Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: XsZehORJxhN3Rnp5g6ZfzR/1USjB4akGzHdzQz/CEfE=
Subject key identifier: AC:0C:5E:8C:5B:37:5F:78:7A:D4:14:D6:BE:AF:59:02:4E:4B:71:1F
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 0197485539EB171E8DA9E8152CF47AD0F48A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 3A
Signing time: Sat 07 Jun 2025 03:00:34 +0000
Manifest this update: Sat 07 Jun 2025 03:00:34 +0000
Manifest next update: Sun 08 Jun 2025 03:00:34 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: OBqm261MSDhasgL0dfadpCNpm2eZJMsPushvkjmt9Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:39:eb:17:1e:8d:a9:e8:15:2c:f4:7a:d0:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Jun 7 03:00:34 2025 GMT
Not After : Jun 8 03:00:34 2025 GMT
Subject: CN=ac0c5e8c5b375f787ad414d6beaf59024e4b711f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:8d:8f:18:cf:20:54:1a:7f:f5:e4:b4:69:
66:98:1f:8c:45:9c:dd:a6:be:8a:3c:00:0b:53:6d:
03:8c:f5:5e:78:81:88:b7:da:d8:fc:74:42:36:1a:
c2:22:df:7a:4e:98:34:ff:33:3a:9f:13:68:ac:49:
88:78:14:db:08:6a:44:fd:9c:54:83:5c:ea:14:d7:
0e:d7:06:e2:d9:46:e3:b7:2b:be:2a:47:09:91:29:
32:23:af:17:27:aa:ce:f4:c4:45:0b:b5:1c:c6:51:
79:b5:e8:ba:b2:9f:ea:0a:cb:6d:f4:9b:08:fe:31:
1a:d3:53:ba:52:75:f1:f5:ed:84:01:14:be:b4:aa:
87:3c:67:f8:05:ba:8b:e8:17:75:2a:a7:09:1c:48:
42:15:56:36:1d:40:23:a4:e6:f1:30:94:3f:41:48:
9b:59:0f:d7:27:94:3c:03:d4:59:f5:67:05:0b:63:
dd:32:31:1e:cb:9d:7e:b1:29:55:2d:46:fb:7f:82:
5c:0a:e6:77:20:5c:ba:51:7d:33:45:3c:0a:1a:89:
7a:e5:c9:77:0d:3f:69:13:64:10:8a:b0:f4:ec:40:
96:28:81:db:ce:7b:2b:b0:3c:e1:c9:65:a3:8e:ca:
89:ad:18:55:ac:1e:e1:cc:21:08:5a:9d:de:b6:87:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:5E:8C:5B:37:5F:78:7A:D4:14:D6:BE:AF:59:02:4E:4B:71:1F
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:0c:0b:94:a4:de:19:f0:38:31:00:57:cd:4b:d3:2a:b2:
93:f9:38:4c:87:e2:03:eb:42:0f:a4:4a:92:24:73:4c:67:27:
1e:f1:19:8d:28:ee:2b:2f:e3:53:e7:83:57:52:06:bd:cd:4c:
91:e8:f5:e8:78:2e:a5:53:0d:bd:65:e2:ab:bc:77:30:b1:e3:
43:bc:65:7a:64:3c:7d:51:94:c0:fb:4d:07:ae:44:28:b0:4e:
94:0b:24:2c:30:64:7e:91:39:f9:07:8e:25:94:69:08:a8:be:
95:aa:c2:98:ff:82:ec:0f:1a:ff:14:a7:7e:c9:37:61:02:96:
e0:f8:70:99:d2:19:7f:94:de:5a:89:a3:37:13:83:e0:2d:76:
88:9b:15:9c:c5:16:90:81:1e:1b:ff:80:49:83:e9:8f:f8:0e:
55:e7:b6:f6:d7:db:4d:48:5d:ed:84:7a:6b:01:9f:95:40:01:
ae:d6:74:45:c3:37:7d:8f:1c:f4:1e:9a:4a:73:0d:10:5b:8a:
9f:d2:a8:2a:90:a6:9f:8a:e5:04:f8:04:d9:c5:24:74:3e:9b:
7f:c5:b3:f3:49:7a:36:8a:8d:51:e6:e1:59:db:b0:75:7c:6f:
82:77:ed:4f:1b:aa:23:c2:c5:ce:ba:bd:c0:01:1e:89:c0:c6:
2a:06:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:33 2025 by rpki-client