Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: OkH+WNG6eUO5P4iZkPoUQAth7J1UnzslqYDsnmkPt7k=
Subject key identifier: 7A:F8:05:05:01:32:BA:6D:6F:9C:C9:3B:88:23:32:51:00:52:A3:41
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0197B88FD456FD5FA2696E2E4EB118B5DA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 0317
Signing time: Sat 28 Jun 2025 22:02:03 +0000
Manifest this update: Sat 28 Jun 2025 22:02:03 +0000
Manifest next update: Sun 29 Jun 2025 22:02:03 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: 3c0IzCgyZJovEZNkjYAokBvLcJDMmtdLP3z/y5SFz5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d4:56:fd:5f:a2:69:6e:2e:4e:b1:18:b5:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Jun 28 22:02:03 2025 GMT
Not After : Jun 29 22:02:03 2025 GMT
Subject: CN=7af805050132ba6d6f9cc93b882332510052a341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:77:9e:3e:bb:c0:ad:cf:17:d5:a8:78:96:
61:19:04:1a:c2:62:0b:47:8e:48:aa:8a:d3:ba:25:
3e:da:29:ef:33:0c:34:22:a6:03:3c:20:9d:12:61:
5f:ec:9e:28:46:9f:d8:01:c7:3d:f8:ec:24:7e:ac:
b0:e5:10:85:d9:fb:93:17:fd:ae:29:39:52:d3:45:
bd:d1:ee:da:f1:5a:98:09:22:fc:9b:96:6c:4e:b1:
f1:69:ed:30:f5:93:14:f4:75:8a:e7:72:41:91:e6:
b4:31:41:37:23:5c:bf:08:fb:7b:8a:0e:d6:b4:8d:
3a:89:e7:d6:4a:91:e8:ad:40:38:78:21:3f:b6:04:
2b:b1:2c:55:da:be:6a:84:a1:4d:1a:25:76:05:2e:
0a:fa:7c:11:27:ac:6f:b3:08:e7:6e:c6:71:88:43:
fa:7b:e1:ae:07:b5:46:ce:2d:41:4f:4e:5b:e9:e5:
27:59:39:83:f8:74:98:06:3f:89:6a:15:6b:84:cd:
3b:bf:00:45:5a:12:25:72:0a:95:37:48:b1:1e:af:
82:12:2c:a5:93:92:b7:5e:52:5f:20:82:a3:df:50:
10:7f:82:02:af:76:92:9b:42:75:33:c6:cb:3a:6d:
51:8a:9b:e2:8c:36:d1:b2:4a:28:71:b1:d7:b3:d9:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F8:05:05:01:32:BA:6D:6F:9C:C9:3B:88:23:32:51:00:52:A3:41
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5a:e1:43:77:b2:af:78:1a:7e:8c:f0:99:83:48:23:70:f5:
24:2b:f9:3e:05:32:62:18:d1:10:cb:07:a8:fa:ba:bd:b3:d8:
ac:06:0a:9a:7f:dc:1c:be:ec:14:79:89:3d:2c:bf:35:cc:bc:
8c:d3:b7:ac:2a:8f:2d:e2:27:1c:58:6e:9d:90:c8:9a:1b:aa:
f2:60:d4:5d:ec:01:f3:59:9a:14:ba:af:50:d0:fd:c9:83:96:
3e:86:49:ca:ce:d0:4e:67:0f:d8:9b:4f:a2:11:7b:47:ba:5c:
4a:fb:81:fc:d7:24:35:68:eb:32:43:63:9a:f1:b9:7c:59:ed:
4a:88:45:a1:37:ce:fa:cb:ab:0c:72:5e:58:8f:7d:6c:3c:7e:
fc:ec:1f:87:c2:61:da:02:e4:c5:da:b5:ef:1a:d7:22:87:71:
b3:0b:5f:b9:c0:66:8f:59:29:26:7d:a0:73:5b:20:4e:1e:2c:
74:3f:a5:88:e6:35:98:7e:72:d4:15:ae:f8:76:f2:b6:69:84:
93:ba:f9:be:82:6c:af:d6:88:ba:e4:ad:ba:e8:51:d1:44:37:
89:10:82:55:99:e5:d9:af:bb:c4:a0:ee:f1:f8:5b:97:8c:6b:
45:ac:0d:2c:01:21:49:02:d3:40:ed:38:71:d4:fb:12:42:8d:
7e:4b:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:39 2025 by rpki-client