Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: QL1T7QnWp8gt1FWTbhAQ2hp7gYPqeVkWmyv7dkgnm6E=
Subject key identifier: 57:DC:1E:A6:24:33:BD:C2:36:68:F0:8C:A2:5D:3B:A7:5D:6F:94:DA
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0197B6D753CC0FC4716AE10AAB8E2253D5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 03D1
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: YmrWo/iGWTb4lLiXKlC2RnlH5SrSMOu+F/eAYoa4K7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:53:cc:0f:c4:71:6a:e1:0a:ab:8e:22:53:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=57dc1ea62433bdc23668f08ca25d3ba75d6f94da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:a6:62:b4:32:79:47:bd:72:69:df:bf:b3:
3b:2f:82:1e:ec:dc:be:51:f0:a8:df:ef:a3:24:c8:
f6:e0:40:c1:9c:ed:66:5c:79:52:f3:55:60:af:54:
3e:6d:5a:ce:0f:76:a4:f7:49:ff:51:2d:7f:d7:8e:
f6:48:be:27:c9:b6:fd:7e:e0:14:71:9b:a3:55:8e:
d5:3a:1c:42:eb:66:c3:9e:73:18:ef:5f:a5:6b:87:
27:7d:cb:ec:22:53:9b:cf:dc:7f:d7:a7:62:d1:36:
98:87:dc:45:c5:62:c4:f6:25:3b:66:16:a6:a5:1e:
5d:18:3d:6d:59:74:e3:54:f9:8b:33:8e:95:5b:d6:
a9:c9:44:55:cd:fe:40:5d:62:ac:56:43:2e:49:82:
85:20:9e:9d:4c:3c:61:b9:cd:ad:d7:68:6c:ae:ea:
0a:46:e5:43:5d:9b:5a:90:f1:59:fa:c7:54:5c:6e:
d3:5a:8a:5e:af:31:82:1b:b7:46:44:0d:15:e3:64:
90:c2:98:33:79:c6:4f:50:2c:23:5d:db:df:7a:e7:
ea:d0:43:e6:ca:9a:5e:0f:20:f3:9a:ea:c8:92:66:
43:6a:15:f4:11:f3:96:35:32:b0:0a:fc:25:46:18:
d9:0d:cd:cd:cb:33:60:e4:2b:17:21:fc:fe:0b:bc:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:1E:A6:24:33:BD:C2:36:68:F0:8C:A2:5D:3B:A7:5D:6F:94:DA
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:12:31:8c:79:5a:dd:f2:07:f2:f7:6c:5f:12:b5:64:20:4d:
6f:52:60:40:2b:2b:57:72:fb:73:5a:10:59:55:f7:7e:3f:a9:
e3:28:a4:4f:b6:b7:e2:6e:47:77:0a:02:1f:e0:4c:b7:1f:ce:
2d:89:13:f6:e2:da:8f:52:85:3c:67:8f:61:a6:5f:d3:f2:45:
e6:ab:ba:a8:32:d8:12:19:f3:69:6c:ba:e9:ea:41:0c:48:3f:
d8:77:21:f9:b7:40:47:6d:7f:10:88:9d:13:d9:a6:58:2c:b0:
da:42:6f:22:6a:f3:ee:39:dc:ce:06:14:47:83:40:81:e6:dc:
ea:4c:d1:28:66:a6:33:09:ad:d2:1f:b3:38:da:37:fd:82:97:
6b:33:3f:06:3e:75:9f:73:55:f4:47:b0:48:47:9a:38:7e:01:
e2:a2:d5:aa:c4:bf:26:7a:ec:1d:35:53:35:c4:cd:1e:da:f9:
4b:4e:a4:5a:6b:24:cd:90:eb:98:11:cd:7f:e9:46:1e:67:75:
30:85:1f:f1:28:20:54:d7:12:d2:c2:64:c7:6d:2d:48:d0:50:
53:e6:04:c0:a4:8b:b4:ad:b1:f3:87:01:66:67:8b:5d:56:7a:
35:e1:d0:1a:56:12:b6:3f:2f:bf:5b:e5:9f:cc:33:e5:a4:6f:
0a:ce:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:44 2025 by rpki-client