Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: Dmq5xlDRWAobBdtAEIWUi2n6Hl2rpoiBy7sp5UltFlM=
Subject key identifier: 59:F2:64:81:1C:16:83:81:9E:1E:3B:39:4C:EB:99:63:B5:C1:EA:BF
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 0196A61CE3F7695684562213967760EC86D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 058E
Signing time: Tue 06 May 2025 15:00:33 +0000
Manifest this update: Tue 06 May 2025 15:00:33 +0000
Manifest next update: Wed 07 May 2025 15:00:33 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: WGBu0jts1nQex2BGPCQZjyqcKoABnQ3SfDFA17roR8I=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:e3:f7:69:56:84:56:22:13:96:77:60:ec:86:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: May 6 15:00:33 2025 GMT
Not After : May 7 15:00:33 2025 GMT
Subject: CN=59f264811c1683819e1e3b394ceb9963b5c1eabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:1e:89:6b:13:dc:db:df:f5:3b:23:52:1d:
eb:81:16:3b:ce:f2:57:96:db:ee:a9:2e:be:af:a9:
62:92:e0:c4:f4:a6:7e:bc:53:e0:66:8b:da:29:f7:
6e:db:00:44:3f:b8:2a:0f:90:60:20:4a:1d:e3:df:
f8:ef:39:36:37:26:98:f3:27:74:f4:06:9c:c4:ae:
91:24:0e:55:7b:ee:62:bb:3d:d0:83:f1:5d:74:2f:
1a:a3:47:16:61:5b:2e:7a:93:5e:c1:83:66:e4:09:
94:8b:1e:ce:1b:d3:b9:15:c0:cf:73:27:44:71:96:
12:60:8b:6c:77:f2:d5:c2:b8:80:d4:bb:92:41:ec:
57:a9:4c:d2:d6:72:3c:6e:79:bf:e6:7e:25:61:d8:
df:3c:6e:97:fd:1e:f0:2b:1f:81:02:85:05:db:0c:
61:71:e3:ce:bd:58:b7:d2:d7:1b:b2:c8:3d:28:8d:
a5:96:0a:b4:25:61:a1:d8:30:84:2d:e3:af:31:be:
d7:3b:18:fa:e8:8d:e1:40:1b:a3:35:d2:44:1d:69:
8b:1e:24:02:f6:99:80:c1:52:51:84:46:bc:53:02:
81:25:bd:b2:1d:43:5f:83:bf:60:48:e6:cd:f3:ee:
18:24:3c:12:65:09:68:b9:0e:a0:ed:24:11:bc:5a:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:64:81:1C:16:83:81:9E:1E:3B:39:4C:EB:99:63:B5:C1:EA:BF
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:c3:e9:b2:fb:2a:af:04:69:81:db:30:8b:e4:0c:e6:9c:
43:03:f3:35:c7:89:65:10:0b:02:93:63:1c:22:ce:6d:37:08:
2a:14:c8:3d:c3:b9:43:81:bb:8a:b2:7c:f2:8b:55:33:6e:b4:
aa:9c:c2:4f:57:b7:f9:a8:50:45:bd:14:f6:99:1a:81:61:bd:
60:b6:cf:c6:76:d6:39:dc:9f:c1:28:14:6d:56:ae:6b:29:a3:
7d:ec:4d:85:2e:03:fa:aa:be:5e:1e:da:52:fa:05:b0:51:69:
9b:27:bb:8f:b8:aa:fa:5f:eb:a6:35:c3:2f:95:cf:9e:0b:ef:
3c:2a:13:db:49:aa:57:9d:39:f0:cf:62:c6:7d:bc:89:58:e3:
5b:62:d5:7a:2c:4f:ea:0e:de:90:fe:e1:c3:1c:2c:d0:3c:08:
5c:52:e5:06:ec:c6:52:ac:af:13:c9:41:a2:e8:72:1e:4d:0f:
45:6b:a3:51:ed:26:ce:ac:36:ae:c2:76:9f:81:76:1c:da:d3:
b2:ad:4c:b9:6b:c2:7b:19:73:36:a7:a0:4f:3f:6b:c8:1c:71:
fd:32:b2:c7:70:99:f1:b7:c1:80:45:cd:19:12:70:23:99:77:
75:0c:5b:7c:48:30:a4:c8:1b:a0:ac:5e:85:6f:3b:c1:95:80:
29:f9:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:18:05 2025 by rpki-client