Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: Lq5izH6y1RyXOhq6KAFM1ryWJ8VSF7NkiYZ4AbQr9rg=
Subject key identifier: 0F:8E:45:97:1C:03:C0:B3:1B:52:2F:87:02:CA:62:EE:BC:AF:0D:A0
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 0197B8FCDE592944E8F52BD7E38C4BFAB1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0882
Signing time: Sun 29 Jun 2025 00:01:09 +0000
Manifest this update: Sun 29 Jun 2025 00:01:09 +0000
Manifest next update: Mon 30 Jun 2025 00:01:09 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: cU/vgtqdyfKt2b3RvXg92WlIXykFB9XiyPPN9MTYxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:de:59:29:44:e8:f5:2b:d7:e3:8c:4b:fa:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jun 29 00:01:09 2025 GMT
Not After : Jun 30 00:01:09 2025 GMT
Subject: CN=0f8e45971c03c0b31b522f8702ca62eebcaf0da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:2d:69:b3:48:05:eb:0d:97:e0:8d:a5:5d:
85:ba:40:6c:e5:c5:68:ee:fb:b9:7c:7a:e3:b5:77:
c4:d3:0a:b7:26:cf:aa:70:63:e9:6b:7b:e3:1b:58:
69:a1:77:fe:a3:0d:c1:f5:0a:63:a3:db:5c:2b:39:
bf:9b:25:10:d0:88:ff:b9:9b:0e:87:ac:c6:85:c8:
bc:00:1a:0f:97:0c:9e:04:58:6d:47:f1:45:b8:0b:
f2:39:9d:70:b7:8d:9a:e0:58:d2:96:61:fa:24:10:
51:a8:ee:04:38:12:ae:cd:ca:06:a5:6f:91:28:66:
34:5e:2f:1f:3e:95:f8:22:54:da:7b:2c:8e:19:31:
4c:13:2e:0c:7b:18:c0:a8:31:fa:9c:11:ca:0b:ac:
75:71:5f:e2:5a:93:ad:63:9e:c7:da:0f:7d:06:d1:
7a:54:93:a7:19:68:2c:d6:8a:87:51:6c:e7:77:cc:
36:d5:32:4b:45:4d:55:3c:eb:c8:51:a6:8f:cf:46:
ca:d8:6b:37:b9:e5:63:7f:47:1d:5a:52:3d:a6:9b:
bb:bc:8d:7b:3c:c5:a8:db:03:75:6d:89:05:2f:29:
12:17:c6:8c:fd:98:6d:2a:44:af:a4:e1:fc:64:6a:
45:3e:ba:32:8e:09:25:4b:8f:8b:fb:b6:37:c7:ed:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:45:97:1C:03:C0:B3:1B:52:2F:87:02:CA:62:EE:BC:AF:0D:A0
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:79:5d:5b:4a:44:b5:d1:7a:68:6f:6a:80:34:86:44:cb:
83:12:5a:e1:3a:fe:2d:6a:c4:57:d4:78:14:f4:ec:80:ce:50:
2b:74:5a:04:2d:c0:aa:f6:51:e6:81:d7:45:3d:ad:b5:4f:0d:
34:4a:7e:a1:36:02:bc:f6:d8:72:87:37:a7:3b:e1:99:4a:5c:
cc:b4:66:d3:92:60:a9:6d:2f:81:d1:63:b1:ff:94:b9:10:50:
76:11:29:69:4e:4c:3a:91:8b:27:84:e4:f6:d3:10:89:2a:38:
ed:3b:dc:7b:06:44:0e:07:ce:85:3f:f0:f4:c6:c4:3a:37:82:
c0:2b:d1:bf:2f:77:44:fc:8b:4d:5c:99:db:6e:08:5e:7b:cb:
2e:46:33:97:e8:f4:bb:65:fc:a3:6b:4a:fb:80:4a:01:7a:58:
75:18:d1:8a:ff:33:a0:53:01:cf:4a:96:cc:5f:99:7a:d9:79:
33:9a:0f:e9:1b:11:93:ed:d3:7b:4a:f8:29:32:a1:91:ff:53:
0f:3b:7b:25:d7:4f:c1:4c:8f:03:a6:df:b3:1c:f9:94:e5:61:
38:09:09:47:4a:43:17:59:e1:73:27:c4:da:76:47:4c:cb:c3:
05:49:f4:84:62:45:a3:81:d7:42:0a:b4:ba:56:a0:49:9d:f7:
c4:37:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:55 2025 by rpki-client