Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier: j81/tDd9ZBOalhEKFcSjbcHqQ1gGl2LOyi99YOX3poE=
Subject key identifier: 1C:F9:4F:7F:81:76:51:5B:E7:B1:BC:DD:BB:2C:89:A6:86:50:7E:B5
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial: 0197488BEFF803552C9F852E334DD107B7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number: 05E0
Signing time: Sat 07 Jun 2025 04:00:19 +0000
Manifest this update: Sat 07 Jun 2025 04:00:19 +0000
Manifest next update: Sun 08 Jun 2025 04:00:19 +0000
Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: 1odM4cIuMxGcdl0Q49HF85pWu8p2WM3JSLkCS907VXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:ef:f8:03:55:2c:9f:85:2e:33:4d:d1:07:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Validity
Not Before: Jun 7 04:00:19 2025 GMT
Not After : Jun 8 04:00:19 2025 GMT
Subject: CN=1cf94f7f8176515be7b1bcddbb2c89a686507eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:7c:5c:e3:3f:1e:6d:e8:ec:b7:fb:18:e3:
43:0e:c9:81:75:a1:92:c3:10:a1:a9:30:5a:31:6b:
d4:83:21:2b:5f:9d:59:39:e2:67:a1:49:38:2b:0c:
fb:fd:30:27:6e:29:73:2b:0c:73:8b:ba:f9:a0:aa:
c2:df:1d:32:93:6f:3d:ed:40:9d:26:ba:be:ff:49:
b8:1d:b6:85:0a:80:c0:58:4e:2e:dd:0e:73:d7:f7:
2e:f3:f6:7b:4c:ec:a3:f9:bf:35:62:d2:a5:24:7c:
fe:7e:ab:df:bb:eb:f3:8b:45:bc:33:ab:57:11:c0:
99:d7:3c:1c:13:ef:66:74:0c:ed:f5:6b:4c:09:bd:
a6:51:70:20:3b:05:46:24:a7:f1:57:cc:23:4e:be:
3e:7d:31:a8:97:fc:99:d2:47:fc:19:69:b3:54:9b:
10:38:e4:85:eb:bf:af:be:df:39:2a:46:94:b5:db:
da:1d:10:44:69:04:40:60:a7:ec:f0:df:a1:ae:8c:
94:e2:a6:a4:90:c7:3a:f4:a1:64:a2:77:09:84:b2:
fa:6d:03:cf:46:46:03:2d:f1:e4:c2:6c:65:39:d3:
fb:4e:bc:ea:3a:d2:96:66:37:6b:27:64:ad:cc:01:
65:03:54:08:2e:9c:b1:5f:a9:a5:cb:31:36:c1:a1:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:4F:7F:81:76:51:5B:E7:B1:BC:DD:BB:2C:89:A6:86:50:7E:B5
X509v3 Authority Key Identifier:
keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3c:92:a3:e9:12:25:ad:03:36:5e:45:cc:9d:e7:9c:55:27:
ce:24:59:5f:e6:13:7b:af:b2:31:2e:39:c7:6d:38:18:d8:d7:
76:d3:9e:33:ec:7d:73:1e:f5:b5:e7:6e:6b:09:24:1d:a0:71:
86:8c:10:41:98:69:87:5d:20:d2:78:2a:a5:6d:36:5d:82:28:
9c:e4:66:36:1a:45:dc:1a:1f:68:bf:b1:6b:ed:be:8e:11:44:
49:d2:b2:6d:d7:c2:06:d8:4e:30:e0:2b:68:3d:14:6d:8e:b1:
79:2e:c6:b9:52:e1:b8:cf:11:da:58:a2:42:28:13:36:08:f8:
82:3c:ce:c9:c3:85:7f:df:2a:c9:04:35:6a:a0:02:93:7c:6e:
53:fa:61:c6:ca:57:f5:18:d0:aa:2e:7a:19:fa:28:3f:6b:c0:
13:47:ec:32:14:b1:e5:39:49:d2:10:78:9b:0a:64:3e:d8:b6:
03:23:28:68:d0:b7:50:aa:94:1a:ba:c6:9f:03:47:81:2a:16:
32:ba:f3:77:7f:60:33:65:b6:12:cc:9f:cb:ad:c4:a6:ed:9d:
81:c5:ff:2b:72:a5:48:56:78:e7:e6:25:7b:2a:5d:ed:ec:62:
13:bb:b1:d5:31:e9:d4:ed:ee:6a:e0:78:ea:fa:be:81:4a:21:
a1:16:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:04:38 2025 by rpki-client