Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: ikWbsUt0yVUJXb02x/Sl+DBcXHHDEpVSBFCr18YQXVk=
Subject key identifier: A9:51:F4:88:72:8D:65:A4:47:94:CA:EF:B6:3B:9A:51:BD:97:D7:6D
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 0197C426670C434903D870C74E20A7EA8663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 0EBF
Signing time: Tue 01 Jul 2025 04:02:20 +0000
Manifest this update: Tue 01 Jul 2025 04:02:20 +0000
Manifest next update: Wed 02 Jul 2025 04:02:20 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: yvnjdRI3m2TsE3ZREAe+55Geyl79kE3u85qYb08I5MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:67:0c:43:49:03:d8:70:c7:4e:20:a7:ea:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Jul 1 04:02:20 2025 GMT
Not After : Jul 2 04:02:20 2025 GMT
Subject: CN=a951f488728d65a44794caefb63b9a51bd97d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:54:49:16:55:98:57:ef:06:8b:46:35:9b:
09:23:ae:5e:01:1f:77:64:59:b7:c6:b0:0e:49:3c:
4c:e0:93:6e:63:d4:b5:7f:2b:03:6e:78:44:9c:e4:
89:64:65:20:60:79:b2:b3:9e:ce:bb:5e:b8:ba:40:
2e:6f:d2:c3:28:31:77:c3:46:4d:7a:49:02:af:6d:
33:96:08:66:83:3c:ba:ed:cb:44:b3:6a:dc:97:c1:
ae:40:ea:f0:75:04:47:74:a0:bd:18:0e:89:01:50:
c0:f5:51:57:d9:51:7f:32:71:f9:8e:bb:c3:44:60:
c9:06:d2:51:3f:e0:3f:0f:bf:f2:35:79:00:b1:6d:
e5:c3:9e:56:7d:7e:7f:3c:f5:43:96:7a:30:9c:9b:
42:1a:34:65:25:2b:9b:0c:a4:d7:7f:a4:18:0b:af:
ca:1a:87:9e:18:cf:b3:46:ba:5b:c4:b9:24:8c:66:
62:c6:d0:ce:c6:78:72:e7:62:21:28:95:be:62:87:
21:1e:0b:70:42:62:83:78:47:45:b7:2c:ed:50:92:
45:be:36:9d:f9:65:b8:e0:24:d1:e3:0f:42:c0:ba:
e9:07:67:a2:42:63:ea:93:09:77:88:12:e4:95:dd:
5b:5a:a2:00:fa:79:c3:2d:02:ea:4d:a3:55:c2:84:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:F4:88:72:8D:65:A4:47:94:CA:EF:B6:3B:9A:51:BD:97:D7:6D
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:82:69:11:7a:36:67:b3:82:3b:18:52:b4:0c:59:f9:e7:
fb:0e:db:84:3c:97:df:52:d9:c9:7f:ab:68:d3:ff:64:f1:8c:
5c:f2:ce:39:91:7f:ee:07:81:bc:d5:31:53:b6:69:81:3b:bf:
3f:17:23:90:9c:70:99:70:dd:5d:9d:05:0f:6c:ed:69:f3:e7:
ec:d7:bb:1c:04:26:7e:79:e7:68:df:be:a4:ef:46:db:e1:bb:
fd:40:ad:7b:3e:ca:43:e5:4a:a2:fc:3e:57:92:f6:84:d3:33:
36:35:91:08:e1:fc:aa:e3:8d:54:7d:f7:bf:c8:ef:77:3c:e2:
54:db:f3:3c:58:4c:5f:b3:f5:00:a7:24:19:0f:d9:59:81:ad:
9a:af:0f:f3:9b:4e:c3:23:f0:15:7b:9d:87:43:e1:d1:2f:c5:
ec:26:7c:f3:59:5a:d7:aa:10:d6:4c:43:a2:df:3d:42:0f:09:
98:ab:27:6f:24:4f:4f:88:07:34:63:b0:3a:c4:b4:96:91:fc:
70:3c:ef:bb:96:27:e6:0d:ab:c9:41:af:39:59:13:69:b6:40:
21:6e:7c:f3:37:57:a6:41:0b:0e:10:05:ba:52:66:4e:97:bd:
bd:17:e5:5a:01:ae:79:c7:5c:04:fa:74:3a:5d:f2:0d:65:dd:
94:de:d9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:14:58 2025 by rpki-client