1:bb:48:34:35:65:1f:b7:5e:0e:d4:a4:22:25:2a:
bf:0b:d4:f5:5d:84:b8:04:0b:d1:a1:ae:a3:27:da:
92:42:c1:57:e1:03:07:94:25:c4:36:57:63:8f:1c:
e6:69:54:e6:b5:08:23:6f:03:b6:4c:71:78:2c:45:
53:8b:d6:c6:60:73:e8:8c:2e:2f:b9:38:e1:c3:ac:
d1:90:87:9f:9d:bf:91:75:a3:5e:45:96:7a:f2:cf:
fc:30:7c:48:7a:8b:39:bc:7f:2c:3d:4d:d8:0b:b1:
60:11:48:9c:ce:ac:ce:13:b9:2e:71:f3:95:84:74:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:01:F3:FC:18:70:F3:7C:8B:6C:64:4C:28:26:E8:9E:B5:62:69
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:29:df:cd:55:cd:90:5f:c5:43:2a:7a:ee:65:31:17:f4:
a4:c3:3f:c0:54:44:ec:45:35:eb:7d:fe:8b:7c:a6:54:4b:f6:
3d:06:7b:65:24:40:6e:09:eb:dc:72:26:2e:6d:b2:02:c7:88:
bc:d8:36:09:fd:b6:a9:f7:d4:ac:d1:92:9a:b3:9f:15:7f:5b:
dd:be:73:d5:8a:39:64:82:bd:f8:4f:35:bb:fe:b6:bc:26:70:
cf:84:f8:d7:be:05:67:ea:d7:31:35:f2:4e:9e:04:4d:cc:72:
23:f0:5a:99:eb:9c:f5:36:44:81:63:92:eb:f2:e5:28:b0:08:
96:ed:a3:04:f2:1e:d5:2e:dd:cd:14:5e:3d:4e:ce:d6:b9:f5:
f5:fd:fd:f5:29:0e:95:e3:e9:b1:d5:a6:01:65:2e:92:a5:15:
7d:e9:85:dd:49:b6:ba:aa:56:09:3b:72:f8:16:d1:47:0c:da:
fd:47:12:31:8d:de:c5:8d:17:f4:97:25:da:38:2b:a6:1e:c9:
d3:b8:02:3f:90:92:67:61:61:0b:7f:3e:5d:14:d9:5f:d5:83:
6a:b8:e6:dd:38:d9:6f:48:4c:ef:60:f9:d4:0d:16:f6:28:ec:
ab:e5:48:71:b3:b0:79:38:c7:1a:a2:64:78:ea:9b:93:da:d8:
23:e8:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:34 2025 by rpki-client