Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: oTdM9iCh+ErL/qx604OEoNN/zJMXVxBZbRs62fLq+tU=
Subject key identifier: E9:C1:A6:42:AA:8B:93:1A:91:C1:19:3F:36:FA:5D:88:55:D9:32:9B
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 0197B7EA3D198FB79D6849C7F280D28062EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 042F
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: xWuhUjGtrFqzMTlfb9oHOY5zhPRf7oNMmTbwgJNTwV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3d:19:8f:b7:9d:68:49:c7:f2:80:d2:80:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=e9c1a642aa8b931a91c1193f36fa5d8855d9329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:4f:ee:45:c7:45:1c:d1:96:7e:63:76:d8:
13:a2:8d:fe:f9:d5:7f:a8:cb:19:4d:5e:f0:16:54:
74:de:5b:f6:a6:76:3c:4d:70:8e:65:85:65:9e:67:
bd:5a:94:ca:b4:f9:ed:18:eb:52:f5:b0:46:f2:69:
cb:84:87:fe:90:3f:29:52:c5:93:aa:4d:e0:b4:21:
e8:3a:e4:6e:fa:2b:f1:2d:e1:0d:0e:62:76:e0:ae:
57:ea:4c:b9:86:0a:0e:c5:d0:70:ce:d1:2a:c2:47:
da:d1:59:d9:62:e5:96:e5:2c:b7:fc:ab:f3:b6:ff:
8e:3a:f2:aa:e9:f6:9f:20:10:62:50:80:65:fd:c2:
ce:95:c1:d8:24:82:fb:c5:c0:19:e9:ee:76:8b:a1:
3f:b0:f3:db:6e:37:bc:22:96:46:65:50:bd:19:47:
d3:89:6b:97:f5:d9:f9:ee:20:dd:b5:da:16:c3:1f:
37:de:a5:70:5d:8a:e1:b2:44:26:06:43:6e:bf:e0:
67:f6:bc:2b:1a:ad:7b:13:3c:93:90:27:d4:03:99:
7a:98:0a:5f:5d:14:26:4b:fd:2a:21:ca:4c:e0:66:
ec:3b:0f:31:23:9a:bc:b9:6e:cc:6f:9c:4b:b5:6a:
4c:15:1e:ff:29:72:90:7e:59:e7:c1:d1:6a:c8:06:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:A6:42:AA:8B:93:1A:91:C1:19:3F:36:FA:5D:88:55:D9:32:9B
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:dc:2e:ae:4d:ac:73:dc:99:b4:0f:b7:f1:41:b1:93:09:7b:
0c:f2:f6:15:13:67:9f:a7:c6:71:1e:8d:95:f5:bb:b0:e3:4a:
c7:d3:be:69:c4:36:ae:62:33:f8:e9:15:db:ab:b8:59:cc:5e:
d7:e5:58:45:f7:78:2d:05:fc:5f:c0:46:d7:db:bb:c8:f7:0c:
57:f8:11:71:fa:56:01:74:ba:a0:7a:14:bb:3e:d0:1d:9d:5b:
6c:97:87:ae:a8:0a:75:cb:dc:63:3a:45:6e:b0:9d:a7:75:c0:
50:45:35:fd:60:5f:48:3f:5f:28:12:c8:72:b9:b7:1d:92:79:
2e:a4:ba:28:33:06:3a:35:7d:d0:9b:85:bd:e5:ec:ec:a8:1d:
22:23:58:75:06:60:e7:ef:1e:06:97:dd:1b:7b:08:b8:a3:b1:
73:ed:ac:92:4b:95:c6:b3:a4:8d:8d:bc:7a:82:b2:45:3a:c6:
9c:93:0f:af:bc:e2:10:5e:31:c2:c0:e5:a8:22:a7:03:c6:cf:
63:5f:17:86:37:64:c3:22:74:8e:1a:78:e1:ce:b9:83:38:bb:
10:67:bb:39:43:6a:9e:78:2a:ad:9a:aa:e1:4a:da:39:9c:04:
97:be:ef:2b:d5:14:44:81:ac:c7:4e:fd:e7:e9:6f:9a:29:37:
25:02:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:02 2025 by rpki-client