Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: YsaDJp2FCQsS6iQ3I9zYD6SK9cAwbPcIj/siwAEl/Pw=
Subject key identifier: BE:3B:65:66:CE:68:83:E4:04:4F:41:C3:CE:70:1D:1C:75:DC:02:D0
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 0197B7B33414BD7FEFA7324FA56CD92435DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 047C
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: oomOqRjf/tfApXlX6eqpxlk6ysK3BOrIcE9YaaxJggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:34:14:bd:7f:ef:a7:32:4f:a5:6c:d9:24:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=be3b6566ce6883e4044f41c3ce701d1c75dc02d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:10:f9:94:d3:7f:78:65:0c:18:a9:33:9e:
d6:b3:c5:0c:9c:77:66:2f:ee:c4:58:c6:a1:54:87:
64:9b:f3:01:86:8d:bf:7f:38:b8:e4:0c:2b:20:7b:
48:7f:d4:b3:d3:56:9a:c5:87:b4:3e:56:a7:4a:99:
03:e4:7b:78:12:99:ce:2a:6a:29:f4:17:83:0a:84:
b8:5c:83:6b:31:9d:73:bc:34:0f:02:26:63:85:31:
3e:9f:e3:46:96:bf:d0:8a:d8:b2:fb:35:07:74:6d:
61:79:dd:66:01:e2:f8:06:61:db:60:7b:5b:2e:5a:
88:bb:7d:ed:b6:a3:63:6d:62:9a:19:95:14:47:89:
2e:ec:65:8a:87:1f:9a:79:37:28:c9:44:1a:38:46:
84:32:a0:7a:bf:c6:94:dd:79:dc:f3:3a:be:28:d4:
63:a5:26:eb:b8:89:7d:a0:76:58:1c:58:af:0a:f3:
f4:97:fd:1f:a9:cc:11:b6:db:79:6e:2c:65:69:a4:
66:a8:cc:61:fd:71:94:4d:ce:4e:d6:9e:2d:c6:81:
ad:1d:7e:97:7d:7b:cd:bd:ef:20:3e:a9:82:07:3b:
fa:d8:bb:75:c8:21:e1:8c:3b:cb:d7:97:8b:f4:c6:
0f:4b:2f:c5:6e:a1:c7:0d:39:9d:da:ca:6c:c7:73:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:65:66:CE:68:83:E4:04:4F:41:C3:CE:70:1D:1C:75:DC:02:D0
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:75:2c:b8:4e:bd:89:29:d9:34:3d:c6:e3:7b:e0:02:26:
96:96:73:17:86:16:09:e3:01:4b:e2:c1:d4:c1:5c:fc:63:e6:
7b:d3:0b:9d:4c:84:f7:0b:e4:4d:8e:03:e6:cf:4f:1e:20:e2:
43:13:e6:73:47:1b:13:13:ce:1a:4a:9e:b2:3b:3e:65:74:01:
41:5c:80:e8:c9:25:3d:27:93:1f:66:3a:93:9e:d3:9c:6a:73:
4f:ac:93:19:52:b3:8e:bb:d9:51:84:fa:5e:36:6f:64:e6:f7:
73:1c:47:68:26:3c:e8:53:da:65:ff:2c:da:79:8e:06:9f:e1:
13:4a:9a:cb:2c:ce:e9:20:22:99:f9:90:45:64:d0:88:57:3e:
69:4b:66:f6:a5:c4:3b:2d:e0:19:d9:b8:2e:b8:f0:aa:06:69:
d7:91:7d:8a:75:9f:f7:36:e2:43:1d:94:b1:4d:0e:55:a0:b8:
a4:2e:77:31:6e:0c:45:c8:11:2b:64:ae:38:a1:c5:42:be:b8:
9b:d9:2d:9e:05:86:0f:2a:b9:57:59:26:2d:85:9f:4a:54:9b:
ad:f7:d5:79:e6:b1:ef:ea:3f:ce:ce:b0:bd:fb:ac:3b:e1:3b:
f2:8f:4b:fb:32:47:6f:2a:7e:06:ae:4e:39:0a:32:b6:6c:9b:
3a:8f:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:18 2025 by rpki-client