Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: 7RrP6Sx9yo7/nHDSe1f3LgMwsOTyV7kFk3RR7GewACU=
Subject key identifier: 57:CA:3B:51:F2:CD:30:50:84:B4:38:65:37:3C:B2:1C:CD:5E:68:04
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019748F9EBC10026BB9853FBAB9B6EABA165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: VXQZG7CAFkpRJAsjxugohWDEQwIW6Q9te7TGKYkTZIs=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:eb:c1:00:26:bb:98:53:fb:ab:9b:6e:ab:a1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=57ca3b51f2cd305084b43865373cb21ccd5e6804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:c4:7a:88:9f:a0:f7:1f:fb:08:de:80:53:
ec:0f:4b:9a:45:3e:9b:fd:7e:d0:e4:ee:d6:4b:5f:
77:5d:7d:9f:9b:19:ba:54:c4:a9:e0:cd:5c:e0:f4:
b9:5e:7e:78:18:85:b1:2d:2a:ef:1f:16:99:ef:4e:
f8:06:b8:e7:2e:51:a5:e8:62:76:77:47:a0:64:71:
34:89:c0:66:24:f8:1a:56:8f:98:69:92:52:83:b2:
8e:52:fd:ab:7c:10:28:31:c5:90:4c:2c:22:78:9e:
8a:43:40:31:47:47:3a:cc:5f:e8:60:c0:76:d6:3f:
63:ac:ff:ff:53:66:bc:fa:18:b2:fb:99:09:4e:bf:
4c:2f:22:7e:38:c1:91:84:55:f3:d8:b1:bd:ce:2a:
7f:91:4b:2d:ee:11:d3:88:b2:17:cb:ea:e6:31:cd:
60:3d:df:c8:29:66:65:6b:26:e7:5c:52:bf:3c:5a:
79:f2:6b:13:4f:45:bd:b7:bb:66:fa:72:ca:0b:f1:
3d:78:b9:a8:47:38:90:41:e9:bb:7f:bd:84:53:4d:
51:25:b0:4a:4a:cf:d2:bd:a5:11:3f:ed:c9:7f:81:
d0:ad:9a:41:ff:5e:42:d9:8c:c4:66:55:f9:e0:23:
57:da:6b:09:22:5c:7c:e4:d3:ca:e9:b0:1c:86:1a:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:3B:51:F2:CD:30:50:84:B4:38:65:37:3C:B2:1C:CD:5E:68:04
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:4d:cb:78:a9:2a:b3:ba:ec:d4:62:a3:81:e0:0f:8e:f0:
54:f9:4a:7b:f3:db:db:fa:cd:38:23:0a:76:ce:c3:61:52:c1:
6a:36:bf:10:ac:88:7d:20:71:db:d2:98:a7:cb:dc:72:7d:5f:
1f:b4:2d:7b:2f:f4:fe:b4:5b:fb:1b:e7:75:9f:cd:43:93:81:
cb:7b:59:84:12:62:fc:1f:ea:a3:40:ed:a8:85:02:b5:62:a6:
5d:e9:da:1f:4f:be:5e:f5:82:53:8f:e7:a6:02:19:b5:9d:24:
09:25:d3:45:bc:9a:be:8e:c6:9a:bc:58:e4:f8:43:e2:97:8d:
3b:0c:98:6c:eb:cf:9a:c3:64:6d:d0:1d:b9:8a:c4:08:80:aa:
25:0e:63:63:ab:5e:51:78:75:f0:fe:45:eb:6f:87:82:2b:f4:
6c:f9:03:18:06:7c:1b:8b:c1:62:f8:49:6e:c0:ab:91:af:96:
c3:db:51:8d:8c:41:ca:cf:31:29:c3:9e:59:7d:5a:5b:80:66:
8b:66:99:a6:2a:6c:c3:2c:db:41:f7:51:73:b4:db:a7:e3:7f:
66:91:e9:f9:07:eb:ea:91:4c:23:c0:73:d5:cc:21:ee:25:5e:
cf:b2:49:14:d7:23:de:cd:51:15:9e:e1:39:27:79:96:5a:6d:
fb:fb:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:40 2025 by rpki-client