Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: 3CfXO3wzhwVlynOj7P828QmtZTesoR6waIZY/09SmyU=
Subject key identifier: 5C:9D:63:C5:B8:58:7A:CB:3F:1E:7E:B2:D3:24:8F:D7:87:A3:C2:86
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 01974AE8B67A1C8577799CD3FE52C8335A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 1164
Signing time: Sat 07 Jun 2025 15:00:54 +0000
Manifest this update: Sat 07 Jun 2025 15:00:54 +0000
Manifest next update: Sun 08 Jun 2025 15:00:54 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: rAfn2i7ZdVMFdYjVxDu/9onZ2jnSiGcZN5NUTKFeIKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b6:7a:1c:85:77:79:9c:d3:fe:52:c8:33:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Jun 7 15:00:54 2025 GMT
Not After : Jun 8 15:00:54 2025 GMT
Subject: CN=5c9d63c5b8587acb3f1e7eb2d3248fd787a3c286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:e8:48:df:90:a7:c8:f3:45:6b:03:a8:cb:
ac:0d:84:ab:ed:33:87:b1:6a:ba:94:a1:f8:ba:70:
f3:65:d5:bf:13:32:d5:ba:54:d3:8b:87:ad:30:60:
5d:c4:b2:65:1d:ce:87:53:2a:5f:c7:e5:54:37:7f:
93:d4:47:61:36:3b:c9:33:3c:f0:4d:cb:f7:20:63:
9d:1a:e2:55:2f:17:90:e6:5c:d8:81:40:02:08:16:
f4:02:22:33:2e:97:67:34:c3:79:8b:33:10:1e:25:
96:3e:19:b1:06:b2:76:d8:53:e8:40:b8:3f:3b:1e:
ca:5d:01:66:4f:43:be:e8:19:9e:89:72:7e:19:c1:
7c:c9:c9:42:d2:47:54:a8:31:54:43:20:f1:3f:45:
4d:34:71:8c:a8:a7:af:93:44:0d:74:32:fa:05:d0:
83:6e:99:be:20:2d:23:1e:58:3a:b4:eb:75:63:2a:
46:cc:09:ca:fb:3c:93:00:71:fb:d6:e8:2a:13:31:
62:c3:0e:55:d9:93:05:33:49:82:1f:24:75:81:ec:
7f:89:da:80:d9:53:e4:8c:62:50:3e:92:07:eb:ae:
57:62:9b:f1:f6:f6:ea:12:e8:da:39:6f:8a:f7:89:
85:1b:55:d2:32:d4:81:31:f4:49:72:7d:89:3c:9f:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:63:C5:B8:58:7A:CB:3F:1E:7E:B2:D3:24:8F:D7:87:A3:C2:86
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fe:db:c8:87:53:79:51:9f:50:be:0a:c3:eb:37:cc:89:27:
78:02:27:25:7d:d4:e5:6d:6d:c3:cb:c6:d8:07:fa:6d:89:67:
cb:8b:88:0e:e6:55:00:45:64:04:21:9c:ab:40:f2:47:c5:5c:
46:c4:33:d3:36:ad:3e:6b:c4:16:a3:b0:9f:90:da:a6:fa:8e:
72:43:87:70:dc:12:1f:67:3e:be:6c:42:bc:f9:5b:2c:b2:d4:
51:91:99:d0:13:c9:a4:c7:84:7f:73:be:a3:a0:62:d0:21:b5:
a4:94:19:29:85:75:5a:88:0f:cd:b3:f8:51:c0:d8:c6:69:63:
3c:b5:99:b2:e3:13:1f:b6:85:be:2f:f9:79:48:76:22:83:b8:
b1:5e:74:64:ce:34:c1:bb:e0:e7:e6:69:d9:7d:26:e6:e4:c1:
df:f9:b6:d7:40:1e:2b:53:77:7c:b6:a9:e6:71:d3:66:85:bb:
95:09:be:4a:92:69:13:b2:00:23:f0:c8:82:11:dd:ea:1f:75:
a9:c7:34:8b:4f:32:f7:a1:a1:e9:a3:6b:87:8a:dd:12:ec:4e:
c5:21:98:d8:4e:60:7a:71:c9:91:92:0d:ee:94:84:9f:bf:23:
9e:a7:97:64:4a:68:d7:5b:79:6c:aa:75:d0:e6:a1:2d:a7:4f:
6c:a0:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:53:26 2025 by rpki-client