Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: fpOvpEqpu62oswf5nMb+naFreBE0wa8yXe0LNosqkYE=
Subject key identifier: 16:FB:83:4F:E0:90:B7:B2:FC:A6:AC:D6:AD:01:A9:A6:E1:D3:AF:AC
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019745F95F129319031514296FED66F70752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0895
Signing time: Fri 06 Jun 2025 16:01:00 +0000
Manifest this update: Fri 06 Jun 2025 16:01:00 +0000
Manifest next update: Sat 07 Jun 2025 16:01:00 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: QsZaNtPa3g3iaSd9q/VJdv437DF1j0Hjro2AGaLrx00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:5f:12:93:19:03:15:14:29:6f:ed:66:f7:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jun 6 16:01:00 2025 GMT
Not After : Jun 7 16:01:00 2025 GMT
Subject: CN=16fb834fe090b7b2fca6acd6ad01a9a6e1d3afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:7f:44:34:cf:ce:d3:fa:39:df:d3:7b:4d:
76:cc:e7:0d:9d:f9:56:65:62:11:47:88:9b:cd:93:
2e:8e:74:4b:ee:2e:b4:46:6e:03:cc:11:32:80:20:
40:f3:f2:0a:58:0a:a8:7c:1b:c9:57:ea:ed:8d:71:
d0:0e:18:5b:cc:d0:88:12:1b:ed:80:39:74:6b:59:
72:c1:70:59:01:4e:e3:69:fd:65:5f:3f:20:18:c8:
34:57:f9:33:6c:03:34:c3:b9:3d:b2:d6:ab:75:af:
62:9e:eb:c4:25:6e:93:85:62:71:08:2f:ac:5b:f1:
1e:11:e3:5e:ad:12:50:5c:6f:2e:d3:6d:ad:4b:64:
fb:83:81:a3:af:7a:1a:08:4d:5f:29:a5:4f:e6:0c:
92:20:05:9b:a7:c6:12:46:33:09:26:63:ae:66:bd:
f7:f2:66:7a:ab:08:52:5d:46:10:6e:c9:e5:6d:54:
b9:c5:a5:69:56:d2:8c:e6:94:aa:c2:88:79:28:5c:
c9:27:d4:3b:76:62:99:d9:ae:93:b9:85:7e:59:cb:
ec:a9:3e:9c:b8:7b:86:2a:66:1c:70:72:20:c8:ec:
79:2b:ce:a3:55:44:e4:8b:c2:9c:02:0a:15:b0:5d:
a6:8c:d3:01:f4:49:df:fc:42:28:dd:9c:f4:07:08:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:83:4F:E0:90:B7:B2:FC:A6:AC:D6:AD:01:A9:A6:E1:D3:AF:AC
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:eb:f5:77:eb:8f:2c:06:14:db:6f:5f:8c:70:67:64:41:61:
22:b4:69:75:9e:61:eb:57:1a:f8:4c:36:3b:ff:d0:fc:2a:e8:
ff:e8:d4:85:22:ef:79:61:ec:e7:7d:1a:78:53:a6:2f:83:3d:
69:64:22:f8:a7:16:21:8b:17:65:7b:ec:82:e9:53:e1:bf:d9:
3d:dd:93:f3:83:50:18:d6:a2:1f:28:14:6b:6d:cc:7f:ef:36:
5b:d0:0f:40:ea:ae:5b:cb:81:64:6d:74:06:04:cf:45:d7:3c:
2c:fb:4e:da:6d:6f:bc:8e:a7:8d:4d:eb:ce:6f:b1:5a:88:da:
75:0f:41:d3:90:39:37:d9:9d:b5:48:98:48:28:1b:81:58:9d:
3f:cc:15:03:0a:2d:88:26:f2:30:0c:fb:6e:cf:ea:5d:60:1a:
a5:47:fc:7d:2c:15:9a:98:e6:4c:64:0c:ae:75:cd:90:b4:58:
1b:9f:20:5b:30:b1:f6:36:2d:2c:c0:54:e4:12:13:5d:c2:05:
ef:61:ee:80:95:e1:38:e1:26:86:cc:9f:a8:10:fc:dd:13:7a:
75:d6:82:1b:52:a4:27:d4:bd:8c:51:9e:40:d3:85:f0:9f:d6:
fe:5c:3d:79:c2:b9:5f:cb:46:6a:43:61:f2:f2:41:88:f2:7c:
a2:e9:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:21:30 2025 by rpki-client