Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: GN0ZEB7ZMthpQZtYNZ9aQip8ZIBhk0xN7PXIyYMTDf0=
Subject key identifier: 9F:C4:FC:DE:AC:B4:C6:1B:08:83:78:CC:7F:49:65:5E:44:97:88:74
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 0197488CC94858726C61D969AB6EE7F3925E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0A8D
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: hTi6gmihxYkFe7X+6Zyszn8g6DDHugNQuUTi0q1cG4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c9:48:58:72:6c:61:d9:69:ab:6e:e7:f3:92:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=9fc4fcdeacb4c61b088378cc7f49655e44978874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:4f:ff:20:11:4b:9d:c1:19:be:d6:38:ac:
62:40:70:0d:da:86:62:0c:3e:5f:17:cf:29:98:22:
31:21:a4:d2:1c:1a:f7:7c:d1:bf:c8:13:6c:f4:95:
52:43:09:4b:f7:8d:b8:d7:09:4f:25:6f:46:cb:01:
11:f4:1c:5f:32:10:3a:f0:c1:6f:7b:0f:78:9e:90:
7b:72:3a:70:f1:9c:56:37:47:88:94:92:f0:4d:b0:
5d:f3:34:3b:19:43:00:7b:19:b6:65:9d:95:95:3f:
28:cf:a2:e1:00:0a:8a:62:85:29:2d:c7:cd:94:d8:
6f:f3:50:27:46:59:39:4f:79:35:c0:04:90:dc:e9:
c8:0f:5b:a3:60:f3:5d:1d:ff:cf:92:25:fa:1d:be:
e1:0d:65:54:68:33:35:50:3e:d3:57:bd:a4:0c:17:
3c:44:60:27:1e:e2:34:92:56:0e:0d:86:a7:70:50:
2c:fd:fd:ec:01:e6:bf:26:4e:75:d7:c9:28:f5:7c:
92:2b:fb:e0:a0:bf:d7:07:50:c2:ac:b7:cf:0d:ae:
e7:a2:54:3f:d5:62:a9:3e:4e:f1:05:b3:3c:0c:04:
2e:e9:ff:36:16:fd:ac:22:6c:27:c4:d5:79:d5:9b:
85:ea:50:d9:72:c4:75:e3:f0:0b:1a:e4:48:01:0c:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:FC:DE:AC:B4:C6:1B:08:83:78:CC:7F:49:65:5E:44:97:88:74
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:0e:9b:87:65:a2:ae:5d:29:45:19:a1:a3:bf:65:19:fb:
0b:bf:cb:38:43:1d:3d:ee:b6:d0:f6:65:57:72:5a:7c:7e:c3:
e1:fa:94:0f:df:be:2f:a6:00:6d:35:9b:5d:96:ec:13:7e:64:
bd:46:2b:9a:80:de:1e:9e:c8:62:22:9d:2b:bc:e8:26:83:48:
e7:3b:d5:3d:0a:00:52:8b:01:f2:f4:cf:9f:d0:4c:a1:6c:94:
7c:78:81:29:ea:0b:ed:83:ae:50:5e:e4:50:30:2d:c5:3b:fe:
1d:26:34:de:70:4b:ed:93:9f:03:18:6d:4c:7c:6d:78:55:4b:
fb:26:7a:3a:e1:15:26:29:62:fa:5c:ad:c9:0c:e2:71:fe:c4:
61:be:3f:cc:d8:1f:ca:b4:af:1c:b0:c5:bc:bb:a8:1f:c3:2d:
6c:92:c7:88:cb:2a:7b:2f:26:7e:1e:8d:4a:88:93:ce:1e:92:
f7:39:60:8c:3f:97:41:e6:b4:05:e2:f4:b8:25:57:48:79:f2:
40:e0:2a:a5:d0:9b:ac:27:2e:ed:8e:6c:b6:23:0d:ab:77:20:
3a:be:75:02:3a:43:b9:b1:1b:1e:f5:45:8f:ff:3d:95:39:54:
66:9e:84:f9:12:6c:7d:9d:81:51:31:26:f7:36:2d:32:42:32:
a7:74:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:37:04 2025 by rpki-client