Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: Dw/t5qNpGDurwIpvL/IX+D05AVauYZl32Xle+pbxLAM=
Subject key identifier: 4A:EC:27:12:B0:8A:DC:A7:8F:5B:8D:D6:40:FC:CC:C0:4A:81:19:57
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 0197B70EE66B8EFF94287761D000E0499CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: G+cjTnENZfGEcO+5Hu+VDoMrSSNw36xwwwJrmSzWsU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e6:6b:8e:ff:94:28:77:61:d0:00:e0:49:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=4aec2712b08adca78f5b8dd640fcccc04a811957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:46:c9:90:66:1b:6d:8b:69:4a:82:db:1c:
6c:8a:de:a6:e8:4d:88:3e:c2:a5:76:c5:30:b8:f0:
2c:98:0d:9c:1d:93:e7:f5:32:5c:33:1c:d7:2c:dc:
65:a6:28:94:f8:93:32:9f:42:10:b3:49:c5:e0:f7:
2c:d5:d4:91:60:bd:3e:1a:2b:10:63:c1:f3:84:14:
59:1e:b9:99:60:7d:6e:f3:81:3d:17:d1:a6:f9:e9:
7e:b2:6f:a7:8b:a5:4f:bc:bb:09:b9:aa:56:83:80:
2a:a8:bf:49:f7:70:fe:8b:1a:c9:8e:b2:00:2f:a3:
a8:ce:85:69:16:a9:e2:37:09:f1:96:34:9d:51:0b:
f4:9a:16:05:32:5a:0a:69:5d:5c:91:6e:0f:3b:7e:
47:63:3f:66:a8:90:19:68:be:0f:ae:8b:cb:91:6c:
17:ab:a8:7c:38:fd:16:1d:45:96:3e:91:6f:b3:10:
b9:e7:89:c9:17:a0:2f:03:5d:9b:68:ee:13:7d:04:
77:74:8b:37:69:a2:bd:cd:ac:2c:5f:16:20:21:1f:
84:41:d2:db:fb:da:52:e8:97:fb:70:cd:a4:39:94:
1f:52:cf:0d:18:c6:44:49:6d:58:92:10:ca:25:88:
96:5a:2b:e9:0f:45:ac:cf:74:b3:4a:60:25:74:64:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:27:12:B0:8A:DC:A7:8F:5B:8D:D6:40:FC:CC:C0:4A:81:19:57
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7d:47:61:e1:63:f3:7a:79:e7:52:eb:02:bc:36:98:a5:b1:
a3:b4:4a:07:e5:48:ad:80:48:bd:ed:ff:ef:12:9d:f9:98:c8:
84:92:3a:80:6e:e9:bc:d4:c3:bf:42:8b:6d:30:6e:2d:a3:90:
80:74:be:87:b6:6f:bd:0b:88:cc:36:ff:ba:63:97:e4:7a:8d:
1a:71:7b:a7:dc:31:02:1f:c2:71:bb:70:a5:67:a4:45:5d:aa:
e9:82:56:5f:d5:6d:d7:d4:cd:96:75:0e:d0:11:e1:91:d0:0f:
fb:2f:66:09:8c:de:92:02:3b:d6:c6:8d:9d:83:ba:8d:c6:94:
97:4f:37:1f:4b:c8:21:b7:51:c3:09:a2:24:ed:77:be:19:b9:
ee:77:1a:02:f8:46:9d:cb:73:9f:a4:78:64:2f:3e:32:69:29:
eb:9e:34:32:bd:d1:ed:de:9b:51:0a:7a:39:26:bb:c2:de:67:
d4:77:89:d6:e1:8f:83:da:b0:56:4f:db:7f:91:41:63:b0:c8:
a8:bc:f9:0a:91:6f:e1:09:6d:1a:6d:c6:ec:ea:ef:e5:86:af:
b2:d1:ec:06:9e:c7:20:8e:3e:61:92:ce:e3:57:aa:3f:ed:dd:
0a:0c:41:d1:bb:be:5b:15:f1:7f:68:c9:7c:b8:41:84:a4:c3:
e1:1c:4f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:17 2025 by rpki-client