Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: MMHBymqaWNFN9w3sALQ6nEYtDZtKIvOCFsEmUPzn7RI=
Subject key identifier: 26:DC:3E:90:E0:6D:84:86:8A:80:4D:B7:E4:55:56:E0:05:86:D2:FE
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 0197B6A0C479579A725802CE666C85FE0F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 73
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: +ACcVr0sm9ccJUnPS8XmglBLh/R8go5zO+kQale84EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c4:79:57:9a:72:58:02:ce:66:6c:85:fe:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=26dc3e90e06d84868a804db7e45556e00586d2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:5a:75:a5:89:12:e4:47:73:25:c7:34:46:
7d:0f:95:c9:6d:1d:f3:5b:d6:a4:1f:3e:e3:87:a0:
c2:f8:31:d8:ce:54:83:1a:75:f8:27:5a:5d:88:88:
8b:e0:44:88:a9:c9:40:63:c0:99:de:49:84:ad:5e:
d3:83:07:b9:2c:a4:7c:01:e5:6a:e5:4d:78:7a:be:
e1:5e:d9:74:75:42:98:07:a4:9e:ff:dc:75:81:b2:
72:2b:75:3e:e8:db:7b:2c:8d:06:20:b1:21:80:07:
a6:fc:5a:24:29:5d:1d:dc:2f:09:8b:61:24:a2:5b:
59:5d:7c:a5:96:8f:90:7a:d2:1f:1a:67:85:47:cf:
d6:5b:85:54:2a:da:ba:5c:27:c3:59:df:16:1a:d2:
ca:04:95:57:fa:07:d7:fb:b2:0d:d2:b7:2a:12:03:
11:82:e4:85:4c:58:61:42:08:28:3c:a7:0a:d3:33:
03:1f:12:60:6b:8b:4c:32:b1:09:6c:c1:5c:ff:7c:
5b:b1:1e:90:78:20:54:47:2d:1d:67:b9:20:9e:a7:
4f:16:fe:ed:bd:7a:f1:24:e4:6a:30:76:dc:ec:d5:
c9:3b:3a:e0:6f:ee:fc:c8:9d:63:27:fe:27:d3:2d:
0e:79:12:29:2b:87:d7:ed:72:9d:1d:07:0e:3a:28:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:3E:90:E0:6D:84:86:8A:80:4D:B7:E4:55:56:E0:05:86:D2:FE
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fe:2d:93:58:dd:0f:ef:37:71:90:d1:b1:da:ba:52:4c:53:
88:75:f3:4e:29:c0:a9:9d:e7:8e:06:d3:6e:bb:d1:b1:93:d3:
6b:62:fc:56:a1:1c:c3:59:ff:ee:b7:40:d8:64:44:d6:dc:86:
21:84:de:48:f8:6d:18:f4:a2:ac:24:ab:84:23:55:32:8a:09:
df:f4:1b:1c:c6:fe:38:a7:3d:05:fc:a1:ae:e7:71:28:cf:ba:
17:9d:d8:d0:dc:c6:63:a4:37:43:78:fa:85:cf:19:db:12:53:
fa:63:e6:30:63:86:c6:6b:66:86:56:ec:a4:c6:5b:b4:2d:90:
13:dc:86:7c:07:52:c1:35:a4:e2:e2:a0:51:23:70:91:b5:34:
7c:14:13:c8:67:15:18:76:b7:21:07:36:c4:36:a3:d6:5a:7f:
ef:d8:74:39:91:7b:c4:66:97:fa:be:9e:0f:bc:86:50:0f:19:
34:cb:19:5c:20:d5:be:f1:e0:07:c6:50:05:ec:12:45:68:1d:
e4:c6:11:c5:44:8a:4a:6f:12:12:2b:a5:77:0e:3a:86:94:5c:
de:f6:12:20:6b:52:49:9f:1b:19:1b:92:a3:2e:54:7f:df:bc:
67:f8:76:71:7c:99:0b:fd:ec:9a:3d:58:1b:1e:24:9b:4a:b7:
67:40:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:09 2025 by rpki-client