Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: BR4cecDWVWB/swzbvryj0an7UbiDqnAfII8I76iSMEo=
Subject key identifier: 38:88:91:C8:0C:FF:E7:DA:A1:F6:81:33:C3:CC:61:95:E3:25:2C:91
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01976EF537D6DFBEE94EFAF08ECB5095E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 15:00:53 +0000
Manifest this update: Sat 14 Jun 2025 15:00:53 +0000
Manifest next update: Sun 15 Jun 2025 15:00:53 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: fih1uCW0KgnOP6H4ezWgaEW/HmgvsyzWP8Eu5FZ3K1k=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:37:d6:df:be:e9:4e:fa:f0:8e:cb:50:95:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 14 15:00:53 2025 GMT
Not After : Jun 15 15:00:53 2025 GMT
Subject: CN=388891c80cffe7daa1f68133c3cc6195e3252c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:48:4a:ec:a9:4c:d2:1a:02:28:d5:71:e3:
b8:77:34:2f:c9:fb:65:d7:49:04:3d:da:63:d6:f6:
c8:4f:41:86:8a:10:7e:34:4d:09:ca:9b:5c:6e:35:
e2:3d:d0:98:c2:70:0c:ec:2a:b0:c6:23:1b:2d:f4:
70:c7:68:1b:22:26:49:17:5a:42:17:61:ad:dd:32:
11:57:7a:1d:f8:6f:29:65:60:f5:45:14:ab:33:4e:
8f:a9:e5:12:c0:97:55:00:05:52:24:3a:21:d1:15:
cc:da:8c:d2:36:a8:be:9f:1c:42:49:40:fb:0a:82:
75:6a:1b:67:1d:af:e9:aa:23:e4:a0:62:dc:d3:75:
0b:5b:16:f3:fe:a5:96:d3:17:a7:c2:ad:4f:15:c9:
e5:95:88:35:78:3f:7f:9d:8e:aa:32:51:85:87:5d:
1e:93:76:27:36:8f:8c:39:68:66:09:c1:0f:af:4a:
5a:6a:e5:ec:f1:14:04:a4:20:3a:71:f8:3c:bb:0f:
b2:02:11:4e:16:5a:48:c5:ed:5d:57:f4:0a:4b:99:
bd:e2:75:f0:f0:42:70:5e:ad:f0:3a:5b:ca:e4:f9:
a3:aa:55:fd:a8:bd:f8:45:b6:8b:c8:15:b3:c9:a4:
c2:06:8b:34:99:4b:a1:dc:1e:72:f3:f4:33:6b:40:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:91:C8:0C:FF:E7:DA:A1:F6:81:33:C3:CC:61:95:E3:25:2C:91
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:df:ad:4b:c2:ba:a4:5c:bf:78:99:27:27:5d:52:93:8f:7b:
97:4c:8b:8b:5d:74:16:10:32:2b:8d:ea:25:91:4e:38:f1:92:
e7:46:ba:0d:ac:a5:ce:5d:e3:ae:82:f7:18:86:ec:f0:74:ef:
d9:5d:3e:e6:dd:e6:b7:e4:73:db:ec:a3:49:a2:6f:51:56:93:
65:6d:c4:59:9d:41:5c:65:4c:90:9c:3c:34:de:27:05:c1:8c:
89:f5:6c:9c:8e:c2:c6:23:91:dd:05:8a:fa:16:75:20:74:96:
bd:f3:bc:b6:78:1c:55:68:8a:c9:2c:02:37:08:1c:84:be:42:
80:6f:07:0c:6e:0e:cc:fb:e9:ef:35:67:cd:a4:d5:a7:f5:16:
06:dd:86:46:39:93:91:0b:e0:89:e5:8c:72:f9:ec:a9:c9:d0:
60:13:3d:2e:71:02:dd:45:f9:43:47:3c:66:f4:ce:c8:82:bd:
50:1e:b9:e1:08:33:70:0f:7d:56:6f:c2:e3:79:1c:db:ce:f6:
37:05:e2:c2:af:77:02:53:0b:57:71:6f:b7:52:22:c2:c5:b9:
e0:e2:9b:c1:e7:2a:65:9b:37:44:3a:6b:ca:5a:f8:c1:bb:3a:
65:9e:ff:72:0e:2c:0c:3a:93:fa:00:a7:ca:41:be:5d:17:24:
94:94:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:31:51 2025 by rpki-client