Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: Q83kvG5i/n17CI3S0II2cYfZNBb5LKfAvX6R0XTraKM=
Subject key identifier: 14:53:98:64:18:69:2F:D1:47:AC:72:B3:1F:C5:06:89:56:2A:6D:D9
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 019750B3DA24A924D7D50E837D05E0C7A569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 1211
Signing time: Sun 08 Jun 2025 18:00:53 +0000
Manifest this update: Sun 08 Jun 2025 18:00:53 +0000
Manifest next update: Mon 09 Jun 2025 18:00:53 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: U10XpWU2TaGB80JlzKnH/eHEPF5n/ofNjC81jMhgAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:da:24:a9:24:d7:d5:0e:83:7d:05:e0:c7:a5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Jun 8 18:00:53 2025 GMT
Not After : Jun 9 18:00:53 2025 GMT
Subject: CN=1453986418692fd147ac72b31fc50689562a6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:73:42:6d:a5:5d:78:51:98:d1:34:cc:de:
d7:29:5e:f7:a9:4e:89:ef:8a:2f:44:e9:8f:a5:df:
ef:60:cf:33:7b:14:e1:91:54:15:30:14:ed:1e:12:
0b:0c:12:4d:3e:1e:c0:58:c2:be:a0:45:a1:c5:3f:
44:6f:f7:42:b9:84:b5:19:ba:02:0c:00:83:ab:e2:
5d:9d:1d:58:12:38:b2:24:4b:35:96:cd:0d:bc:e2:
b0:5a:68:0b:3b:bb:16:e4:b8:8c:da:4a:2a:bc:7c:
c5:68:84:fd:ba:fd:00:7d:91:8b:9b:99:39:62:66:
6f:3c:69:b7:05:f1:8f:af:d4:fb:16:b0:dd:f2:f1:
18:87:35:b0:25:fb:5d:9e:25:75:9c:23:af:24:f0:
b0:22:74:30:28:53:fd:e4:0d:ac:44:bf:c0:a0:b6:
03:b7:4f:3b:fd:c2:d0:45:73:6e:d8:b3:4d:b9:4d:
3c:5d:67:77:ce:67:d3:6d:bb:e5:f6:37:73:3f:a0:
79:f3:38:cd:00:5c:4c:ff:36:ca:05:a6:c9:e3:3e:
30:24:a6:d3:ba:67:e5:7c:01:24:3b:c1:d8:03:5f:
f4:ac:4b:3e:d8:26:aa:44:08:2b:6d:5d:ea:0c:c9:
dc:8b:81:3a:69:52:60:d9:45:90:0f:f4:26:4a:53:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:98:64:18:69:2F:D1:47:AC:72:B3:1F:C5:06:89:56:2A:6D:D9
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:27:cc:0b:30:60:61:10:83:80:37:a4:6c:0a:87:12:14:d1:
f0:81:a8:59:03:9f:77:7a:2b:f6:d3:b6:65:06:10:2d:45:e3:
d4:0c:62:4f:fd:37:8a:15:6b:3f:bf:ad:78:02:2d:96:51:3d:
95:36:a9:c6:b5:f0:0c:64:b8:6f:20:36:92:99:84:76:ee:02:
b4:89:d5:13:cb:72:0a:a4:c0:82:9c:96:07:a1:67:a6:eb:12:
1e:b0:e5:a8:78:81:b2:d5:13:39:28:c9:2c:37:c6:a4:a6:c2:
51:9d:74:13:a6:78:e3:1a:b0:47:0b:1b:d0:c7:68:5a:e6:42:
17:d5:c1:f0:13:7b:f5:81:66:42:ff:92:f7:9a:74:12:73:98:
58:69:1b:a2:53:11:be:d3:56:5f:dc:bd:6c:9a:0c:12:fa:78:
d4:2e:25:76:cf:0d:1b:9a:6f:76:90:77:44:c1:1c:86:6d:47:
b8:01:43:63:33:0e:b4:c3:d5:95:c1:c9:dd:7e:fd:92:ca:31:
2b:d2:29:7d:c4:ce:8d:54:91:ef:c7:4f:58:1e:75:f9:cb:65:
15:b3:6d:1b:f1:d1:27:ec:96:75:20:c3:00:a6:91:eb:3f:9f:
d9:cc:53:88:81:ff:a4:1c:bd:35:ae:f4:64:d3:14:c8:c3:4a:
72:f0:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:53:52 2025 by rpki-client