
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: UV1LyaurhWt0hqqvOcwNrTef82p9e6mV2G48qqmFCQg=
Subject key identifier: 06:57:73:2B:A1:EE:DC:BF:90:A2:8F:E7:ED:F7:29:D9:BB:C0:13:F6
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019748FA3D0FEDCA0A33BC2371DF22327E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: C7II9p5Q4KGbB8Ng2+OHnvQjEtYpq18fvsnUQS3m1oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3d:0f:ed:ca:0a:33:bc:23:71:df:22:32:7e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=0657732ba1eedcbf90a28fe7edf729d9bbc013f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:87:8f:70:d6:89:7e:a2:10:2d:f7:30:84:e3:
54:9c:48:fa:9f:00:be:0e:04:f5:55:fb:fb:5e:e2:
c3:31:31:29:52:29:45:51:cc:92:02:f3:3a:6e:7a:
b7:a9:cb:d1:ba:de:31:21:71:df:ad:64:ee:bb:14:
f4:bd:d9:9c:80:cd:46:76:c6:f9:fe:c2:d3:6a:67:
73:2d:e6:51:ae:dd:47:c5:1e:e6:77:5b:c5:bb:34:
50:f5:0e:0a:1c:76:0d:b5:96:d1:c0:ad:b4:d3:ec:
f3:d8:e9:d2:6e:b4:2d:9e:63:61:6a:a1:7b:a2:b4:
0a:f3:d7:a9:d7:06:7a:a9:d9:dd:53:9b:4e:be:6f:
72:c3:b3:c7:63:7f:7b:8e:fb:63:e2:ee:ba:94:cb:
7f:8a:cf:f4:14:e5:63:88:f0:ad:71:4b:b7:f8:40:
d8:23:5f:d3:af:c4:12:d1:1b:3d:ef:8b:cf:e5:b7:
69:3c:af:84:f1:4a:37:9a:05:35:cc:ca:a5:df:ac:
b0:23:68:eb:c4:cf:99:e8:2e:87:03:a7:ff:9f:b3:
cf:6a:b1:a2:29:89:b2:07:ba:c6:a1:d0:49:21:93:
f1:99:1c:ed:0c:20:ab:e6:eb:a8:9c:ab:db:81:ef:
90:ca:c8:8d:5e:eb:85:62:02:d8:90:b3:1b:03:9a:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:73:2B:A1:EE:DC:BF:90:A2:8F:E7:ED:F7:29:D9:BB:C0:13:F6
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:68:8a:eb:29:d4:36:41:c9:03:f0:57:76:c5:fb:e5:26:41:
d8:77:39:47:32:c2:2f:4f:31:a8:42:9f:39:f4:ef:1d:70:b2:
61:51:62:9a:42:03:ec:8e:67:c6:f8:cb:15:fd:d9:5b:6c:eb:
64:7f:a7:ee:40:3a:55:a4:bb:ee:81:1d:a9:63:ed:e3:83:aa:
38:77:79:e8:58:fc:22:ec:b4:e6:df:a3:18:93:6a:af:97:47:
22:ae:23:4f:bc:ce:41:11:a9:b0:de:40:0a:0c:fc:f5:fe:22:
4a:10:20:20:ef:13:f4:d3:06:f1:9b:c3:37:f0:69:19:b4:17:
18:6a:7f:49:6e:3b:6c:a5:eb:68:4d:c2:ac:df:fc:53:b4:bf:
c3:d4:f7:25:0f:09:5f:73:a9:97:e3:02:f2:99:56:89:ba:ab:
51:67:cf:21:5e:07:07:5a:73:e6:92:9c:7d:bd:d5:70:66:8a:
6d:16:c1:d6:9b:46:cb:71:b6:b9:8f:ab:6b:35:cb:3d:e7:5b:
82:c3:e5:6e:99:b0:4e:b4:e1:ac:91:f7:c1:b0:92:c5:d1:17:
85:7c:06:76:2c:32:d8:cd:e8:3d:6c:f1:1a:86:bf:2a:b3:30:
7a:04:93:f8:24:12:10:96:bf:ec:16:fd:be:f8:cc:1c:b4:33:
cc:72:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:12:11 2025 by rpki-client