Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: pqi2BL1idUh1+YlfmIcJVN1o3YVE2Vv2wpYUHKbB3tQ=
Subject key identifier: FB:88:F9:46:8B:5E:83:8F:D5:68:32:3C:17:88:94:70:A8:F1:5E:77
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 019747B1080E9C2DE5F3707E3E0128CA7E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 01FA
Signing time: Sat 07 Jun 2025 00:01:13 +0000
Manifest this update: Sat 07 Jun 2025 00:01:13 +0000
Manifest next update: Sun 08 Jun 2025 00:01:13 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: HnId0ppSpWlBrvDsyfXHg2CfG7PtM5B97/goTzEj4/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:08:0e:9c:2d:e5:f3:70:7e:3e:01:28:ca:7e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Jun 7 00:01:13 2025 GMT
Not After : Jun 8 00:01:13 2025 GMT
Subject: CN=fb88f9468b5e838fd568323c17889470a8f15e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:c5:2e:3c:36:94:f6:a2:02:8d:5b:47:07:
67:72:00:4a:bb:16:54:31:49:86:7c:de:2a:72:b0:
43:69:59:1c:8d:35:07:9e:18:55:75:63:7a:36:d2:
ad:71:b9:45:34:0a:1a:33:00:4e:e3:0e:f9:c4:a2:
ed:81:e6:27:4b:2e:96:3c:24:f6:cf:bc:b9:77:6a:
fd:67:9d:cc:68:98:41:23:50:cd:54:14:d9:04:32:
07:20:95:ba:f2:db:1f:e4:f1:a0:3b:b6:eb:c7:dc:
a6:cd:f5:77:7b:c6:e7:78:8f:7c:25:05:5c:4b:fc:
12:d0:36:c7:25:05:9a:ce:4e:57:24:ea:29:c1:d3:
dd:43:1c:4a:55:31:ef:e6:24:10:8c:b0:c7:78:26:
4a:8b:7b:3b:e5:69:1c:e0:38:e4:f4:8c:d5:4a:ef:
5a:7a:2b:2a:5a:59:19:18:56:34:20:13:82:32:a9:
1b:14:35:52:40:28:bb:d8:b6:73:35:5a:c0:61:2c:
08:02:29:f9:b8:44:f2:20:c6:74:45:0a:ef:a6:7c:
76:3f:0b:ef:ba:cd:b1:27:b0:65:97:6e:8b:36:66:
62:8f:96:8a:66:31:61:18:96:9d:50:4a:80:b3:6a:
8d:d4:b7:30:66:09:7f:2a:ad:1d:65:f9:81:47:2c:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:F9:46:8B:5E:83:8F:D5:68:32:3C:17:88:94:70:A8:F1:5E:77
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d2:c6:c3:fe:91:8f:71:31:8e:54:27:0a:48:6e:67:81:21:
bf:e1:47:0e:4c:60:19:95:c9:d1:da:7b:04:5a:c0:a7:af:fa:
bb:42:77:a8:30:db:a8:30:3d:e2:5e:a3:8b:9a:db:cb:8d:d0:
b1:5a:c5:a4:b8:e9:92:04:32:8b:c8:8c:7a:d6:70:51:6b:46:
24:91:f6:07:4e:83:71:7e:f2:ea:8f:9e:8d:36:75:78:63:19:
bf:8c:8c:cd:10:9c:11:25:57:6c:6f:17:1d:f7:aa:b1:48:02:
be:14:b7:d6:e5:f0:18:47:0c:11:84:84:23:50:24:7f:88:29:
ad:92:b9:80:63:b5:5e:86:db:aa:9b:b8:1a:b7:0a:ad:02:cf:
58:07:31:88:1b:69:ee:11:58:92:bc:64:d0:c9:7a:aa:50:cd:
12:56:6e:33:0d:11:70:22:35:02:9b:1e:cb:4e:eb:69:11:07:
51:2b:68:64:20:b1:f8:ea:56:99:1e:9b:a1:92:18:5c:d4:9e:
f9:8a:f9:3a:76:a4:a0:ef:c4:23:be:a5:8c:2e:55:6c:b7:a4:
3a:c6:82:47:81:42:82:64:61:7d:fa:86:96:0a:22:56:f1:68:
dc:d3:90:25:03:56:70:5b:83:b2:1c:bf:b6:02:93:55:d5:7d:
fa:0f:1a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:40 2025 by rpki-client