Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: J4WG8aiSHtTAkmuEPfip16pLdAsD1ZbZqOYIpiGVaGU=
Subject key identifier: 91:EE:4C:FA:E8:82:2B:10:33:73:DA:A3:32:E9:1A:F4:F1:E8:E3:FE
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 0197B5FC48570AF1DD1EB4FA48CCB90A2C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 09AB
Signing time: Sat 28 Jun 2025 10:01:38 +0000
Manifest this update: Sat 28 Jun 2025 10:01:38 +0000
Manifest next update: Sun 29 Jun 2025 10:01:38 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: A7/Xr75Lgs1frZyZU9myn/rt7fhXfm+XdPv6AZsQ03c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:48:57:0a:f1:dd:1e:b4:fa:48:cc:b9:0a:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Jun 28 10:01:38 2025 GMT
Not After : Jun 29 10:01:38 2025 GMT
Subject: CN=91ee4cfae8822b103373daa332e91af4f1e8e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:7d:09:e1:1f:ad:4d:0e:ea:6e:bd:8b:eb:
ab:65:0c:1e:61:23:e8:92:63:ca:c2:8b:fd:2c:38:
52:d6:9d:40:f2:1c:39:b3:04:00:5d:bb:66:b2:72:
76:b0:1d:3f:a1:62:86:8d:cc:20:a6:22:8e:d8:01:
47:f9:db:e8:fd:51:51:02:de:93:c3:40:90:04:5c:
d8:c9:d7:aa:e6:6a:75:c6:0e:ff:5c:21:55:d3:d2:
8d:b6:94:be:b9:b2:4a:76:61:10:d9:1b:1f:1c:09:
ce:d7:39:3f:23:01:8d:9a:06:c4:e6:d5:0d:90:49:
1c:6b:69:dc:3a:ad:4f:ee:c8:eb:0d:4a:3b:ad:f4:
47:83:1e:22:2c:98:50:de:dd:ea:b5:e9:d8:b1:f8:
40:82:4f:9d:30:7f:5a:24:42:62:f5:27:39:da:0f:
b7:46:c2:52:59:0d:b6:d4:f1:4a:4a:ca:00:0c:a2:
01:69:c7:18:86:74:f5:43:b6:f4:1c:43:a5:36:d9:
07:54:d2:22:bb:c1:d3:9f:9c:ce:eb:91:50:c0:0c:
3c:14:e3:4a:46:7d:b6:23:62:b2:39:e5:82:67:46:
05:99:77:d8:e8:f7:96:78:a5:62:90:33:fc:51:2f:
58:e7:9c:66:58:fc:54:f8:1f:e2:c5:f6:22:cc:63:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:4C:FA:E8:82:2B:10:33:73:DA:A3:32:E9:1A:F4:F1:E8:E3:FE
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:39:37:08:0b:4c:0c:a6:4f:7d:f7:3a:3b:03:80:0a:9c:f9:
f3:b1:fc:81:f6:dc:b6:ed:b7:17:b5:f9:8c:54:96:db:49:b5:
72:74:1c:76:68:11:37:df:03:49:0f:6c:0a:98:a2:cb:71:15:
d1:54:b5:eb:c2:cb:5e:a6:7f:c1:9b:65:8b:86:69:2c:92:d7:
82:d3:6d:e8:e4:de:9a:1a:4e:8f:62:10:4b:84:65:7a:67:73:
74:bb:64:27:4f:06:c3:1d:46:7e:27:63:61:08:62:5c:3f:8b:
e6:44:3e:81:71:60:12:12:3d:bf:7b:89:52:e5:9e:c2:52:eb:
fb:b7:f0:fb:73:86:79:c1:d8:a4:f2:49:8c:22:09:e5:7c:01:
ef:de:20:9e:18:7b:19:04:c8:6d:81:ab:7c:75:f6:c9:3b:a9:
ba:d5:8f:66:df:52:07:35:97:5a:b8:ba:66:70:ec:d4:a7:d6:
33:0c:19:1d:1f:4f:9a:b7:de:db:f4:73:de:62:33:7b:80:ca:
bc:4b:9e:af:e0:f6:6d:3e:e4:74:1b:11:75:34:5f:73:fe:9f:
00:07:76:7a:0b:5a:5f:3e:90:7f:2d:f1:17:31:03:0c:3e:34:
92:23:c6:7c:7a:4d:95:25:56:64:57:aa:5a:b1:fe:ec:3b:3a:
2d:9d:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:24 2025 by rpki-client