Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: IZ5tlTN7eRk584uDFT1jNQIHSUUrMWI4OITp4CEJFvc=
Subject key identifier: 4A:57:C6:F5:CB:8B:6A:D5:1C:0B:F4:35:E4:98:8B:B6:7A:2B:77:2A
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 0196BF37D4C5999087093FB397FBCA7C7055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 0296
Signing time: Sun 11 May 2025 12:00:29 +0000
Manifest this update: Sun 11 May 2025 12:00:29 +0000
Manifest next update: Mon 12 May 2025 12:00:29 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: i/2evfGCvuwt0IMV0GG0hIhPne8JwE9PQsaHdSPoH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:d4:c5:99:90:87:09:3f:b3:97:fb:ca:7c:70:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: May 11 12:00:29 2025 GMT
Not After : May 12 12:00:29 2025 GMT
Subject: CN=4a57c6f5cb8b6ad51c0bf435e4988bb67a2b772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:a4:da:c9:71:12:32:a3:ee:48:1e:ff:7d:
c7:fe:7f:4a:4f:7c:63:7b:71:d2:c0:e1:d6:0b:72:
7b:9c:f0:70:88:c1:5b:89:81:d7:e4:2e:2d:69:fb:
ec:4f:ab:cf:39:bf:bd:15:51:48:ba:40:55:aa:47:
ef:f8:b9:80:b8:99:b8:ca:3b:7d:1d:b5:38:8d:54:
0a:5a:dd:0e:68:70:74:6e:48:24:df:52:ff:84:22:
e7:53:b1:e6:44:41:6c:17:25:4a:95:f0:28:d0:23:
d2:b9:10:41:56:4f:5d:04:c6:ad:d6:66:94:b9:dc:
2f:3c:cc:58:06:48:2f:66:55:df:ac:4b:a8:ce:46:
7b:49:25:87:13:48:eb:9c:f8:6f:87:5c:29:96:b4:
cc:10:98:3d:d8:6e:31:23:88:2c:32:86:8f:01:ac:
1c:60:90:ed:af:35:21:7b:78:0d:61:ab:ae:88:d4:
53:ea:78:10:83:b7:ab:eb:ad:67:82:4d:0d:b7:b6:
3d:78:c1:02:b0:a4:01:94:7e:ea:e4:60:f6:3b:b1:
91:fc:fe:6b:61:a4:e8:69:72:d3:c3:af:02:e5:13:
3d:72:6b:a5:db:ce:f3:67:28:c4:2f:5f:e6:c1:25:
f7:8b:15:04:bd:48:23:21:91:51:5b:f1:c4:de:b8:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:C6:F5:CB:8B:6A:D5:1C:0B:F4:35:E4:98:8B:B6:7A:2B:77:2A
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:e8:50:b8:f6:52:99:3c:c5:cc:9a:ba:cc:0e:dc:50:69:
b6:67:ab:ee:78:a1:ba:fd:6f:33:a0:fa:91:7e:07:29:98:d7:
4b:f5:1c:2b:47:28:0d:83:f6:a1:18:35:19:d1:ae:bf:d7:4f:
59:e4:81:84:a2:05:c3:6b:c0:57:be:d6:71:6d:d2:c5:e7:09:
c7:b1:43:a9:33:46:d0:2e:e5:21:1a:d2:8a:df:7b:2a:ec:83:
d6:2c:60:dc:a6:7e:cf:48:15:8a:4b:95:6d:a5:82:66:be:70:
7b:71:e9:c4:f7:4e:11:3e:2d:5d:a2:b0:f9:81:83:36:f4:8f:
47:bf:d1:02:3b:c7:e4:f8:40:04:a3:a6:1d:20:61:d7:f8:4a:
7c:a2:df:b0:89:12:57:28:ab:05:32:75:eb:1e:46:84:0e:b8:
c8:78:46:99:71:eb:6e:3c:19:23:88:49:8b:db:8b:8b:89:47:
71:ba:dc:5f:78:cd:06:13:4a:f0:77:b2:ef:dd:1d:b3:0c:97:
d4:ea:77:6b:7b:ca:0a:7a:c1:5d:46:50:12:10:52:53:59:5b:
2d:10:b4:b0:22:d0:11:8d:1b:e5:df:e9:78:0b:c3:31:ec:ba:
6d:f8:fe:c3:5f:26:ba:5b:6f:c0:1c:a5:24:0b:61:92:d0:a5:
49:7d:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:54:21 2025 by rpki-client