Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: GUW5huqGG6rgNujQc5Adhae/gTT9K4iTNDeWCCI2RNk=
Subject key identifier: 87:91:02:39:AA:F2:43:D8:9F:05:75:62:D0:07:32:9C:59:A2:D4:D8
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 0197B77C7449695DABFB4645806C10CF474E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 1135
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: uM3w5shg2Rlw03clVwfDC8tk0dz2VHdBowaSiqkY+LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:74:49:69:5d:ab:fb:46:45:80:6c:10:cf:47:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=87910239aaf243d89f057562d007329c59a2d4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:2f:c7:ee:31:aa:a9:49:02:dc:5a:b1:75:
61:a5:68:e1:20:90:d0:ef:ca:e8:fe:7f:fd:ac:c4:
55:de:6a:98:c4:4d:08:e5:da:df:30:b9:a7:41:a2:
90:d6:52:38:f9:c9:23:0e:f6:a6:66:93:5d:66:d0:
a1:bc:d1:d2:3b:94:c5:c8:4d:dd:5d:78:61:7f:ca:
fd:9d:0e:5d:2d:cb:ea:12:3d:51:78:9c:8a:1e:de:
7e:6d:45:d3:54:9b:b0:94:a4:1c:29:53:20:ef:b5:
4a:1c:e0:0d:16:21:90:07:31:74:bd:a7:11:cf:05:
84:31:f6:49:42:2e:b1:79:b8:91:4e:57:af:79:c6:
7b:2a:05:3d:b0:de:d8:8e:3e:55:37:35:01:ef:cb:
86:d1:2a:83:7d:54:6c:5a:18:ed:99:73:5b:a7:4e:
81:40:17:87:fe:b5:52:45:b6:06:58:42:41:f9:88:
b2:1c:38:4e:44:c9:70:7f:ef:f1:74:01:6a:18:31:
e9:f9:ee:cf:48:dd:42:e2:c5:bf:54:67:84:62:8f:
ca:cf:a4:85:74:30:df:05:74:26:04:95:95:26:94:
e3:04:36:8d:26:2d:91:c3:7f:d7:19:41:02:cc:99:
6a:15:c8:8a:ea:15:0b:b9:01:bf:6f:a6:45:ec:08:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:02:39:AA:F2:43:D8:9F:05:75:62:D0:07:32:9C:59:A2:D4:D8
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:9d:8d:92:84:87:00:24:b5:e7:8c:49:6b:71:01:9a:85:4a:
1f:96:3e:f8:bf:d2:35:0e:3d:e8:54:c4:e6:7b:e5:81:44:b2:
a8:dd:4c:aa:10:3b:2e:ff:84:96:3b:63:81:d0:73:db:00:5a:
dd:b1:9e:49:a5:bc:4f:75:91:b0:49:67:76:04:96:73:0f:95:
17:40:04:62:c7:c7:22:3d:89:b0:ea:1c:72:79:e5:83:eb:f6:
14:8c:3e:ae:81:b6:39:9a:a6:07:cd:38:c2:48:7c:f5:41:24:
c7:b1:ac:66:77:10:80:5a:e0:f3:f5:09:fc:b3:f0:70:fb:be:
17:53:c4:af:b9:bb:31:1d:cd:d4:be:d4:7d:bd:e1:7e:23:c9:
a2:d8:1a:13:3d:dd:c1:c1:f1:e3:2e:2d:d9:0f:7a:69:19:83:
bb:0d:d8:0d:7a:f5:e6:00:64:a6:f5:c7:d0:1a:6c:8c:16:bd:
9c:eb:b8:e6:d2:28:86:98:47:cb:79:cb:8c:62:b2:bf:66:ff:
15:15:95:fc:26:64:e0:5c:1c:7b:3f:20:37:db:8f:1a:0d:78:
ec:32:b8:de:d3:a6:28:2b:3b:0d:4d:94:e2:27:56:24:43:7d:
b8:0e:06:61:40:49:dc:b1:9e:64:6d:7d:3d:a9:bc:13:e3:84:
f5:07:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:40 2025 by rpki-client