Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: p5RCG0IE6vZX20TIHPckHFWBwuE1MNaYVtnZvYRZ1VI=
Subject key identifier: 26:1A:23:CD:BC:17:59:1D:FF:0F:2B:BB:2C:BC:03:F8:7D:9D:B5:6E
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 0197B7EA6601D5E106429B728E26A8301447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0647
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: Uc+P1ijy60R5WzeOcXfbCjvat9t9G0XNQ74sRXqHszE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:66:01:d5:e1:06:42:9b:72:8e:26:a8:30:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=261a23cdbc17591dff0f2bbb2cbc03f87d9db56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:d1:8a:f2:8c:25:6f:7f:0d:10:06:a8:f0:
bd:41:27:85:cd:74:d6:a7:11:e5:15:59:4a:81:8d:
59:eb:97:f4:14:e2:d0:57:4a:3a:66:a3:e8:34:7d:
6e:0b:15:fd:06:c9:04:96:e9:2f:2f:e4:c8:1e:bc:
cd:02:59:27:dd:fb:7b:b0:c9:1c:74:76:3e:96:23:
76:a2:e4:26:6b:20:61:d9:fb:06:13:42:aa:5f:97:
26:de:61:1b:05:68:21:b2:5d:ef:2b:b1:80:89:a2:
a2:53:1b:be:19:b5:a9:4c:2c:4a:56:15:92:f9:18:
2e:78:e2:0a:4b:55:e3:23:12:48:74:ef:0c:8a:9e:
4f:bd:25:0c:c7:28:ad:8b:91:73:16:5d:f5:f9:67:
f4:fc:d1:8e:ab:39:36:60:42:7d:d0:e8:63:b1:a4:
cc:a6:a5:d4:67:42:db:d7:7a:a2:62:93:dc:88:dd:
ad:6e:27:06:8d:b3:a7:fd:e2:62:6c:6d:68:28:5b:
f3:2b:51:f7:28:de:ed:7e:e2:ee:46:9c:9d:7b:a2:
8b:9e:26:78:44:97:88:c0:bd:59:b4:4c:20:ee:b2:
24:7c:e4:12:34:59:b1:aa:b2:c4:9e:6a:30:f4:bd:
bc:eb:c7:f7:16:7b:95:00:c2:73:83:9a:ee:11:ff:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:23:CD:BC:17:59:1D:FF:0F:2B:BB:2C:BC:03:F8:7D:9D:B5:6E
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:d7:e2:f5:d5:5f:41:64:1e:34:24:be:60:5a:6a:0f:a3:
0d:77:81:f1:f0:55:cc:8c:fd:8b:d7:db:66:a3:b3:ce:43:8f:
4c:18:46:bb:26:4c:c1:33:fe:42:d0:53:a8:e9:f1:10:ef:f0:
96:67:28:b9:b5:a2:0f:dd:af:bf:6a:f8:9a:6f:2b:4c:08:02:
23:34:82:3e:52:bd:53:7c:26:64:11:32:6d:06:3d:27:2b:e9:
6e:6f:70:30:43:25:94:ec:29:a0:a2:3a:c1:3a:71:0d:bc:07:
f9:56:42:1d:ae:19:a4:e5:24:60:b2:0d:61:61:b8:fc:37:fe:
43:e5:46:67:de:8f:79:51:96:5c:b9:9e:67:d5:10:ec:c8:4b:
41:72:28:cc:1e:c3:54:75:6b:f7:9c:e6:87:55:44:89:d3:22:
ec:e1:9e:39:94:d6:e2:91:91:4e:22:7c:0e:d2:69:d7:e1:38:
d7:c1:2d:56:33:3d:64:d4:e2:02:0b:6b:6e:4c:81:13:55:cb:
d1:4c:49:6f:13:86:8a:13:69:37:37:3f:51:30:11:48:ff:0d:
f8:57:89:8b:56:fd:7a:f1:16:eb:8f:b8:6c:8c:fe:dc:20:72:
16:71:83:f9:71:b9:66:e7:e4:b2:19:88:b0:7e:c1:c1:d1:e2:
aa:5c:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:40 2025 by rpki-client