Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: MQZU2+ykZenrfdtohjWSSx7hQMDsuEOy9hg+Dnd1z4E=
Subject key identifier: AB:5E:03:70:FD:B2:9A:9A:96:22:FC:0D:20:54:8E:97:4E:F6:CE:2C
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 0197D7E306F495C800EF21D5917E98D03997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0CAB
Signing time: Sat 05 Jul 2025 00:01:09 +0000
Manifest this update: Sat 05 Jul 2025 00:01:09 +0000
Manifest next update: Sun 06 Jul 2025 00:01:09 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: SI5aVZjLkfthzTloPPlmIoVUi1hG7Q4p0QV0o+GVJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:e3:06:f4:95:c8:00:ef:21:d5:91:7e:98:d0:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Jul 5 00:01:09 2025 GMT
Not After : Jul 6 00:01:09 2025 GMT
Subject: CN=ab5e0370fdb29a9a9622fc0d20548e974ef6ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:69:02:41:5d:63:ea:06:e3:08:23:3a:fa:
d4:8b:ca:77:07:ad:d7:e3:bd:4d:cc:12:23:d7:72:
e0:31:72:b4:d7:f1:7c:8b:dd:e2:b1:ba:96:2a:ef:
fa:6e:90:5e:cc:e1:53:33:41:f1:c0:75:7a:7f:e9:
f3:f0:6f:63:6d:8f:8f:b7:c0:57:ce:2c:af:91:c1:
6c:3b:aa:6c:16:4c:6f:e8:94:fa:cf:a4:67:c8:14:
a5:06:2a:c6:5e:33:0f:25:a0:96:e1:a2:84:1a:93:
d2:6d:36:9c:36:d1:40:8e:cf:e2:72:da:91:3f:d9:
ca:b3:3a:d8:4c:08:45:45:1a:d2:0e:bf:93:60:e9:
14:3b:07:17:c4:9a:97:73:c5:be:c2:4f:cf:86:85:
10:1c:98:98:70:be:a3:19:a2:d6:55:49:63:fd:1a:
c9:e9:ad:ee:07:a1:6c:ad:6a:57:d6:34:72:90:09:
e6:e6:59:ff:65:a0:39:bc:ca:7b:2b:30:83:a1:ef:
e1:3e:ca:df:d0:bb:54:22:d5:f9:05:e0:a5:c3:7f:
0a:3b:98:68:a2:ac:e8:d4:e0:55:3c:48:a8:2a:2b:
90:2c:0b:fb:22:a8:9a:0d:8f:02:23:de:37:39:4e:
9f:ac:a1:1e:a8:25:c6:60:20:3c:c9:9e:87:c5:f2:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5E:03:70:FD:B2:9A:9A:96:22:FC:0D:20:54:8E:97:4E:F6:CE:2C
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:c5:57:22:e4:50:ce:96:d5:ea:dd:df:8a:00:13:eb:ac:
1b:21:ea:b8:cd:f8:27:7e:8a:f3:75:d9:16:d5:a6:1c:1a:ca:
a3:77:0e:7e:04:0e:39:ed:a1:d3:71:0d:de:be:b3:5b:70:88:
fa:ce:4a:43:4e:87:28:5a:5e:8c:0e:74:db:73:73:93:a6:d5:
10:d9:c1:eb:85:c1:22:6f:ad:7d:18:7e:58:aa:9c:2b:27:1c:
6e:ca:b4:0f:6c:2a:27:0f:4d:b6:df:89:92:ae:20:78:05:75:
cb:6c:39:2f:f7:f1:e5:07:84:d9:bc:97:9f:58:74:2e:9d:b8:
9a:24:1d:54:1e:e9:3a:6d:0f:00:48:b2:28:c0:51:bd:af:ea:
89:6b:56:ed:0a:43:b5:6b:ef:8a:f9:ee:6c:1d:40:78:85:07:
e5:1f:6f:67:60:e3:4b:82:6f:33:ef:12:f5:56:27:15:7b:65:
84:1f:f5:ff:21:cb:3c:00:43:7a:59:56:4e:79:ff:cc:20:55:
f6:16:be:02:c2:2c:1f:7e:11:06:ca:a3:3a:41:b6:74:8c:83:
2b:53:48:ae:f6:3e:0e:bb:91:45:3c:3b:82:ad:b0:88:2a:eb:
80:02:de:b4:6f:f8:58:91:c9:09:4d:65:02:60:a9:a9:4f:63:
d8:29:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:04:13 2025 by rpki-client