Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File: l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier: Q1dAHTMPnxSC9dzRc2ZDYO8kJvIUEa3EbPqGF7JKpIQ=
Subject key identifier: 4F:DA:06:CA:47:FF:E3:86:8D:94:DF:3B:42:17:A8:5D:EF:06:2C:44
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer: /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial: 0197B74579A81F32DF8B9ED4A1EF35A0D1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number: 04A4
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: isoSmFNlha60zH8lgYW4u6CoB87S+o0IF9XN444nVag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:79:a8:1f:32:df:8b:9e:d4:a1:ef:35:a0:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=4fda06ca47ffe3868d94df3b4217a85def062c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:24:f3:83:66:2c:58:c0:ea:0c:ce:7f:f2:
8a:c9:d3:60:4b:10:19:be:98:38:75:86:f9:c9:00:
3d:b2:34:54:3a:ad:d6:29:48:c4:cf:d5:83:5e:97:
80:86:c8:80:19:56:b5:05:45:56:eb:63:8a:39:04:
f4:73:bd:fa:03:e1:46:4c:d4:33:c6:c5:2e:41:2c:
5c:8d:76:47:d0:a1:a1:a2:a5:5c:d7:48:3e:8c:05:
23:2a:a2:d1:3c:d5:51:32:57:92:f0:0a:f7:a9:89:
ad:42:0c:8a:a7:02:b5:07:ee:ab:82:b4:80:b5:6c:
6f:94:49:a0:16:30:ea:a2:83:b0:d7:b3:6e:16:87:
7d:57:08:0b:76:e0:c5:2c:bc:c9:95:88:f6:17:d6:
3c:f3:5c:52:b1:a6:00:27:3a:8d:c6:d2:23:6d:9d:
d3:44:03:b9:b5:35:ad:04:f7:f6:a7:f4:3a:fb:b1:
a4:14:db:9a:ce:af:8f:23:69:0c:86:f0:da:a5:5e:
66:da:ae:ea:6d:fc:45:2d:82:1a:3b:2b:40:81:b4:
19:5f:d7:3b:ea:bc:80:f0:05:3a:f0:d1:73:3b:83:
df:fd:c5:dc:ee:8e:16:ef:de:da:70:0b:c7:ce:a0:
59:b9:ad:a9:3c:51:54:43:15:fd:78:c9:96:21:8a:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DA:06:CA:47:FF:E3:86:8D:94:DF:3B:42:17:A8:5D:EF:06:2C:44
X509v3 Authority Key Identifier:
keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:69:fb:82:92:4b:4e:aa:56:27:6e:26:91:f3:9f:74:f5:
1a:b1:d0:bc:09:c3:2c:cd:e2:36:4f:2b:30:eb:d9:4a:8c:da:
c9:f5:61:0e:4b:64:2d:91:2a:12:26:21:8a:5b:2e:13:e8:fa:
31:fe:e0:4f:3e:da:2a:4b:55:0a:82:84:78:b6:1c:4c:d7:a7:
9d:7b:15:38:47:99:99:60:5b:f0:10:99:75:b2:18:93:05:21:
b7:0e:5f:b8:f2:9d:3a:5a:f9:f5:20:8f:e9:19:41:58:51:85:
6f:64:ff:cf:f3:87:80:db:4e:ef:6d:af:9b:e2:3c:fa:57:c3:
d1:e7:09:a9:2b:8d:d7:14:9d:4a:b8:43:e3:fd:3c:67:2e:55:
88:7b:d8:58:a5:c0:bc:36:9b:17:41:47:0e:02:61:3f:03:b3:
85:10:1e:d7:99:3c:24:9b:3d:8c:88:aa:75:06:53:c1:f3:7a:
46:14:36:93:20:4d:97:d4:14:2e:08:2d:41:3f:46:75:d3:ed:
de:d7:3b:0f:e1:e9:fb:89:c3:59:79:16:65:cc:72:32:5f:67:
49:cd:32:da:68:22:f1:32:6f:6b:bd:e2:1c:63:c0:43:3a:79:
34:62:6f:ff:11:3d:71:db:e4:de:de:12:f8:4d:47:e4:ca:d9:
fd:b0:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:34 2025 by rpki-client