Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: xuYzxf8ypQlzFch/CImDsDE+VQ9VXXdvrFDYJZ6qOlI=
Subject key identifier: C9:A0:18:97:90:48:4E:EF:B6:4B:B0:75:37:8F:AB:DE:F2:B4:10:3E
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 0197B6A2454344DB9B2D3827BD0689AAB73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 6UeTmkvq6K3KrIySsSOCTXaSBFiWYrQH+xvutHyWgOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:45:43:44:db:9b:2d:38:27:bd:06:89:aa:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=c9a0189790484eefb64bb075378fabdef2b4103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:0f:34:9e:84:4a:e2:b1:30:35:cf:e5:56:
1b:9f:60:97:10:67:51:a0:ae:91:8c:b2:00:19:8a:
cc:3f:ef:21:f7:e7:66:79:dd:c1:e7:89:2d:4c:95:
dd:13:a3:12:c3:86:d1:37:64:6c:67:0e:68:15:ef:
ff:9d:08:ad:9e:72:97:d6:e6:9e:83:67:b9:ab:00:
a7:7d:7c:58:bc:76:e4:d3:70:40:8e:d8:42:4a:03:
00:cd:ee:46:63:1b:04:34:e2:2c:3d:e7:a3:9a:40:
c9:5a:ac:04:6f:05:92:66:22:d0:d1:32:a8:7d:db:
bd:dc:bf:d8:69:34:e9:80:77:77:0f:9f:35:d3:7b:
dc:bb:bc:ed:4a:99:87:54:d4:e8:74:45:4d:29:3a:
a7:a0:13:9a:9a:98:a6:6a:b6:34:5a:e0:e1:96:01:
1c:1e:bc:06:35:ee:44:ec:e5:8d:02:59:44:1c:b0:
83:81:d4:04:6f:a9:20:9b:4c:5d:19:15:1a:59:9a:
b4:10:86:3e:79:03:3a:cf:56:da:a8:67:72:25:db:
ee:6f:37:fd:8b:ef:e2:b4:48:d2:90:50:f7:f3:ee:
2e:a8:c8:67:d3:11:b7:e9:b7:20:48:a9:4c:69:54:
83:72:11:2f:f9:95:72:8a:26:a1:fc:04:c8:e7:6a:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:18:97:90:48:4E:EF:B6:4B:B0:75:37:8F:AB:DE:F2:B4:10:3E
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1e:75:d5:04:75:5e:ef:7a:6c:e3:d7:50:07:ed:bd:27:c5:
a5:8f:7b:58:a1:71:8a:73:20:67:38:bd:59:b5:28:33:0f:b2:
31:86:41:05:7f:20:4f:cf:f8:7e:17:f5:01:e6:81:37:e9:95:
f8:d1:5a:9c:b0:b3:b1:ba:20:72:0d:40:61:cd:c1:de:6d:0a:
3c:42:77:03:ed:a6:1c:83:0f:23:4d:c0:07:06:ad:f8:51:5e:
4b:ee:86:be:36:e2:69:7f:ee:10:69:39:2e:42:e5:75:6a:ed:
48:e9:84:d6:6f:19:16:3b:83:f9:c9:8b:8c:22:24:e5:bb:ba:
bd:14:55:d4:ad:78:c4:13:6c:90:b9:53:ca:6c:4b:36:92:89:
a3:e0:67:c6:7c:5b:1e:a9:6a:1c:d6:25:1f:ed:1a:8d:11:02:
0f:ba:3b:35:80:26:67:99:09:ac:02:3b:6c:fb:5c:82:18:0f:
ac:b9:8c:bb:d5:07:bc:53:e2:c3:67:43:84:bc:a0:3f:54:14:
d6:cb:75:41:88:cb:99:fa:6c:45:2b:a0:7a:09:2a:2c:4c:03:
a7:ae:b9:5c:5a:04:19:94:1b:87:6b:21:3b:9b:9e:a3:b1:44:
eb:19:44:b7:34:5e:e1:24:80:01:c6:81:c1:32:d6:94:ec:d1:
bf:bd:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:39 2025 by rpki-client