Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: BrCi6g7RQf2RdQJ9AGVLJjhCNIW2p6CA/HkqGrE3M8c=
Subject key identifier: FE:8E:0E:6D:E3:17:99:80:01:AE:AA:05:1A:96:F0:D4:A8:59:CC:1A
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019749682ACE41A2281143CF1BB4EDB3FD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0CB6
Signing time: Sat 07 Jun 2025 08:00:52 +0000
Manifest this update: Sat 07 Jun 2025 08:00:52 +0000
Manifest next update: Sun 08 Jun 2025 08:00:52 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: V1weOWmnKfa132u2fxlpL4cCgBhIWxj5dYg1kO2EW94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:2a:ce:41:a2:28:11:43:cf:1b:b4:ed:b3:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Jun 7 08:00:52 2025 GMT
Not After : Jun 8 08:00:52 2025 GMT
Subject: CN=fe8e0e6de317998001aeaa051a96f0d4a859cc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:ee:ca:6e:b3:2c:49:14:68:6f:aa:bb:52:
0d:04:df:5b:36:1c:38:4e:6c:eb:8a:8a:41:eb:9b:
bf:c0:5f:5a:0f:fe:54:45:d9:16:cd:5d:be:b2:31:
b5:cb:aa:ea:dd:6a:d6:b5:27:0a:2a:00:77:b1:c9:
0b:56:43:02:16:bb:e5:0b:41:72:9c:c8:06:40:7b:
6e:45:8b:06:1d:05:51:9b:b6:af:bd:bb:90:5c:03:
37:24:c6:51:33:56:ca:7f:2b:13:81:a8:7f:77:f7:
17:75:a7:0f:57:1d:6c:4a:e1:66:4c:9f:05:df:30:
05:53:84:9f:20:41:ac:5e:ed:c9:16:19:f3:00:8d:
59:dc:58:75:68:81:89:5a:e3:c9:0d:a2:fc:33:78:
0f:27:21:dd:5a:d0:82:86:3c:6e:2a:52:ec:2d:42:
39:10:c5:be:e0:aa:54:2b:f4:77:eb:93:67:77:3b:
36:c4:be:cc:87:33:21:db:40:64:08:b7:2b:bb:4d:
d7:f1:1f:dc:ab:d7:20:21:a2:f6:84:73:de:5d:71:
09:c5:b7:e2:e4:d0:e9:31:5f:6f:58:5e:b7:73:9e:
7f:12:76:f0:a6:58:3f:76:45:23:29:95:68:d4:c0:
a0:7f:ef:b5:84:c9:8f:73:b2:ed:83:08:58:b7:0f:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:0E:6D:E3:17:99:80:01:AE:AA:05:1A:96:F0:D4:A8:59:CC:1A
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fb:67:e2:2f:eb:81:5a:34:6e:60:21:34:3d:37:e0:fa:5f:
c8:82:0b:9a:d0:38:26:98:5a:af:93:74:67:73:7d:d8:b2:d7:
31:07:bf:17:96:75:58:4a:d2:ae:da:c2:73:40:43:c0:12:2d:
c1:0e:56:20:27:62:35:b2:3d:e7:43:2c:70:5e:8f:c3:76:f6:
8e:b4:a4:f7:09:32:b5:49:e7:e0:d1:05:a7:28:25:96:a5:9e:
a6:3a:61:61:18:ae:1c:10:27:b0:25:26:d1:bb:be:ad:d2:2f:
c3:d1:ad:10:52:fb:61:f8:78:6c:36:ca:4b:4d:de:fd:de:c5:
12:cc:09:b7:8d:c0:05:f8:1c:f7:6f:fa:dc:5a:b6:41:fc:4d:
7e:e7:ff:50:ad:37:aa:8e:1f:8a:96:01:2d:15:3a:0f:ea:e0:
8a:fe:8f:e5:55:c7:47:af:2f:b0:9a:7d:dc:e4:7b:d5:39:09:
05:30:8c:ca:48:24:cc:ba:c4:2b:4f:b9:74:e5:23:52:72:57:
24:f8:5c:fb:9b:f6:7b:25:5a:e2:fb:7d:e9:a3:70:ba:d3:e3:
2b:03:f3:75:d4:23:71:8d:12:a2:6e:d0:dd:f4:b5:d1:66:5e:
63:e3:0f:40:f6:0d:c1:91:3c:88:67:98:4b:a9:8e:64:39:57:
a4:a5:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:58 2025 by rpki-client