Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: Hsy/h9xqlA0vMu5sY5h4+7zd+PyKZE5UpUOflcJN0Xw=
Subject key identifier: E8:22:F0:98:D5:C2:06:A2:3E:3F:2F:5F:94:5C:09:AD:76:D8:61:0B
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 0197488D00E57EF9496CB9A9E75DE5D06896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 04:01:29 +0000
Manifest this update: Sat 07 Jun 2025 04:01:29 +0000
Manifest next update: Sun 08 Jun 2025 04:01:29 +0000
Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: ou1DzvM1YNXvsBVQ7VIdqZofRQrHpZt70sw1vN28VSw=)
2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:00:e5:7e:f9:49:6c:b9:a9:e7:5d:e5:d0:68:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Jun 7 04:01:29 2025 GMT
Not After : Jun 8 04:01:29 2025 GMT
Subject: CN=e822f098d5c206a23e3f2f5f945c09ad76d8610b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:40:b8:12:60:e7:5d:f3:02:9a:07:b8:63:
f2:63:13:3e:06:00:fd:e3:1c:48:a7:69:a7:07:a8:
17:f9:03:87:39:e8:22:80:ca:67:3c:5a:c6:df:6c:
71:92:a0:2b:dc:ff:4f:9c:56:04:69:53:41:f0:39:
fa:33:3d:af:ad:bd:12:65:10:8f:4c:16:c6:9f:29:
31:d5:49:27:f4:55:20:ff:a9:b6:dc:dc:ff:a7:fc:
93:2c:60:5c:52:9b:40:d2:b7:98:ad:fc:0e:8c:0d:
92:99:75:75:03:53:e4:3b:6f:11:09:35:97:30:d2:
ba:7c:56:bf:48:92:ba:e6:54:e8:3b:52:03:d7:03:
dd:e2:30:29:d3:67:eb:be:f8:3f:43:22:af:c8:9a:
74:0a:ca:54:08:67:d8:0e:48:0e:0e:d0:99:30:98:
4a:a1:8e:83:28:10:16:01:7a:2a:83:57:ca:f0:19:
46:ac:ec:e1:bd:14:d6:ed:61:5d:52:cc:36:b1:bc:
c9:b9:b0:7a:19:35:30:f1:5a:ac:29:10:5a:0d:39:
ac:3a:2f:9e:a0:21:21:75:82:ab:ed:42:d7:db:76:
aa:db:ea:91:b2:d7:61:31:5e:18:90:d4:10:77:11:
30:3f:57:ab:12:9f:18:75:09:3f:d7:1d:44:5b:37:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:F0:98:D5:C2:06:A2:3E:3F:2F:5F:94:5C:09:AD:76:D8:61:0B
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f4:a3:9f:d4:79:01:0f:e0:cf:7b:36:b4:f2:85:c6:0a:5e:
2c:e7:1c:08:10:bf:d8:08:13:b8:9f:cd:13:48:63:c0:30:90:
a5:85:bb:9e:24:e5:4f:4a:64:0e:97:df:5d:6a:58:f2:16:05:
96:b5:c6:51:b0:9c:b2:58:cb:f2:9c:3a:63:0a:f2:b6:56:98:
d3:6c:a7:4d:59:f6:e5:f3:06:cc:a1:a7:9e:93:f4:48:6a:d4:
ae:3b:1c:68:57:97:91:40:2c:99:e5:82:a9:25:1a:9d:8d:1c:
46:b1:dd:c0:df:7f:1e:b2:55:af:06:2b:8a:9d:67:5d:3e:da:
cc:98:41:2c:4d:28:72:1c:01:3b:5a:3b:9b:c6:07:12:06:38:
77:df:28:3b:b9:98:a1:1d:76:db:c0:e8:53:a5:6e:73:d1:bb:
9b:6b:d5:6a:7c:d9:af:15:01:4f:76:58:65:80:00:70:58:b1:
5f:3a:b8:a6:5f:e2:42:e6:5c:0c:d9:60:63:13:3b:a9:29:30:
e6:44:13:94:c3:8e:c8:ab:da:48:37:04:44:ef:0e:4a:78:8a:
52:4e:44:73:31:41:f8:39:75:ec:a2:62:f5:0c:4f:91:a0:84:
21:3e:ae:72:32:46:1f:eb:90:e4:97:28:e8:9d:8e:a5:c9:98:
44:2d:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:38:33 2025 by rpki-client