
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: PEX7sf7eQyAqHw7YjrflV31xqh3zzgzawZPvWpzZVvM=
Subject key identifier: 6A:AC:4F:20:00:6A:72:D7:22:04:83:EA:F5:C6:F8:57:09:D8:D4:C4
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 01974C69C6ECBAF6F0DC923C08B00E3C9A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 22:01:29 +0000
Manifest this update: Sat 07 Jun 2025 22:01:29 +0000
Manifest next update: Sun 08 Jun 2025 22:01:29 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: ZyXOsDFWQWXV1bpkM3209Os5V2OLSDIbPleWu8cyRmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:c6:ec:ba:f6:f0:dc:92:3c:08:b0:0e:3c:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Jun 7 22:01:29 2025 GMT
Not After : Jun 8 22:01:29 2025 GMT
Subject: CN=6aac4f20006a72d7220483eaf5c6f85709d8d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:27:83:98:b1:d5:ae:8a:65:93:4f:62:20:
56:9e:3a:2d:bf:f5:35:ca:b6:86:3c:72:3a:c5:3c:
e4:0e:f0:04:25:35:b8:cf:b7:9b:ab:8d:01:e1:02:
96:ab:93:bc:51:7b:30:0d:48:2b:39:e8:c4:f6:27:
3a:9a:df:a9:ba:7b:d0:29:c5:bb:1b:e7:3a:c8:fa:
d7:ac:c3:37:96:51:e7:31:70:6b:1d:7f:2f:e5:c9:
21:f8:11:a6:0f:1f:3c:ee:d6:a1:10:c6:f2:68:4d:
e0:2d:5c:23:99:e9:16:6c:1d:a5:47:fe:f1:80:ae:
82:9b:75:d3:6a:aa:40:f6:8e:09:18:43:fc:ba:14:
18:5a:3d:de:9b:ee:5f:e1:f7:48:78:c5:70:ff:13:
79:09:56:8b:da:a4:9d:f6:c1:05:f8:70:ca:25:47:
da:26:95:94:e5:10:0f:4c:fd:e4:38:76:c4:9f:ee:
00:4b:c3:12:b2:73:33:71:05:dc:9a:af:02:1e:2f:
42:16:a5:03:8a:30:3c:b9:4a:c2:bf:f4:95:4f:9d:
ce:33:22:82:d5:23:c3:d0:f1:59:a0:91:87:3d:dd:
25:2e:4b:02:bd:a2:83:56:a9:15:d2:99:51:0b:6a:
36:a4:85:e9:89:43:1f:20:25:36:9b:70:1b:51:71:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:4F:20:00:6A:72:D7:22:04:83:EA:F5:C6:F8:57:09:D8:D4:C4
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:73:c1:ea:36:a3:46:21:94:e3:76:ea:6e:87:5b:9a:9b:61:
39:2f:27:55:13:6e:b6:aa:a6:d4:7b:01:9f:7e:25:06:61:8c:
85:03:f9:23:e6:c0:ab:3d:48:33:64:6c:58:82:b8:fa:2d:4d:
5b:b2:29:98:41:10:3b:29:53:30:d0:e2:d9:a9:16:7b:45:9d:
14:a5:da:e2:4f:e6:de:75:7d:6d:3a:6d:96:4b:f3:bc:3e:92:
02:c5:2e:f6:5a:3b:a5:84:f4:d6:b9:2f:a3:db:10:4f:c4:cd:
1e:26:a8:87:8e:44:32:5f:42:cc:06:41:4e:33:5a:8f:9a:07:
11:95:86:42:4f:29:19:b0:69:3b:28:40:71:b0:c5:db:86:02:
65:04:bb:8b:0a:9e:54:94:03:46:58:f0:6c:b5:9b:69:7a:c5:
6f:93:5f:f8:14:5a:e9:f1:46:b1:90:4f:ed:02:b7:69:e9:83:
fb:46:b0:c6:dc:5e:44:4d:e3:28:d5:29:a9:17:90:3f:05:9e:
a9:5d:af:17:64:65:32:2b:71:e3:ec:df:32:02:13:15:04:c3:
e5:ec:c7:6c:dd:66:79:ef:5e:a1:15:2b:5c:b7:95:46:2a:cd:
ef:f0:60:c3:1a:f9:6a:7f:94:69:b9:1c:88:d4:8c:bd:2e:13:
b8:b4:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:47 2025 by rpki-client