Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: 1/AD5RheTh2bz4h0ZwaZfEaDiLD4SaMaYEwj5yxAMWk=
Subject key identifier: 07:FB:57:A1:99:D4:3A:55:FB:65:EE:7F:E4:54:86:56:4A:2A:78:C9
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01975D93BF1E6B157EF6685C2B1F4C3337E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 06:00:53 +0000
Manifest this update: Wed 11 Jun 2025 06:00:53 +0000
Manifest next update: Thu 12 Jun 2025 06:00:53 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 0RHR7Af+SDmTz5wqsIl+P8iICf42T3hfEg3J7mumkhs=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:bf:1e:6b:15:7e:f6:68:5c:2b:1f:4c:33:37:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 11 06:00:53 2025 GMT
Not After : Jun 12 06:00:53 2025 GMT
Subject: CN=07fb57a199d43a55fb65ee7fe45486564a2a78c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:62:d5:7d:0a:d5:a6:2c:1d:86:06:b4:bb:
f1:97:17:b6:0d:63:34:50:cf:54:e5:7f:cc:12:73:
ee:6a:1d:5b:7d:9a:5b:82:0f:5b:93:3d:d2:a4:b0:
33:e2:80:aa:25:f7:58:00:d8:ee:44:2a:8e:27:ca:
c2:f1:7a:f5:9b:26:76:20:3a:52:7a:0a:c0:f3:62:
a3:29:14:39:8d:0f:c1:cf:0f:5f:83:e9:7e:0c:16:
31:05:b0:49:bf:0a:97:c8:85:9e:37:6f:ed:ac:ac:
62:e8:3d:bf:e4:91:ba:74:ea:4f:14:b9:c8:c8:a3:
2e:f2:22:39:a7:f4:76:22:58:0e:f6:87:ba:94:fb:
4b:84:f0:d8:8c:82:93:0d:b6:9e:dc:c0:74:f5:c6:
a0:47:22:08:aa:a7:da:56:15:f7:8a:d4:51:6d:ba:
83:aa:46:91:db:75:b7:6f:8b:2c:32:ef:ff:a7:71:
dd:b1:64:f3:6a:d9:4f:c4:02:9d:38:f3:5d:01:06:
20:aa:8f:1a:13:6e:6b:2b:aa:50:85:c3:6f:be:46:
c8:c6:26:a0:e1:a1:63:0b:56:3d:91:1f:3c:bd:56:
ce:56:54:7e:76:68:f5:08:98:34:38:03:db:7c:28:
65:60:78:de:cd:8b:9e:eb:12:d0:6c:98:b5:3d:ce:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:57:A1:99:D4:3A:55:FB:65:EE:7F:E4:54:86:56:4A:2A:78:C9
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:d8:91:fe:27:8a:5c:85:d2:48:99:35:f0:b4:ae:ec:d8:
f9:77:ae:0e:f0:a8:eb:ee:99:b3:99:b8:86:05:1f:bb:37:2a:
79:5c:1a:fb:e8:39:b3:2f:ae:fa:f3:b5:77:9f:5f:3c:7b:0b:
39:72:96:57:b7:31:33:c9:07:ee:6b:45:f0:54:77:f7:6a:78:
05:9d:66:f9:bd:90:d4:7c:e1:ca:33:c4:11:b3:a9:95:ff:18:
31:ae:bc:a2:81:18:6c:7c:7d:4f:e1:85:1b:e9:83:a4:bd:b4:
72:27:96:4e:21:be:78:5c:a9:2a:1c:13:58:b2:5c:a5:c7:3e:
d3:c4:89:46:21:3b:4a:cc:c6:d6:22:05:e0:38:45:ee:ac:33:
de:43:ce:df:30:87:84:59:c7:09:e9:0b:d7:5a:16:09:b5:d9:
1a:80:94:9e:b5:44:26:cf:b4:0e:7a:29:f8:25:b9:21:31:90:
5a:9a:91:4e:78:fc:fb:17:2a:f8:1b:cd:31:56:df:ea:4e:e0:
85:e4:c9:ff:8d:62:3d:6c:7e:a3:7f:bd:92:e1:31:82:af:23:
d9:ba:82:17:61:7a:c7:24:45:d2:62:ad:80:6d:f7:a3:f9:1c:
84:af:62:64:ed:47:26:d0:b4:80:f5:9d:28:91:52:d8:d6:0c:
e8:a7:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:29 2025 by rpki-client