Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: nJ39NXQ+xgyZVPVsk9kfU5kiSbUhGDrcloB1wP2v3o4=
Subject key identifier: 4A:52:A6:1A:E5:89:F3:6D:84:53:92:9B:5C:5B:98:9A:5D:C6:8F:B6
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 01974AE926BA026118BCEF80BC6B486FEB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 15:01:23 +0000
Manifest this update: Sat 07 Jun 2025 15:01:23 +0000
Manifest next update: Sun 08 Jun 2025 15:01:23 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: i4b2SmsN26AmQLScqy2zPGDDFOCD7BLGWl3Wx9OTDAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:26:ba:02:61:18:bc:ef:80:bc:6b:48:6f:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jun 7 15:01:23 2025 GMT
Not After : Jun 8 15:01:23 2025 GMT
Subject: CN=4a52a61ae589f36d8453929b5c5b989a5dc68fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:5e:81:9b:bf:36:fc:17:fa:b8:60:a3:bf:
83:cd:f0:fd:c8:0d:79:3f:72:f5:75:a3:33:2e:dd:
df:dd:2f:69:3e:80:3e:eb:ae:98:c6:19:e5:f1:58:
e1:3e:b8:a6:d5:53:54:6e:00:6a:d0:4e:00:d6:43:
a4:0d:da:4a:bb:d6:d0:58:48:15:67:c2:41:7a:2e:
b5:80:75:cb:cb:81:df:76:dd:38:64:0c:48:57:72:
04:0a:4f:c6:e9:30:73:a2:9e:17:5e:77:52:e2:6b:
18:7b:77:2c:2f:1a:7c:14:2a:ac:f1:31:d7:6d:ec:
38:5c:eb:aa:2c:46:82:d3:6f:32:4a:4f:ae:32:19:
24:bd:e2:18:27:7a:77:28:77:c9:02:22:a6:85:46:
a5:98:86:13:ef:e7:7a:38:34:36:a7:76:a4:bb:46:
2f:57:fb:42:e7:e2:c9:1b:f1:4f:32:86:ce:88:c2:
31:cf:dd:03:0c:6e:dc:21:d8:2f:cf:4f:b1:c2:3a:
5a:9b:41:3a:d9:a3:07:b8:9f:b1:e4:43:57:a1:07:
c5:fd:ce:a6:0c:7f:a2:da:fb:9a:26:17:a2:5d:09:
9a:e8:96:b9:3f:8b:0a:3c:d9:16:b3:f5:00:6f:50:
33:68:77:5e:b4:71:ad:8e:ba:00:5a:e7:4d:34:6f:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:A6:1A:E5:89:F3:6D:84:53:92:9B:5C:5B:98:9A:5D:C6:8F:B6
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:79:61:da:21:6a:d2:02:2f:70:a8:33:5e:8b:c5:f3:76:7e:
37:44:53:fd:30:5e:35:2c:99:ed:9a:46:13:b3:54:e8:30:f9:
2b:5c:84:93:48:a0:b5:80:04:d6:6a:5a:cc:8c:c4:3a:3a:d3:
5a:34:dc:0d:20:2b:d1:10:ed:17:52:1d:46:db:21:fc:3e:81:
48:42:8d:ec:4f:b2:7e:19:ae:c2:bf:05:8e:a5:e0:9e:61:01:
b2:65:41:e0:91:01:81:37:95:52:14:46:b5:a5:2f:05:63:e8:
c0:73:78:c0:d5:e8:aa:5b:6a:d9:b1:26:b3:ba:2c:70:50:a7:
38:16:6e:97:d7:1c:b0:78:3d:b1:55:f3:c2:5d:7e:8b:cc:7a:
df:7b:11:bd:b6:11:35:1b:99:e6:ef:67:c8:46:f2:a0:c9:02:
01:90:62:7b:0e:1b:55:19:1f:99:22:72:b6:bc:de:8f:f7:91:
c1:29:15:3c:9a:0d:24:66:7b:a5:05:88:00:3b:aa:1e:12:47:
86:85:08:c4:1e:76:ed:bb:77:c2:41:8e:95:b4:c5:aa:36:35:
7d:45:c5:96:6d:09:a2:a9:a8:3a:b3:43:53:bc:bc:2a:55:1a:
30:1b:da:4a:ba:85:c3:86:f0:79:f8:7d:34:3d:19:37:29:ff:
9c:db:f1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:23:10 2025 by rpki-client