Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: MgHwt5CIJh72YnPDjbtKuMLAd85gcpG2zdoyebg8gPg=
Subject key identifier: E4:0B:7F:88:71:2E:17:71:46:D3:B9:69:FA:66:65:B2:63:96:8B:77
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 01974E20485D4B6BCE1CDE1BCF47BE0418E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 12AF
Signing time: Sun 08 Jun 2025 06:00:27 +0000
Manifest this update: Sun 08 Jun 2025 06:00:27 +0000
Manifest next update: Mon 09 Jun 2025 06:00:27 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: jw+Nr2Aq2hpT2LmCefbJXds5UTBKs4ldkiEEuXIYBdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:48:5d:4b:6b:ce:1c:de:1b:cf:47:be:04:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Jun 8 06:00:27 2025 GMT
Not After : Jun 9 06:00:27 2025 GMT
Subject: CN=e40b7f88712e177146d3b969fa6665b263968b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:99:ec:e4:ea:d5:d5:60:2d:34:5c:07:55:
7a:c3:c8:7c:98:27:17:1f:9d:77:f3:73:9a:f2:5b:
ba:6b:67:f1:e2:fc:ea:00:f7:d5:49:68:f9:1e:b2:
80:1f:70:71:79:74:e0:39:a4:6c:c9:c8:14:92:d7:
84:97:f9:c8:d6:1b:bd:4f:c7:b3:91:f1:bc:17:f7:
90:c1:e3:bb:18:f3:0a:bd:b7:a0:21:50:66:3c:d5:
7a:a4:c7:d9:13:8d:14:76:4d:3c:b1:21:d5:81:00:
88:f0:80:5c:00:5c:6c:80:d5:b4:6e:ec:cd:d5:5e:
0b:a5:55:af:a1:28:79:44:c7:07:e0:cd:18:46:ef:
ca:b2:6b:d0:ad:6a:af:1c:66:50:b3:ff:b9:5b:d1:
b7:93:54:5e:4d:38:d6:b1:65:f9:77:f1:16:6e:b6:
91:8d:89:cb:07:d8:e3:7b:1e:c6:9b:64:e8:64:8f:
ad:b5:b8:35:f7:96:0a:47:eb:54:20:ab:54:08:79:
1b:ca:3c:d6:5e:1e:60:83:53:ab:30:a3:e9:2c:ff:
8a:9e:fd:92:76:da:ac:8f:4b:50:16:28:46:3d:5e:
76:ff:39:da:2a:b8:2c:bc:b6:93:81:5f:7a:4a:a1:
d5:67:8f:34:1b:a2:6d:a2:d6:07:d2:b2:2a:d6:dd:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:7F:88:71:2E:17:71:46:D3:B9:69:FA:66:65:B2:63:96:8B:77
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:f6:e6:c2:27:fa:4c:b2:9d:47:e8:7d:ab:b3:43:1c:ab:
eb:2e:54:dc:78:0e:9e:51:37:3e:f9:db:f3:e8:89:dd:4d:4c:
d1:b9:60:50:56:ce:9f:06:e5:5d:38:33:e4:09:d3:28:c8:e4:
86:c3:af:5a:a8:84:a8:bd:52:81:e8:e3:88:a1:f8:e3:d1:27:
dd:20:ea:67:c0:61:52:0e:9f:08:2c:0e:f8:ec:59:f6:41:a8:
79:eb:4b:74:70:58:a3:d1:d1:c2:89:d6:b9:e8:42:03:e6:27:
19:fb:ec:6d:ff:68:42:7d:b6:02:25:b0:31:f6:fe:62:93:dd:
1f:52:80:ef:a9:22:1a:78:08:e3:65:ac:20:27:88:ff:5a:7e:
9d:9c:ea:93:ae:14:9c:27:a6:1b:fd:b8:2b:d4:7e:81:d8:8b:
fc:8e:ec:00:b5:34:b5:af:43:01:90:8d:81:b8:8c:9c:86:37:
d4:4d:53:eb:dd:f4:d2:90:07:56:7f:d1:51:79:8c:5f:74:29:
31:74:ac:e7:da:8b:24:4c:e4:a8:cf:73:0d:26:57:92:90:75:
f7:1f:b3:1f:b0:67:51:ac:94:85:7a:13:31:8b:02:c5:63:42:
eb:04:5a:5e:6a:04:d1:84:8b:4d:5f:4d:9f:7d:4f:9e:d3:0c:
fa:92:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:58 2025 by rpki-client