Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: wiS8DA1GgbLrn0m42Awecur0q00WGn6YYwPPi8uZNoM=
Subject key identifier: E9:3E:89:99:77:13:C5:9C:D0:0E:7C:F3:57:2F:C5:0D:D6:28:AE:6F
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019747B08ED347557E98654236903360DDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0EA4
Signing time: Sat 07 Jun 2025 00:00:42 +0000
Manifest this update: Sat 07 Jun 2025 00:00:42 +0000
Manifest next update: Sun 08 Jun 2025 00:00:42 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: xP99qlob2ZH4yNw6o1ELBo6NHx3yRJauBGqqhH1Xgx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:8e:d3:47:55:7e:98:65:42:36:90:33:60:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jun 7 00:00:42 2025 GMT
Not After : Jun 8 00:00:42 2025 GMT
Subject: CN=e93e89997713c59cd00e7cf3572fc50dd628ae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:7d:83:1b:3e:2a:fa:44:91:c9:44:59:ce:
5b:8f:bc:b2:c5:9c:22:1a:50:ab:9b:25:fb:20:80:
65:2d:c0:f6:d8:b5:62:9e:c8:79:c7:4e:59:97:11:
ff:a0:d8:4b:5e:24:13:52:c7:78:88:04:a4:cf:2e:
09:99:7e:c4:0e:65:14:2c:78:b4:fc:7f:af:52:4b:
3f:57:a2:ca:38:f4:ff:8d:30:fc:cf:ea:b3:c0:f9:
fc:39:a9:be:a6:0d:17:ba:5a:aa:c3:78:07:88:58:
4c:1c:6b:c1:d3:48:ef:75:97:c7:ab:5f:5f:04:c2:
c3:9d:00:32:14:a6:2c:e3:1d:79:ff:27:3d:74:a0:
e3:22:22:fa:e2:a8:f3:4f:75:2a:eb:24:c7:7f:74:
19:8b:a6:f0:0c:e3:40:d2:6e:87:d7:c3:c5:c5:2a:
9b:86:dd:80:fc:f9:20:3a:76:ae:91:d0:08:c4:ac:
67:3a:1e:94:57:f8:47:b5:f2:d1:96:c9:98:84:38:
4c:a7:88:51:a7:72:c4:f3:23:a6:da:97:d3:1e:d1:
c8:9a:c4:17:35:0c:fb:f4:93:28:b0:e5:47:ee:c3:
64:7e:3c:9e:c6:11:4b:99:2c:19:54:47:7e:b0:75:
90:66:2c:35:29:65:95:12:27:70:0b:fa:ae:83:56:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:89:99:77:13:C5:9C:D0:0E:7C:F3:57:2F:C5:0D:D6:28:AE:6F
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:42:1e:f1:bf:7a:ca:86:f2:38:6f:43:b7:5e:b3:7a:8e:
38:d6:8f:47:ce:3a:72:6c:ef:a6:ab:15:23:77:37:7d:53:c9:
cb:f4:ad:a5:c8:1b:dc:23:2d:18:3e:7c:99:c2:0b:7d:b1:c7:
95:fc:53:d5:03:e5:bc:af:9e:86:55:bb:75:30:5a:d1:b4:33:
78:c1:49:51:7d:b2:d2:f4:e1:f2:02:55:a7:36:03:ae:e3:3e:
75:2e:41:ae:30:68:56:9e:08:60:c0:ba:a4:50:1b:7e:75:66:
2b:1c:00:c5:5f:be:82:9f:04:16:14:fa:df:ed:02:05:9b:53:
30:c3:c7:92:12:90:72:0f:fe:cd:c3:7f:0c:ee:0d:a8:e6:30:
20:af:5f:2c:4b:07:be:07:6d:a9:ea:db:fc:19:96:1b:54:38:
69:1c:5b:fc:c1:31:9f:57:06:62:93:37:0d:d4:07:84:ba:a3:
8a:13:34:6f:cb:07:98:e3:ee:c3:5f:a6:8a:06:ee:16:c0:a1:
5b:f7:fa:53:8a:8d:d7:3e:6f:74:13:bf:cb:72:70:ba:45:db:
75:95:27:04:e5:6b:23:73:6a:c7:89:83:11:92:ef:ee:1e:a5:
25:c2:2f:ff:f2:f0:0d:b0:6c:81:30:53:09:39:1a:f4:dd:03:
f9:bc:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:14 2025 by rpki-client