Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: gofdKFDYLbcjz0sLRqADxhZt2L3GHZHtstJVV4FxD3Y=
Subject key identifier: A9:D6:CE:F1:D3:6A:27:31:B8:F5:8F:7E:A5:66:E7:C5:23:2C:5E:E1
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 0197B7451B4BC294BD194F8974E758B86043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 046F
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: wHNMtj4Pp/EJEV2gdI5oqG22JLPW5qY0UE/Glq3yl8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1b:4b:c2:94:bd:19:4f:89:74:e7:58:b8:60:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=a9d6cef1d36a2731b8f58f7ea566e7c5232c5ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:55:b0:b7:bc:1c:92:f6:1a:b9:16:e0:1a:
5f:dc:65:0c:59:0d:51:a4:f1:fd:43:56:af:19:84:
97:57:59:d9:0e:4f:78:c2:b0:13:0e:53:33:ef:35:
be:5d:9f:b3:ca:16:5e:a1:d6:a2:cc:b0:b2:b1:a5:
6e:96:97:12:99:29:3c:f5:45:27:1e:bc:6d:7b:4b:
48:a1:2c:20:34:51:92:48:32:6b:62:51:0e:4e:f9:
6a:f4:e2:23:9f:ea:e4:65:8f:9a:3a:6e:01:96:6d:
d0:4e:6b:90:66:00:e5:fb:ac:3a:d4:ab:e7:cb:ea:
78:10:8a:ed:12:39:49:0b:a5:5b:56:4c:10:e0:9e:
b5:ed:f4:bd:a1:95:74:f9:71:53:a3:1a:fe:d6:72:
cb:b0:f4:7a:ef:7b:b5:92:b8:27:96:32:eb:02:8f:
42:4a:c9:8b:b2:af:da:4a:51:fd:4f:d9:5a:05:1a:
ad:34:3e:2a:cc:f3:ad:3c:47:c7:f2:88:70:f7:2f:
a8:f6:21:2e:03:d8:cd:57:82:fe:f4:ab:e5:8c:73:
94:17:39:0d:20:bb:db:4b:82:7a:4d:04:df:e6:ab:
a6:74:9a:39:0b:33:6e:40:dd:05:1a:72:1f:51:22:
c0:08:41:99:2c:db:e1:25:24:3c:06:75:06:b8:03:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:CE:F1:D3:6A:27:31:B8:F5:8F:7E:A5:66:E7:C5:23:2C:5E:E1
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:60:f1:01:16:fb:8b:51:86:39:3d:fa:cd:c8:22:5c:97:fe:
d7:07:6e:a9:c6:38:2b:f8:1f:32:31:23:23:f7:3f:33:39:88:
25:97:5a:fd:6b:f3:20:c8:13:80:62:ae:d1:e1:7a:19:49:39:
97:31:f2:7f:3c:8b:4d:98:29:37:a5:71:85:0a:21:7e:67:c7:
1a:97:9b:c1:6a:c0:6f:f1:0f:51:55:f3:e1:60:dc:c6:9c:12:
6f:64:98:0f:86:6e:42:aa:bf:a1:e3:f4:ee:37:2c:91:00:ac:
1a:2c:72:44:d7:1a:ed:86:e3:4d:ae:29:dc:6f:e8:8c:67:6a:
68:6e:bb:32:b8:50:5d:f5:30:f4:52:1b:bc:21:9c:8f:e5:4d:
42:15:30:ae:b7:df:2e:d5:d2:ea:cf:d9:56:10:85:e7:28:14:
25:91:40:94:17:64:74:03:9d:ff:85:56:df:7a:4a:73:73:6d:
92:e2:62:59:dd:95:95:f1:19:55:7a:e3:cf:5e:6e:86:a6:2d:
e6:3e:83:4d:1c:e8:6c:ff:24:77:91:0b:d6:ae:b5:38:80:46:
83:bf:e1:43:d6:ea:b4:c4:90:cc:70:0b:ca:e6:47:1a:dd:73:
ab:15:b2:53:dd:d0:9b:75:db:c5:64:a7:7c:12:27:bc:89:e4:
38:9e:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:13 2025 by rpki-client