Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: +98777w2z04/nsA4aDbanoLDBWIf5E+ChC39vrfqykw=
Subject key identifier: EB:66:FA:B6:D4:09:AB:4E:89:B0:ED:9F:54:4B:7D:49:CA:6D:ED:50
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0197485544161D4D8902398B349661B6FADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:36 +0000
Manifest this update: Sat 07 Jun 2025 03:00:36 +0000
Manifest next update: Sun 08 Jun 2025 03:00:36 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: QXdOVMLXGQfznV34m8qJezDXH5H6jPJRgFfZ3ouxkj8=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:44:16:1d:4d:89:02:39:8b:34:96:61:b6:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Jun 7 03:00:36 2025 GMT
Not After : Jun 8 03:00:36 2025 GMT
Subject: CN=eb66fab6d409ab4e89b0ed9f544b7d49ca6ded50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:55:64:75:7a:ea:35:da:23:64:66:3b:ce:
41:b1:01:ab:90:69:80:b8:b6:85:6c:91:5d:36:4c:
0f:a6:dc:98:b9:93:70:59:b6:a1:62:9b:2d:58:35:
c4:49:9d:f3:be:48:ee:bd:5b:75:da:68:1f:f3:b5:
b5:57:1a:e0:c5:db:9b:7f:90:c7:1d:6e:c1:68:9f:
13:10:77:a0:b3:0e:c2:5c:86:a5:de:f5:e4:28:0d:
10:e8:28:d5:03:57:c4:79:c5:6d:74:45:cd:c8:dc:
84:e8:2e:b2:38:57:5d:cc:12:74:21:67:2a:7b:c0:
a6:22:72:22:4c:f4:c5:9b:b8:f3:41:e5:cc:fa:35:
85:1a:ba:8f:a2:65:3a:3d:ca:87:10:62:2a:5e:38:
f1:7c:89:e2:7e:05:56:7c:64:1b:21:ca:76:de:ef:
14:d6:b2:fa:2c:f8:b7:81:36:79:7b:8d:0f:6e:c5:
18:01:22:a8:6a:78:77:84:c0:23:0d:21:bd:fb:0e:
20:ea:68:f2:4c:ae:f7:11:a6:8f:be:02:85:b7:54:
5f:3d:70:be:72:28:42:5d:21:f2:8d:41:5d:12:43:
4a:45:8e:b1:c0:21:6f:34:38:64:1d:da:03:b2:ea:
e4:d9:c9:ea:fe:40:51:dd:ab:de:95:cc:36:a2:87:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:FA:B6:D4:09:AB:4E:89:B0:ED:9F:54:4B:7D:49:CA:6D:ED:50
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:f2:56:9f:bd:9b:7b:6d:b4:a9:42:46:76:c6:5c:a5:87:
8c:5c:00:95:4b:52:04:f7:79:db:45:e5:92:43:d6:55:30:cf:
b9:36:69:3d:b1:c8:70:f8:69:3a:9a:5e:b6:0f:d0:12:db:c8:
f2:be:7e:ea:73:fb:02:c6:44:9a:e9:1d:89:87:b9:a5:5a:97:
8a:06:91:e8:b0:84:ff:df:e7:91:99:17:91:a1:de:d6:63:b0:
6a:bc:04:e5:c7:7a:d8:0c:a6:9d:26:76:f6:8f:a1:ab:15:00:
55:1d:95:e8:59:af:48:c7:63:c8:ee:74:76:84:74:45:11:ff:
27:e8:43:bf:3a:0b:b4:2d:35:44:7b:c8:bd:3c:29:c2:1d:ac:
a7:8a:4a:7b:59:2d:8b:96:4f:d6:71:83:7f:d3:fe:20:4c:d0:
07:62:48:ce:7e:4e:33:ca:7c:e0:53:e0:86:03:4a:b0:a5:c0:
ad:b9:d9:ce:2f:90:9b:b9:ab:82:88:eb:0b:2b:86:65:43:a9:
7a:78:29:dc:61:42:f4:ed:f6:0d:3c:9c:88:8b:93:40:a0:4d:
bc:aa:37:1b:fe:5c:83:66:2d:64:d5:bf:5f:83:f4:f8:b5:11:
b6:b8:31:a9:7a:ba:52:cb:99:c8:80:2e:8a:57:99:0f:ac:86:
3d:8e:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:01 2025 by rpki-client