Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: dHplxJBn18lrFWIAh9C2p3xCMi2S+aQc6gXFQ69duj0=
Subject key identifier: F2:CF:C6:6E:72:AD:C0:0A:EC:86:C2:D4:BE:22:CC:33:88:7A:40:88
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 019754C7B0A6309418C87F4552F5BFF73B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 21
Signing time: Mon 09 Jun 2025 13:01:02 +0000
Manifest this update: Mon 09 Jun 2025 13:01:02 +0000
Manifest next update: Tue 10 Jun 2025 13:01:02 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: E72rVe7EdQ/4JtnAcgf09GlZH5TliEfZUeFhOpx+DNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:b0:a6:30:94:18:c8:7f:45:52:f5:bf:f7:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Jun 9 13:01:02 2025 GMT
Not After : Jun 10 13:01:02 2025 GMT
Subject: CN=f2cfc66e72adc00aec86c2d4be22cc33887a4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:f4:5e:97:fb:03:b0:77:b8:22:f3:67:fd:
5e:81:fd:55:a9:b8:af:03:20:4b:1b:b0:36:49:6b:
c9:59:16:89:53:77:65:7b:e8:aa:d5:62:1c:4d:23:
d7:bc:69:9d:27:d0:03:a8:4c:51:b8:4a:d6:f9:21:
d3:4f:fd:f7:f8:2f:c6:8b:9b:70:9c:9e:ad:c4:bb:
9d:b2:8d:3b:22:15:37:06:8f:1d:da:b6:a1:60:90:
88:93:a8:c1:e8:27:f6:e6:87:d9:c4:66:67:14:d9:
49:3e:6e:60:40:bb:b2:37:5f:80:d6:a9:59:b7:08:
75:fd:53:6c:96:7a:49:00:2d:28:9c:a7:dd:8b:63:
ea:14:9d:93:a8:91:92:9c:e2:58:96:4a:e7:01:17:
54:e2:54:19:eb:b3:f5:df:10:8f:3a:f2:83:7b:be:
1c:12:f0:40:2f:40:57:fc:00:85:e0:e5:b1:c4:fd:
b2:d3:d5:07:60:0e:b3:14:f0:fe:83:32:0e:04:46:
e5:e8:42:a6:37:2f:27:c2:0f:b3:85:47:45:9f:52:
c9:78:a3:38:48:81:62:2d:7c:57:b4:50:61:24:9d:
f2:0c:81:51:79:ad:63:02:55:ad:2c:0c:06:e8:51:
ae:13:6f:32:be:42:40:ce:19:78:80:c2:b6:18:0c:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:C6:6E:72:AD:C0:0A:EC:86:C2:D4:BE:22:CC:33:88:7A:40:88
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:a5:7b:93:8e:34:48:10:06:11:eb:f4:1a:b0:6e:eb:83:
ee:09:8b:2f:1a:89:c5:6d:5b:0c:03:8d:66:28:04:e0:27:50:
8f:9d:e2:9e:d5:55:bd:09:73:42:17:69:14:69:6d:6d:78:cc:
89:21:41:85:b8:20:1f:ab:b8:5a:d6:da:9c:ee:05:94:d3:34:
ec:e3:1d:68:1f:0e:8c:5e:95:46:64:87:d0:3d:1e:78:23:ae:
29:ce:e5:a8:10:09:05:6f:ed:54:b9:fd:be:74:fd:12:18:16:
9b:c7:05:13:4e:9f:62:92:dc:74:93:d2:a6:4f:1b:7c:85:83:
4a:10:44:68:d8:77:29:28:58:e6:34:41:63:aa:ee:3c:86:2a:
e2:10:1d:23:7b:76:d8:2a:ea:35:d8:66:42:e4:58:59:f1:90:
42:78:65:21:41:aa:68:b6:f9:c0:d1:e0:3a:dd:4e:18:58:a7:
7a:f8:d3:b0:a7:38:0e:fc:7c:6b:fe:77:62:a4:ee:e6:62:10:
e9:39:c2:00:1f:02:34:a4:79:67:b5:86:c4:9d:b9:00:75:7e:
a9:e2:c9:8c:c7:c9:9d:78:99:a2:27:0e:12:38:5f:ae:06:24:
54:b9:bc:41:1b:00:82:1e:72:64:40:ba:16:57:79:71:b7:9f:
70:4c:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:44:20 2025 by rpki-client