Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: 4pkiOePfocvAHTr5vXA27VXF9YLOiRqeD+O3qzGzCXk=
Subject key identifier: B2:A2:4B:2A:A7:F3:D7:02:EF:20:3A:69:9C:BE:53:85:D6:53:9B:BE
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0197B74579500524B03B46C5F3FD0E09D3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 15F1
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: PzYc0q6yLLvK5gUEy33dbdyC1p6VnhS2oXn2T8JWmyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:79:50:05:24:b0:3b:46:c5:f3:fd:0e:09:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=b2a24b2aa7f3d702ef203a699cbe5385d6539bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:09:cc:d4:d4:70:08:3d:e9:95:41:1e:43:
3a:2c:7a:9b:72:2e:d3:34:c3:31:1f:88:d9:2b:42:
97:2a:eb:e0:ae:f3:87:4c:7c:87:bb:60:94:60:1a:
d3:19:06:6a:64:de:13:98:88:1a:c0:a3:ce:cc:d8:
0c:7f:39:d6:32:d8:eb:08:bb:8d:f5:cd:9d:07:c7:
b9:c0:9b:54:35:00:85:61:7b:4a:c0:ee:41:2f:04:
5e:e7:a3:4d:6b:3f:9e:9b:ed:95:a2:09:5b:aa:6f:
5a:ac:80:bf:4a:cb:39:71:84:be:90:34:db:47:f7:
16:64:e4:fc:08:41:69:98:75:56:cd:31:39:8a:cd:
fe:cb:e7:4f:81:92:47:8d:f6:80:a3:da:d7:11:b8:
8f:4a:65:d0:2b:86:f4:91:d7:b9:d9:26:83:f8:f4:
80:18:34:fe:d4:2d:3c:7e:5b:31:95:fa:b0:46:a8:
8f:df:27:78:c3:27:6a:16:b3:a9:8f:aa:86:40:29:
fd:87:e3:f2:ca:1e:45:b1:27:8b:b4:4b:b9:6b:7e:
4a:95:21:84:0d:de:93:7d:25:28:61:2e:03:af:e2:
1c:1c:12:3b:d7:d5:e2:97:c3:d2:3e:79:da:8b:44:
5d:93:9d:e9:00:7d:04:5c:22:fe:83:21:f2:27:78:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:4B:2A:A7:F3:D7:02:EF:20:3A:69:9C:BE:53:85:D6:53:9B:BE
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:76:4b:41:d0:19:38:71:eb:c9:58:25:73:5c:96:8e:c8:b8:
6a:b6:2b:e4:e5:b7:2f:56:be:10:f9:b0:4b:9a:a4:e8:52:72:
9c:94:df:29:e8:70:08:1b:c4:51:b8:b4:ff:fb:b8:2c:78:b5:
d5:cd:81:d2:64:30:43:78:c6:8d:d3:ee:23:82:fa:bb:a8:8f:
42:81:93:69:5a:95:6a:a9:92:99:d6:b3:9a:26:c6:71:90:a1:
34:f4:60:2b:1a:76:29:87:34:9b:b6:62:e6:e6:20:65:f2:66:
65:54:66:b4:00:55:ff:3e:3c:8c:be:c9:be:21:37:d9:7f:bb:
7d:7f:b0:16:be:9f:23:c6:0f:87:b8:a9:ef:b2:81:06:8f:c6:
1a:79:5e:0c:c7:5f:90:60:84:a4:07:5a:f8:e0:34:d1:8c:58:
08:e4:5d:2c:2c:6e:7f:6d:b1:56:f5:20:bc:c1:97:d9:8a:a1:
0e:f4:43:6a:b2:f4:17:11:70:87:16:6c:ae:28:ee:cc:2b:30:
f5:13:5e:37:05:69:47:68:f6:7a:10:ce:51:9f:a0:ac:f9:6c:
de:78:7f:fe:69:7d:00:15:9b:19:75:40:00:9a:59:ab:2e:22:
09:e9:80:b8:2b:eb:bc:cc:41:38:0a:e6:c3:f0:1a:28:e2:cb:
e7:94:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:55 2025 by rpki-client