Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: qe/B1EQrX+tOhMAjJX5xZkTe7z7bgaaHI1iYPBpsO94=
Subject key identifier: 04:AD:B3:F2:A6:41:FF:81:5D:D4:DA:27:6F:F5:A7:F6:BA:E6:45:B4
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01974DB2C321C87EC9AD6432D72CCB26372A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 04:00:50 +0000
Manifest this update: Sun 08 Jun 2025 04:00:50 +0000
Manifest next update: Mon 09 Jun 2025 04:00:50 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: pTKeyR/+l5JTqzosFL8PrPBfQHf3w+hIzuFJFK7yNn4=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c3:21:c8:7e:c9:ad:64:32:d7:2c:cb:26:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jun 8 04:00:50 2025 GMT
Not After : Jun 9 04:00:50 2025 GMT
Subject: CN=04adb3f2a641ff815dd4da276ff5a7f6bae645b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:87:94:40:c3:b0:59:7c:a5:25:fc:21:57:4d:
e2:f2:cf:c7:81:18:bf:76:51:9a:c6:46:4d:6e:ff:
8b:f8:12:dc:ec:83:e1:08:25:51:4a:a6:f6:15:62:
2c:64:35:63:4a:32:1f:45:69:29:1d:74:9d:e0:bf:
14:48:34:a8:32:9f:09:6c:ad:65:f2:35:87:a3:de:
e0:1e:09:0e:d2:ca:2f:f8:5d:6c:08:90:4f:7b:b6:
1d:64:ca:e8:da:b6:2c:34:d1:7f:44:ae:a2:5c:7e:
c2:b7:2a:39:6c:66:f5:7d:cd:12:16:95:55:db:dd:
09:64:64:cc:2f:62:84:75:30:03:0b:eb:e6:3f:b2:
9b:b3:a3:91:56:4e:33:7e:6b:ae:17:41:d6:28:a1:
3a:a2:2a:72:45:51:c4:33:88:77:47:0d:d6:f3:bd:
0f:19:e9:3e:8a:97:19:dc:e4:f7:04:af:fb:4b:c8:
00:31:1e:63:8f:bb:d1:e5:0c:7f:c0:48:39:7d:5b:
2f:77:da:72:3f:da:0c:20:74:2b:42:5a:b4:f5:0e:
42:ab:78:d5:b0:05:4f:bd:04:f7:c3:ac:ed:f8:7e:
d1:71:2f:0a:59:3e:86:cc:66:ab:3e:97:d3:38:e2:
8b:cb:29:e7:91:cb:b4:94:fe:87:7f:e7:87:47:18:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:B3:F2:A6:41:FF:81:5D:D4:DA:27:6F:F5:A7:F6:BA:E6:45:B4
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:91:f5:43:f2:a9:e5:da:f0:4e:d6:8e:9a:5f:b4:7d:61:08:
5b:8c:cb:80:7c:28:23:12:c1:70:26:37:a9:7f:6f:bb:1e:1d:
32:e0:98:05:56:3e:09:08:68:29:10:fc:5d:76:15:fe:d8:64:
01:1d:77:c1:6a:8e:15:b4:83:be:bf:93:f6:da:68:24:75:72:
5a:93:c3:dd:07:64:f2:3e:47:40:14:d4:60:e2:1b:03:36:73:
dd:09:c5:e4:ff:a5:67:55:b9:6b:19:6d:bc:f7:77:2c:b1:54:
c9:2b:2c:f0:e4:bd:34:2b:6d:ee:dc:ff:37:7f:a4:4b:b3:92:
f7:fe:19:b6:75:d9:d6:93:be:c6:af:19:4f:6f:76:bb:97:d4:
ce:ed:f4:93:d5:ac:e7:ed:a3:0f:16:43:da:c3:a3:1c:22:af:
00:c8:85:28:4f:37:2c:49:c6:cb:1a:2d:14:31:8e:af:b9:16:
ba:c5:32:bb:30:20:86:b4:52:9a:80:7c:7e:71:40:41:af:e8:
bd:c9:aa:59:5c:24:a9:c0:30:b1:22:ca:5a:1c:75:4b:98:ec:
e8:b0:cb:8b:80:62:19:91:b2:d9:29:c8:1e:be:10:b7:b9:66:
61:cf:92:38:b9:78:e0:69:e8:dc:ce:be:66:e4:cb:72:f9:c1:
6e:95:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:03:50 2025 by rpki-client