Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: hlGTcZxEg13myxzpCqaeZvXq5urMMrnmMEZ/LstLZMo=
Subject key identifier: 9E:0E:D5:9A:64:85:FD:52:A2:C0:AB:C1:39:7A:49:AF:14:1E:45:5A
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 0197B6A16F2EF963921827E7051E958926EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: swMUFa5wEXgDx+Cd6YDMtQj6M2hZpQhf0+NTbgwsR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6f:2e:f9:63:92:18:27:e7:05:1e:95:89:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=9e0ed59a6485fd52a2c0abc1397a49af141e455a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:e7:f6:f6:1c:c9:88:ff:56:83:60:dc:80:
ef:97:02:7c:2e:a2:e6:4a:16:bb:bd:28:08:b0:a0:
ec:da:0a:ef:c8:42:a3:11:f7:7d:2b:ca:52:d8:bb:
99:23:89:bf:04:10:81:87:67:ff:b8:69:dc:d2:87:
39:52:bf:84:03:ef:4d:6e:21:0b:f5:63:d2:4c:d1:
7f:22:60:cd:5d:0e:25:6b:22:66:f4:6a:e0:9b:54:
31:21:5a:75:34:ae:09:9e:59:90:b2:5a:0a:f1:c9:
4d:eb:ff:6c:ed:b6:93:24:80:1c:76:65:23:79:b1:
d5:46:8e:e1:e0:63:92:1e:b3:0f:cd:66:4a:a5:ee:
b5:3e:7c:f3:7a:65:0f:1b:da:f0:02:e8:ab:36:c4:
39:b5:ce:22:5a:02:4e:3e:0f:e9:54:d0:c8:14:c1:
19:73:53:79:89:fc:d4:84:c8:54:ad:26:77:79:a1:
94:da:41:91:d9:41:d4:95:40:cc:ed:f2:fc:f2:cc:
ba:f9:66:42:ed:fd:29:f3:92:42:d2:49:c1:d4:b9:
7d:79:80:4e:d4:f5:aa:32:71:b7:3d:48:93:34:89:
57:c4:51:b0:98:da:ee:af:38:09:f4:ed:84:41:8a:
9d:ab:46:36:0e:4e:65:d7:7d:11:29:01:2c:1f:f0:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:D5:9A:64:85:FD:52:A2:C0:AB:C1:39:7A:49:AF:14:1E:45:5A
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e5:35:02:05:8b:c4:54:10:ed:ed:91:9a:02:6e:23:6b:66:
d0:87:70:02:64:dc:84:7d:86:b3:02:11:55:79:df:eb:ca:55:
33:6f:19:66:f2:b7:78:ed:61:d9:70:8e:01:04:9f:84:cf:4f:
10:c8:99:c3:c1:2e:da:21:e3:5a:ab:35:d6:e3:64:08:52:5f:
80:2f:b2:1e:4c:ed:7c:6c:1f:d1:e8:b1:fb:1d:2b:b2:9e:9a:
2b:15:84:39:48:97:ab:9d:67:fe:db:5d:7a:2c:10:1f:eb:8e:
1b:ec:51:7a:17:4e:88:db:43:cb:ef:e2:74:7e:56:36:cc:4d:
b6:65:73:6c:3e:04:5f:bb:dc:7d:6b:1c:43:e0:c9:48:6a:4c:
8b:6f:72:41:3e:c8:61:87:b4:f5:22:ae:50:19:c3:fc:1a:21:
8b:5c:10:e3:df:34:e8:1c:de:9e:df:0b:78:99:57:7b:6a:40:
19:e1:23:03:af:bb:a3:88:d8:ba:31:95:2c:28:76:db:9b:3c:
56:7c:0a:54:9b:aa:96:e0:53:61:40:45:14:03:55:f7:80:47:
f5:c4:c9:80:17:5a:a0:c0:81:f7:a6:c9:95:6e:8a:dd:70:f4:
60:81:29:e8:40:92:d2:6f:0c:c8:54:23:66:04:cc:ad:fd:04:
c9:00:39:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:57 2025 by rpki-client