Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: Zy1mx8uKMXchMOapxsFFLOUGPrsEUbKfZq9p/e/8/7k=
Subject key identifier: 8F:4A:7F:96:F3:DB:61:92:8A:92:C0:D1:64:4E:38:BA:79:3E:E9:21
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01976D06A95817201B333B59421E76C5BAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:42 +0000
Manifest this update: Sat 14 Jun 2025 06:00:42 +0000
Manifest next update: Sun 15 Jun 2025 06:00:42 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: VC48Lhq41/pmDxdzB9Cl2cJZC8tUKOr6YI85FVUd72g=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a9:58:17:20:1b:33:3b:59:42:1e:76:c5:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 14 06:00:42 2025 GMT
Not After : Jun 15 06:00:42 2025 GMT
Subject: CN=8f4a7f96f3db61928a92c0d1644e38ba793ee921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:c4:c5:89:37:a5:d4:6d:db:ad:23:2a:dc:
1a:6d:cf:74:f9:70:c0:1c:ff:8d:8d:34:d5:90:35:
04:f4:a7:77:ed:01:8f:59:a8:f6:af:5f:da:7c:cf:
af:ac:9b:15:0f:c0:4a:82:ed:35:a1:50:45:15:f9:
6c:59:a1:e3:3a:d3:05:75:25:00:57:12:ce:26:5f:
5e:2e:27:28:ef:87:57:77:fb:05:db:55:70:b5:14:
93:c5:aa:f6:e8:2e:84:f5:20:6a:8c:77:1f:5c:ed:
4e:b6:a4:db:63:92:5f:b7:78:af:8c:12:ad:4e:65:
1c:47:da:36:44:ca:c9:c3:93:fc:4a:80:4f:b1:09:
a7:7f:40:31:27:c4:f4:8d:92:ff:2e:37:90:e4:d5:
14:47:c8:fa:e1:47:3e:3a:c7:81:7a:75:3f:de:83:
8e:5c:b1:07:cc:5b:b2:99:1d:58:4a:f4:a8:31:bc:
67:e8:bf:7b:62:60:1f:fa:06:81:6f:d5:f6:01:33:
25:65:39:f8:c6:01:c2:77:7b:0e:9c:0d:01:6b:30:
3d:30:83:e3:b9:08:40:f9:50:41:df:b0:8c:53:a5:
e0:7a:8b:22:a2:a6:c1:01:3a:14:d0:8f:5e:bd:2d:
a2:56:38:ea:ed:84:04:b1:52:bf:0d:f8:e4:8e:6d:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:7F:96:F3:DB:61:92:8A:92:C0:D1:64:4E:38:BA:79:3E:E9:21
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1e:83:6a:82:20:6c:03:18:3b:73:bf:a7:98:db:2a:76:19:
e2:26:5e:6a:a5:c1:af:98:5a:bd:60:ba:d7:4f:c9:fc:3d:ec:
dc:b6:db:27:55:f4:fc:db:1e:11:5e:3d:94:90:84:99:cc:f3:
b1:08:2e:ff:95:9c:3d:13:3f:fa:89:94:35:e1:1d:e1:80:e4:
8f:61:20:fd:c7:ef:50:ed:7d:22:8c:da:5b:a9:12:23:fc:5e:
f8:67:e9:34:77:bf:39:3c:93:62:2e:4e:05:e8:5d:df:36:05:
20:81:9c:5f:87:ec:79:97:c2:8f:aa:5a:6e:49:d3:97:b7:51:
07:87:82:a3:6f:d6:5b:f0:04:ba:c1:19:0c:a7:96:22:6b:94:
d2:d1:01:1b:dd:e9:bf:29:c3:1e:b5:3b:08:1e:dd:11:1c:20:
a3:74:4e:ed:9d:52:99:d1:c2:87:8d:7a:75:48:0f:3f:d9:47:
9e:fb:cc:bd:a2:f5:d2:c5:b7:8e:97:8b:ec:95:d0:58:83:e9:
56:4f:24:c0:c9:ae:d7:87:39:90:15:19:69:80:05:36:34:49:
cf:e6:42:e3:1b:1e:0a:18:69:67:6c:86:d0:f7:c1:0a:d3:9d:
24:36:c3:31:f7:01:cd:b0:4c:39:b3:80:97:65:94:b6:99:2b:
a9:49:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:07:02 2025 by rpki-client