Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: Wrsdm42cd9LO3xlygQ11Kq6SrOgoMkIZ44YHhGbXzN0=
Subject key identifier: 02:2D:EC:20:94:59:9D:0E:6E:D8:30:BB:67:84:DA:04:6B:05:63:CA
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01976170C1DD3AECF0DF92E27E508A244995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 00:01:08 +0000
Manifest this update: Thu 12 Jun 2025 00:01:08 +0000
Manifest next update: Fri 13 Jun 2025 00:01:08 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: gsJIrUmgTODAZSBouOQg2+vjOZ/n0SgdNg9fzVjRGLc=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:c1:dd:3a:ec:f0:df:92:e2:7e:50:8a:24:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 12 00:01:08 2025 GMT
Not After : Jun 13 00:01:08 2025 GMT
Subject: CN=022dec2094599d0e6ed830bb6784da046b0563ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:0c:20:08:2c:e3:25:64:47:c6:77:69:71:
a8:b6:74:18:11:dc:8c:26:11:25:e6:78:92:28:6b:
db:7b:2d:82:44:ab:cd:b5:fb:dc:7d:89:52:8d:6d:
cc:bc:7e:70:10:b8:a8:31:4d:51:de:02:6c:12:8a:
b5:b8:7a:8d:ba:4b:27:54:39:dd:0c:44:de:d4:7e:
14:2a:b0:25:95:20:61:12:e5:ab:46:53:35:21:8e:
a5:04:e0:d6:19:cb:57:9c:cd:43:85:73:6d:18:4d:
87:12:fb:68:45:53:e8:03:74:d5:0a:4e:ec:e8:15:
62:fc:e5:57:da:44:30:36:e0:f9:0d:76:ea:54:87:
d9:4d:2b:c5:3d:a4:60:8e:f4:8c:d0:c4:dd:b2:38:
99:e6:24:cd:d7:f4:c5:6f:78:ab:49:16:43:6d:a6:
86:b9:45:9d:26:bf:22:1b:e3:36:aa:2b:cf:a7:d8:
87:83:a0:fe:dd:16:46:5e:bd:df:ea:9c:33:8f:75:
6d:a2:c7:81:a2:b7:66:b1:d8:c6:26:3f:91:c2:0e:
66:38:15:7d:6b:93:03:a7:08:e8:f8:a1:d2:f5:69:
93:19:5f:bd:02:4b:dc:60:54:8a:cc:74:a7:b1:6e:
57:90:2e:6e:cb:96:a5:da:ff:96:1f:f4:9a:22:59:
50:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:EC:20:94:59:9D:0E:6E:D8:30:BB:67:84:DA:04:6B:05:63:CA
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cb:01:ec:bd:d0:9b:27:f3:28:84:67:ea:02:05:23:13:2f:
4c:5d:c6:46:62:af:84:7a:b0:e2:d1:fc:3f:a3:6a:ec:3f:6b:
cf:43:67:17:4d:1a:8c:e7:c9:91:77:a5:58:f1:70:74:63:0a:
af:71:17:02:71:81:35:33:57:7d:e2:59:90:3d:e9:e6:76:9a:
71:53:11:ad:96:5d:31:96:76:26:1b:7e:aa:3d:c0:7d:04:2f:
6a:f5:36:cc:cb:e3:e3:cc:24:78:bc:75:4e:8d:3f:13:dd:14:
3b:85:87:5b:19:37:87:70:55:41:43:33:1e:28:8d:56:cf:8c:
82:78:a1:8d:33:d4:e6:bb:62:9e:e9:06:c7:ca:c6:66:13:99:
6d:82:ed:09:6c:57:7c:08:86:9e:4c:c7:9d:a5:6d:da:c9:87:
80:53:60:eb:02:40:f4:c7:36:00:47:20:43:73:a7:f5:dc:57:
1f:5e:7c:f2:88:9e:8f:5a:6d:ad:a3:b6:b2:93:03:26:0d:39:
d2:17:7d:85:06:44:ab:a7:50:7f:55:6f:89:23:2a:a3:0a:74:
5f:72:fa:f9:b9:dd:21:0a:3f:8f:36:25:9e:7f:ac:98:f1:02:
89:c6:5d:62:29:bc:5e:33:11:ef:17:3a:f7:d8:b6:d0:d3:49:
f9:a0:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:35:07 2025 by rpki-client