Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: VcbkJVdmzj65o3xq6IZdTlG7o6+gTnCJkkyDWrwb1n0=
Subject key identifier: 06:B1:57:B6:4E:48:A3:BB:66:AA:E8:8C:5B:BF:F8:C6:62:B9:43:59
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 019752A206F5E542400D7C14CC9E7FCCEB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1588
Signing time: Mon 09 Jun 2025 03:00:39 +0000
Manifest this update: Mon 09 Jun 2025 03:00:39 +0000
Manifest next update: Tue 10 Jun 2025 03:00:39 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: 1jxBiwJcopEhCeT2OZlzv+2BmkWXHXpllAJ8uzwqjEM=)
2: PjnPc92Q2V1HGAF2zMcKnf8EY3s.roa (hash: oJHQplo1wgSYzbHd7U3NabjFZf8l2Xl3wzFPd6jcOa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:06:f5:e5:42:40:0d:7c:14:cc:9e:7f:cc:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Jun 9 03:00:39 2025 GMT
Not After : Jun 10 03:00:39 2025 GMT
Subject: CN=06b157b64e48a3bb66aae88c5bbff8c662b94359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:9f:d0:5d:a8:6e:b2:e6:6b:90:9d:ee:37:
74:b2:a1:71:e5:d2:f0:90:02:a2:d0:52:5e:80:1a:
47:9a:fb:08:93:c2:c4:6a:1b:6d:47:a6:0a:69:72:
bb:08:15:52:08:71:86:95:2a:34:00:11:4d:f7:68:
9f:b5:46:c0:e5:74:cf:65:d4:20:67:1f:a8:f7:70:
7b:3f:43:3c:17:e4:77:b8:f7:e8:1c:54:81:1f:e8:
47:3f:c8:88:0e:2b:cc:0c:e0:10:c5:bd:3e:98:2b:
be:ae:9e:ff:57:74:30:ef:78:30:5c:cb:c9:f0:85:
61:18:75:32:61:76:a0:6c:b3:c4:b8:29:46:1a:ce:
44:40:39:c6:15:b7:17:a6:7a:9d:f7:3b:85:6b:a4:
b2:eb:48:90:e1:26:da:a1:93:98:f5:d4:dc:b6:1b:
f7:63:43:c4:3e:a6:c2:10:8f:51:30:a7:fb:5e:ef:
ee:61:1d:5d:90:32:c5:c5:13:91:d3:86:b3:d5:82:
38:fa:61:51:7a:bc:80:f9:9e:ac:1f:03:55:86:db:
0e:bc:f4:cb:21:88:27:4f:f6:63:a8:62:54:89:60:
e7:86:9f:c0:82:9a:a4:c3:6a:ef:29:2f:d5:7f:3b:
e9:e7:0f:cd:8b:27:ee:2c:19:8c:6d:09:b9:85:66:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:57:B6:4E:48:A3:BB:66:AA:E8:8C:5B:BF:F8:C6:62:B9:43:59
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:93:f0:64:21:3e:4a:c1:6b:8b:57:61:a2:63:a8:1c:c7:
c0:1f:a9:f0:bd:a6:cf:42:7a:51:a9:e6:e1:d3:d2:f2:33:e5:
d3:8b:04:85:53:99:3c:14:ff:31:0e:6c:f1:60:87:9a:45:e1:
ff:21:47:2d:0d:6c:ad:d6:46:75:91:39:be:79:9f:0f:a0:65:
48:1a:bf:6b:3b:77:88:a3:ef:42:1e:c3:f8:08:e5:bf:9b:bd:
a6:1a:90:c5:47:ec:b9:98:06:19:72:cb:16:d8:d8:9e:e7:e5:
dd:af:bb:99:8a:be:a5:66:4b:1e:16:da:56:66:4a:f9:e5:65:
77:02:a7:fb:3b:2c:8a:5e:d8:4b:a0:34:9e:ab:d1:3f:d9:f0:
36:72:01:96:a5:63:82:c8:50:ea:10:5c:82:9c:df:76:b9:ef:
49:eb:da:14:4b:cd:00:f1:8e:a5:24:55:54:8b:dd:f5:9d:10:
fe:84:e3:a1:89:67:d9:b9:54:d6:d7:df:63:7a:88:04:83:5b:
f6:3d:c2:d6:82:06:96:c5:e8:27:0a:c4:6b:41:f0:f9:e1:cb:
cf:29:17:91:22:e2:da:5e:56:24:4a:83:69:5e:b6:aa:d7:a5:
84:ad:cf:40:cf:b4:82:cf:3c:eb:89:25:05:20:25:60:ce:6c:
b7:73:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:21 2025 by rpki-client