Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: OXhnjBiUSgjUqjizDFSlkapYAcNhkWdjTriufUW+KSc=
Subject key identifier: 62:DD:85:F9:26:87:E5:C7:55:11:1A:1F:77:BD:2C:7E:48:FA:DD:0C
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 0196BF3799C5951AFD2C8AEFF2501F76E0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 1265
Signing time: Sun 11 May 2025 12:00:14 +0000
Manifest this update: Sun 11 May 2025 12:00:14 +0000
Manifest next update: Mon 12 May 2025 12:00:14 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: cO9u+PDJ1E9LPULyok53zwloFfHDrBNkGE6SCsUpOq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:99:c5:95:1a:fd:2c:8a:ef:f2:50:1f:76:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: May 11 12:00:14 2025 GMT
Not After : May 12 12:00:14 2025 GMT
Subject: CN=62dd85f92687e5c755111a1f77bd2c7e48fadd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:bf:b0:39:51:9b:2c:67:36:9e:49:ff:17:
af:c5:22:0b:ab:ed:3d:37:3a:38:50:43:e7:de:e9:
bc:5a:5d:19:9d:c6:fa:7c:1a:87:1a:4b:cc:df:33:
2f:3a:c0:78:50:be:05:46:67:81:10:cf:2a:94:37:
73:3f:03:3d:10:6f:71:8b:58:89:95:1a:f9:ef:c9:
f2:4c:fc:28:38:46:7f:ea:e8:3e:a7:ca:b1:48:aa:
60:12:93:c6:a0:d9:e8:cc:5a:ef:57:ac:45:8f:54:
f1:af:2e:20:1a:1e:68:93:80:87:1d:e1:df:a5:c9:
34:34:e5:00:b3:fe:83:bb:05:95:42:4f:88:61:92:
21:1f:c2:27:1b:92:9c:cb:5b:60:be:39:65:08:3e:
92:fa:d5:be:9d:d2:d3:49:dc:6e:e8:a5:5f:ae:dc:
e9:d9:27:cb:d0:b9:ae:28:a1:86:02:2b:d1:21:85:
ad:98:4a:11:03:2a:9d:2a:fe:ab:c2:d8:0d:12:0d:
98:83:97:04:e1:b4:59:7c:37:f6:57:28:fb:8b:1d:
03:9e:b2:98:72:79:b7:57:35:3c:c0:1e:c3:e0:ba:
93:b6:f0:e9:95:8f:b5:37:5f:fe:81:4b:47:d4:d2:
e5:db:8b:6a:a5:85:6e:62:6d:c3:c1:7a:ec:9b:cc:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:85:F9:26:87:E5:C7:55:11:1A:1F:77:BD:2C:7E:48:FA:DD:0C
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:31:98:d8:bc:01:6a:82:24:44:d3:5c:69:d2:49:f9:57:
8e:ef:cb:9e:6e:1d:ec:0e:a5:4d:ab:14:ce:eb:35:f9:f9:d9:
c6:83:f0:3b:05:5d:19:9d:e3:26:ae:89:df:8a:4b:09:76:02:
e8:24:98:8e:5e:13:8f:03:47:5e:4d:1e:56:45:9a:30:89:80:
d9:61:a9:44:77:18:26:55:d8:93:ec:ef:5e:f3:e7:33:98:7a:
8a:bd:81:58:53:61:55:d9:f7:e2:a8:52:8f:29:d4:21:b9:1f:
31:09:0e:f4:bc:32:ee:43:56:be:e6:7d:bf:48:a5:0c:e8:56:
aa:2f:7b:61:6f:21:94:4e:66:d9:a3:b1:ba:88:65:bc:64:22:
3a:d8:de:b9:15:46:fb:da:cb:71:57:e7:e4:4f:66:d6:be:42:
8f:9a:e7:07:0b:d5:c1:c5:6d:4c:ad:e0:4f:da:7a:c7:6f:99:
95:67:14:ce:47:96:58:5c:37:db:a4:13:3f:f4:8e:46:aa:9c:
ce:ae:ad:ed:78:a3:9b:59:bd:38:53:f3:ae:a4:6a:72:19:3f:
6d:73:31:6f:b6:f7:9a:80:43:12:2a:08:a0:9b:bb:76:c8:6e:
69:e8:ad:ca:64:6b:f5:16:b4:06:51:31:53:50:be:38:01:d7:
66:64:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:39 2025 by rpki-client