Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: 4C9xwkgantMPCnEtA7Muu9ya3p5ELq9DjB1Saj6rhuk=
Subject key identifier: 4B:11:AD:F8:85:90:9E:5E:F9:E0:3D:81:2A:7F:58:6A:F4:15:DA:16
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 019748551FFF3405A818955761ECD42B4137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 02DD
Signing time: Sat 07 Jun 2025 03:00:27 +0000
Manifest this update: Sat 07 Jun 2025 03:00:27 +0000
Manifest next update: Sun 08 Jun 2025 03:00:27 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: DaTRY6l+Fm5VhejTQtI9dFX/G7/iz2px16jWOsMdXIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1f:ff:34:05:a8:18:95:57:61:ec:d4:2b:41:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Jun 7 03:00:27 2025 GMT
Not After : Jun 8 03:00:27 2025 GMT
Subject: CN=4b11adf885909e5ef9e03d812a7f586af415da16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:c5:eb:6b:af:9c:48:a1:95:11:4e:2a:47:
e3:dc:15:56:2c:de:4f:8d:32:ae:cb:a4:ae:80:85:
3c:bd:8f:b5:b5:be:5b:07:fd:58:15:e5:d5:ff:22:
10:b6:58:01:8b:54:0d:ab:ce:06:43:27:3e:88:d1:
be:a8:02:d2:13:0a:d9:58:2f:e5:23:5c:ec:47:1f:
64:19:9c:83:73:06:af:a5:20:ce:f1:4f:d5:a6:19:
4c:ff:4a:9e:65:e9:3d:23:cf:8a:cb:a0:6a:b3:b8:
72:7c:17:f7:d9:d5:1f:dc:51:01:a5:f6:10:4a:d2:
4d:bf:b6:7a:91:d1:0d:ac:b6:6f:a2:aa:e0:2b:70:
6b:67:88:e5:19:fd:79:33:28:c4:19:3b:e6:1e:ef:
8e:5a:29:ba:95:ab:48:3a:e4:d4:f2:39:9c:61:f1:
0a:09:1b:da:e7:32:82:a5:b9:dc:0e:35:82:95:64:
61:22:97:35:ea:85:a5:12:e0:09:d1:76:8b:9c:5c:
ea:ce:c8:45:63:07:5e:05:a6:39:03:f9:14:b0:02:
ec:96:50:d3:e4:0e:de:37:36:bb:ab:a9:9d:39:03:
72:03:af:83:3f:4a:00:66:49:a3:1e:75:3c:71:21:
45:02:64:31:c6:f9:09:66:6a:eb:3e:6c:28:05:68:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:11:AD:F8:85:90:9E:5E:F9:E0:3D:81:2A:7F:58:6A:F4:15:DA:16
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ae:65:b2:81:ca:f9:39:b3:d6:94:28:b9:b1:4c:4f:69:eb:
91:69:c3:6c:07:4b:db:22:c6:76:c0:c4:58:ce:e4:55:2e:36:
58:4f:15:46:0c:bf:6b:4c:82:b9:17:42:a0:bd:67:07:8b:ce:
b7:dc:93:cb:b0:06:f4:b8:7b:46:0a:ac:93:8f:b6:51:67:c0:
eb:b1:8e:9a:40:b3:48:1e:af:7a:db:04:cb:14:a4:b0:47:ec:
b2:30:92:2b:ec:18:28:1c:9b:b3:e5:48:cb:39:52:8e:02:a3:
db:68:f2:a4:0c:f4:70:2f:38:ef:66:86:00:68:14:73:6a:71:
35:3a:bb:7d:40:90:f7:df:6a:e5:b2:7d:08:e3:4a:a3:30:9a:
01:8c:06:4d:84:06:42:ff:97:4b:35:d5:68:92:91:15:ed:1c:
1f:0f:ab:dd:58:17:0d:3c:d7:1e:b2:36:7b:dc:8d:a6:eb:6c:
af:8f:dc:48:9d:62:71:a3:7e:16:e9:8a:c6:87:eb:0c:73:c9:
4d:df:c8:72:d8:0e:86:81:47:48:11:37:2d:20:d0:82:76:68:
47:60:61:5d:aa:6b:05:4c:25:5f:ff:35:6a:3b:41:f2:ec:6f:
12:ab:db:b3:b8:b2:46:8c:39:64:f9:4d:64:31:56:f2:06:3e:
da:eb:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:55 2025 by rpki-client