Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: AUInNnDi5PnQT5AyS1+PuIHeC0tTwEgEhuUELj16tmQ=
Subject key identifier: F3:36:FF:59:15:01:1F:98:D2:95:C2:BA:96:90:DE:04:82:77:95:62
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 0197B7EA1823D0FA23E3F66EC8D76405E432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 0579
Signing time: Sat 28 Jun 2025 19:01:01 +0000
Manifest this update: Sat 28 Jun 2025 19:01:01 +0000
Manifest next update: Sun 29 Jun 2025 19:01:01 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: gyrKr0zqEoNesL1HB9kuf4ZWfO6TIDI3NHsyMI/Ovhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:18:23:d0:fa:23:e3:f6:6e:c8:d7:64:05:e4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Jun 28 19:01:01 2025 GMT
Not After : Jun 29 19:01:01 2025 GMT
Subject: CN=f336ff5915011f98d295c2ba9690de0482779562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dc:31:91:73:24:96:62:ac:1b:e9:0f:48:92:
41:ed:b5:a5:af:be:a3:e3:07:21:01:d8:3d:84:81:
1e:1f:5d:6e:b1:20:a9:03:e6:88:52:62:a2:8c:c5:
42:ec:cb:4e:4b:e5:f7:44:b4:72:41:22:3e:38:84:
0c:b2:c2:b0:85:e7:ed:59:f5:29:41:13:90:4c:55:
85:fd:b3:f4:46:23:82:ea:fa:70:76:14:a0:a3:71:
2e:f0:92:d8:38:f6:aa:ad:21:90:31:fe:1f:8f:16:
13:08:bc:bc:b7:b1:1b:c5:a9:16:79:61:c9:1d:6c:
5f:3a:7e:2c:d0:79:1d:cb:d0:d8:9d:8c:c3:a3:7e:
6a:80:38:98:88:e8:32:c1:38:56:52:79:7a:c1:44:
e1:fb:eb:ea:81:71:a6:89:d9:66:39:e3:ac:27:61:
d1:3d:ba:47:a0:f1:17:42:35:59:a9:61:c0:0e:ff:
09:8e:ec:7d:0b:56:7f:d9:c0:79:f9:e9:9d:6e:96:
4d:c6:a9:ac:3d:53:38:cf:92:9f:50:e7:f8:f1:c1:
85:d0:79:bb:ce:96:29:c8:df:34:69:55:aa:37:36:
d1:ea:bf:73:8a:45:47:48:3e:d6:e8:08:dd:91:d8:
9d:b8:ab:3c:30:40:b9:fd:89:6d:b4:e4:d7:d8:cb:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:FF:59:15:01:1F:98:D2:95:C2:BA:96:90:DE:04:82:77:95:62
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:bb:1b:c3:fd:db:d7:24:0e:1f:a3:8c:38:8b:8d:36:fc:
e2:68:4d:af:7b:d1:cc:fb:e3:ce:6e:f0:e1:e4:a3:3a:ca:4d:
f4:44:c0:96:8e:3e:b2:84:ca:76:ba:95:1b:17:32:e8:80:43:
e2:06:2a:89:87:fa:cb:d7:0b:6d:d3:52:e2:bd:cd:1a:2b:6c:
ad:9e:ce:c1:d4:53:a9:76:23:65:f5:e2:48:fa:96:7c:90:e6:
24:11:70:27:6c:18:46:84:79:88:00:87:c5:cf:28:a7:eb:36:
88:a8:15:3f:71:d0:0b:fe:83:dc:08:d1:3f:2b:10:70:f6:7a:
9b:70:3e:14:56:8c:bd:e9:c2:fb:ac:f4:9d:0f:49:45:f2:3e:
54:0b:1e:7c:5b:80:a7:5d:5f:87:59:40:47:1d:82:db:de:d4:
3b:8e:bf:81:00:ea:b3:5a:6b:2d:43:36:ff:9e:69:da:42:9e:
55:22:4a:52:d7:61:97:e8:da:27:22:af:b8:b8:f6:35:b0:d4:
f0:33:96:fc:0a:f0:70:8e:f2:7c:73:00:4f:51:c0:76:98:c3:
e0:49:92:86:e0:89:75:88:a6:90:f0:07:10:c0:f5:f1:26:24:
f8:1e:bf:39:67:a0:98:68:f3:38:f5:3c:a7:31:6d:db:9b:36:
95:ce:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:27 2025 by rpki-client