
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: rj2+t64wkhYA2YXiN3WRV3KZiwefwR5bX8AGtiQ7vVc=
Subject key identifier: 49:7D:FF:4C:EF:05:2E:77:19:01:3D:5F:05:80:80:D4:5B:63:B9:74
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 019749D61326110E72B890E119C7F6D36306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0973
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: LH9zfj7HaMiAzpUHk9+YvHTsaHhngSfC8T7vC682vL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:13:26:11:0e:72:b8:90:e1:19:c7:f6:d3:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=497dff4cef052e7719013d5f058080d45b63b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:68:d0:bb:b2:08:8b:fa:1f:ab:19:63:5a:
8f:a2:83:90:f2:dc:99:e8:fd:1e:73:d9:c7:3b:94:
2c:3c:e9:b6:33:04:c0:75:6f:f2:07:cb:60:62:0e:
ba:a1:dc:5e:bd:a9:8a:88:d7:b2:4d:6e:25:65:71:
bf:7a:dc:6f:95:53:df:78:6f:02:cb:cd:9f:07:39:
5d:95:45:6b:8a:07:c8:d6:ef:3d:02:3e:c9:e8:5b:
e3:20:65:d7:c3:7f:cf:27:b6:79:54:d0:6b:30:e9:
0a:b3:d5:eb:83:02:d5:9e:3d:41:5f:3a:9e:dd:81:
d2:61:8b:cc:fd:d6:b7:5d:b6:61:83:ce:5b:6f:2c:
60:5e:e4:00:50:8f:c3:1e:3b:2e:51:e0:ca:f3:64:
9d:db:49:46:24:1c:8e:0a:e0:3c:88:8d:7b:21:7f:
33:6f:d3:1c:ed:0d:98:62:45:f5:66:8a:90:a6:07:
f8:f4:88:95:25:0e:92:20:21:91:ff:5b:8e:3c:20:
65:aa:2b:12:e5:1e:fb:04:24:58:f1:e0:4a:79:41:
b5:d3:5e:ff:06:15:67:41:ff:d0:b3:da:a4:d2:42:
c7:73:24:92:58:6f:e2:ec:12:00:58:ef:16:a6:54:
e4:df:23:66:b4:01:4d:e0:40:21:a7:da:cd:24:a7:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:FF:4C:EF:05:2E:77:19:01:3D:5F:05:80:80:D4:5B:63:B9:74
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:c1:f7:c3:1b:46:b2:bc:5b:b2:f5:0b:17:76:fa:b4:cf:
8d:ef:f4:c3:33:d9:e0:fb:42:28:90:60:bd:1c:64:ff:11:5e:
da:06:45:82:e2:38:d5:5a:4b:f9:ef:6a:55:18:08:6b:64:c1:
e8:55:68:82:e7:4e:1d:02:4b:08:5e:0b:37:88:88:90:cd:0c:
51:4b:a1:8b:72:64:05:42:7d:4a:34:39:88:da:1f:a8:5a:29:
f7:5a:5d:35:73:66:ec:92:29:99:67:a5:10:9a:41:c5:34:b2:
b5:e1:5f:fd:2e:42:f1:78:32:59:2e:69:37:3e:d6:9d:d3:30:
09:05:94:4d:09:06:7e:28:74:6f:9a:de:a2:ba:94:59:d8:33:
2d:1c:3a:3d:42:46:c6:b4:80:cb:43:0d:35:0f:ef:6e:de:99:
9e:72:3d:0a:b9:8e:48:8c:56:c0:5c:f0:81:b3:ec:57:22:fe:
32:10:d4:a1:ff:7b:df:11:83:ed:ed:47:c9:f7:1c:2a:41:63:
46:87:a9:10:9d:74:e3:65:92:c9:12:8d:24:20:c4:a1:88:39:
9d:9b:d3:f6:39:76:3e:15:ad:20:7b:ce:02:5f:a6:1b:2a:06:
90:7e:d3:42:da:b9:e1:84:4d:1e:45:8d:16:58:01:4c:c8:13:
fb:68:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:27:03 2025 by rpki-client