Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: Ui7hcfNeyH1V6a7lhsEQ6qmI00h2oPshdm6rrLYK78c=
Subject key identifier: D3:2B:DA:9D:50:1F:C4:C7:29:0D:A3:C0:6C:B1:1D:D9:9B:7D:F9:AD
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01974742F5A9BF8CF88F87544FDAC31E9DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 22:00:59 +0000
Manifest this update: Fri 06 Jun 2025 22:00:59 +0000
Manifest next update: Sat 07 Jun 2025 22:00:59 +0000
Files and hashes: 1: _-ujCkb2AK4IkutlVxIW61CZKcg.roa (hash: ZnHaosgaFt/JXW9m08DluSmRz1C9FDWxKl8XbDANYsM=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: bw2F3VNvnZo45LPcshc8RclLhgI7K3JSLjAMJUzuGpc=)
3: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:f5:a9:bf:8c:f8:8f:87:54:4f:da:c3:1e:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jun 6 22:00:59 2025 GMT
Not After : Jun 7 22:00:59 2025 GMT
Subject: CN=d32bda9d501fc4c7290da3c06cb11dd99b7df9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:84:66:31:81:9c:cf:dc:fa:7f:11:83:c6:
b2:af:1c:52:81:0a:99:7b:8c:64:71:2a:88:07:21:
fe:b9:c3:a6:3e:18:b3:19:03:49:36:52:e6:9b:88:
fc:e0:2e:f6:db:88:b7:8b:3f:a8:8e:b9:01:1c:69:
1b:22:d0:67:12:08:8f:51:42:89:31:ea:73:99:74:
b1:72:72:26:d0:13:c9:ad:0b:86:67:2c:ef:ef:cd:
95:37:bd:fe:16:be:8e:8d:e7:f2:12:a6:34:8a:15:
f1:3e:58:08:3f:63:cb:f4:49:63:4d:df:c0:ed:bd:
63:a7:64:4c:5e:51:62:d1:70:ce:7f:a9:1f:00:92:
9a:3d:a5:95:49:e7:e6:2e:dd:5b:f8:4b:c3:45:ba:
ee:ec:8f:23:cb:d9:83:62:90:6b:6b:ad:9c:d6:9e:
3a:37:24:3a:d2:4b:b8:c7:03:42:58:16:97:71:c8:
97:09:16:bb:d0:1c:f2:f7:00:7c:aa:44:dd:48:df:
1f:d1:1c:24:ee:42:9a:78:ca:58:a4:ad:64:88:45:
79:a5:a0:0b:47:6a:36:91:e3:b1:7f:c1:52:ff:cf:
cc:fa:3d:67:d3:d5:06:1c:d1:74:23:1e:a5:69:59:
72:a0:57:1e:a0:5a:1f:db:a4:2c:ef:f7:33:dd:f3:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:DA:9D:50:1F:C4:C7:29:0D:A3:C0:6C:B1:1D:D9:9B:7D:F9:AD
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:a9:74:7c:b5:16:ee:7a:52:0c:ce:49:09:a0:82:32:53:
e0:56:7b:d4:74:f1:77:cb:6e:d0:f7:e1:24:1b:44:6b:10:03:
2a:60:d4:97:e9:32:25:ed:4b:55:35:f0:7c:4b:7b:ef:30:5e:
0a:86:48:a6:6a:96:e6:bc:dd:c0:69:3f:69:c5:6a:b6:42:74:
74:3e:7d:0f:62:58:56:68:06:83:66:ba:56:1f:c4:bc:b2:a5:
05:fb:f5:cb:1b:6c:e1:78:c3:02:09:ef:ca:15:6c:e2:25:9d:
07:6d:50:6e:eb:59:c9:99:30:fa:cb:d1:26:e4:22:db:9c:ef:
59:b1:b0:61:45:82:30:2e:1a:00:16:52:36:4f:d8:2e:d2:89:
93:1d:49:7e:3f:9c:91:2e:e0:7b:2e:fa:c6:fb:f3:c5:24:f6:
93:7b:10:f6:22:ac:87:ba:a1:33:dc:c4:f3:45:9a:89:39:0a:
c8:f8:bc:46:95:c9:b5:7c:d1:60:b0:a0:b9:44:b6:a2:e1:16:
c2:13:b4:55:41:e2:68:ff:6f:bc:78:9e:c2:9f:20:a3:74:b5:
bc:2c:d1:0f:92:aa:a2:d4:cb:db:65:df:55:4e:3d:31:22:43:
f0:0d:eb:57:06:91:78:cc:6d:bf:1e:a4:9e:6f:3f:62:e6:d6:
a2:b7:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:11 2025 by rpki-client