
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: vxOFDeg74LwALWYzFeYtEKi67Yo8P787QFSlLS+AEyM=
Subject key identifier: ED:E5:A1:89:3A:7F:47:9A:1C:9A:06:12:0B:64:A5:C7:95:D0:44:09
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01974CD7918DB30D1B19E09CFBC009E24C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 084A
Signing time: Sun 08 Jun 2025 00:01:25 +0000
Manifest this update: Sun 08 Jun 2025 00:01:25 +0000
Manifest next update: Mon 09 Jun 2025 00:01:25 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: CmsLV0Y/D+o+CiIUUwgPcLlYQG/vZllwb35RpUmiInA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:91:8d:b3:0d:1b:19:e0:9c:fb:c0:09:e2:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jun 8 00:01:25 2025 GMT
Not After : Jun 9 00:01:25 2025 GMT
Subject: CN=ede5a1893a7f479a1c9a06120b64a5c795d04409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:d1:b5:25:53:a1:21:79:3c:56:39:28:13:
11:01:fd:7b:64:3f:b7:64:d2:09:44:63:f5:3e:5f:
f2:08:c7:7b:37:81:08:64:2f:eb:70:c1:8d:13:c6:
dd:6d:fb:00:df:c4:8a:14:6e:e6:0d:1d:0a:20:11:
b1:d8:2c:80:d3:68:08:8e:6c:03:85:12:0c:15:15:
c3:dd:ca:7d:a7:67:c6:b9:b5:50:47:0a:ce:48:83:
a3:e8:47:50:ba:f7:80:52:ec:96:62:5d:0f:ef:6c:
52:fe:ae:f2:ab:82:4b:7b:f3:98:50:22:93:1d:09:
be:68:f1:69:90:de:2d:f8:be:22:26:7d:6f:c9:ca:
d2:cc:69:48:eb:da:67:b7:ec:c3:53:ac:67:82:52:
0c:a6:53:fb:2f:47:4b:44:a3:e2:2c:97:6f:4f:42:
aa:d7:40:ae:58:c7:f4:f9:3c:67:79:4f:40:db:f7:
12:bd:17:a2:68:a3:00:63:71:92:65:d6:41:e6:c0:
7e:fe:1f:de:61:4a:17:a3:5b:04:bb:df:26:d2:19:
bf:67:0a:9c:9b:f1:44:e5:c5:18:e9:88:0f:27:f7:
9e:c6:46:e3:2d:f5:a8:81:61:cc:70:ff:70:d8:45:
ee:74:c7:6d:e8:12:11:cb:8a:4b:bd:d6:0e:2f:8c:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:A1:89:3A:7F:47:9A:1C:9A:06:12:0B:64:A5:C7:95:D0:44:09
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:f7:40:21:18:df:6b:21:05:5e:28:e6:55:fc:b6:f8:cc:
0f:c9:f4:37:63:ab:44:73:47:49:c1:c2:6c:15:77:6c:6b:8a:
35:63:36:d1:83:ca:b9:55:1f:f0:54:04:86:2e:ed:ee:c7:36:
51:ce:47:b2:a8:88:a2:74:e2:14:1a:2c:5f:21:d0:dc:6b:45:
98:58:15:00:bd:39:e5:d2:c4:d5:6c:96:d2:6b:92:f2:bf:c5:
e8:5b:3e:0e:19:27:c2:b4:d5:e8:d2:d8:08:83:6e:0f:c9:61:
32:9a:87:48:da:0b:1a:64:d6:b6:5a:78:85:6f:9d:70:25:b7:
da:b1:e1:c3:64:0f:b3:56:98:60:1a:90:06:43:23:53:72:9d:
ce:eb:a9:64:a0:fd:70:43:a4:31:bd:21:5f:9d:1b:2c:f0:95:
49:be:85:b1:60:47:b2:b9:3f:87:3c:e1:9a:e4:26:0d:12:d7:
b7:a2:8d:9b:e4:04:bc:98:4b:55:cd:5e:d0:cb:f3:08:42:ed:
aa:a7:d3:99:63:16:35:20:0c:0a:09:c8:33:72:06:e9:96:c5:
90:a0:94:b3:83:27:85:e1:5d:99:59:1e:69:f6:16:39:3e:c8:
7c:9e:65:2a:2e:0b:f7:fb:39:fa:89:04:93:66:a8:65:c0:3a:
89:df:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:30:24 2025 by rpki-client