Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: CdiF8YGaVxSafj+kCzzNewv/gH/JTqFYwP/fo+KyopU=
Subject key identifier: 60:38:8B:D3:E8:93:65:56:3C:F1:1E:A6:2A:86:B3:33:21:79:4D:8F
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 0196DCD4FBE137B6504741060C9F18388BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0C29
Signing time: Sat 17 May 2025 06:01:07 +0000
Manifest this update: Sat 17 May 2025 06:01:07 +0000
Manifest next update: Sun 18 May 2025 06:01:07 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: vBZ8AR0nZfpjDg2r9PjaLvzx+9vjORdmbOJ3GOGmUhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:fb:e1:37:b6:50:47:41:06:0c:9f:18:38:8b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: May 17 06:01:07 2025 GMT
Not After : May 18 06:01:07 2025 GMT
Subject: CN=60388bd3e89365563cf11ea62a86b33321794d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:6c:fb:72:74:9f:1b:bc:8f:fe:2e:80:45:
e8:7a:7e:ca:40:7a:7d:c8:2d:01:41:7b:7c:20:d5:
15:ef:a5:a4:6a:05:70:b7:f0:a0:5d:1d:41:c7:f9:
c5:03:50:61:ea:0b:8e:31:4e:da:03:43:7a:55:cf:
b2:f5:8b:bc:91:79:88:85:3a:6a:86:44:e9:2a:d3:
0c:c9:e8:2e:cb:e4:ae:5d:a9:70:8e:72:e1:1b:97:
0b:47:9d:df:3e:e5:6c:a6:68:31:05:e0:e8:d1:dc:
43:46:b8:61:bf:12:4d:ad:b0:f9:a1:e4:81:8f:fd:
fe:22:73:f2:56:e9:65:95:0a:66:c5:3b:cb:0f:a4:
0c:0a:4f:7f:94:dd:b8:d3:71:ec:10:5d:8e:f2:58:
3e:3a:d0:de:77:42:14:d5:09:c2:d2:ac:be:60:8c:
3b:bd:78:7f:14:07:3a:21:0e:5c:95:53:90:b3:3e:
18:e2:00:f9:2e:42:7d:1b:e4:4a:25:a7:0f:a9:fe:
ec:2c:4c:c8:b9:6b:aa:08:87:ef:f6:15:c7:bb:e5:
9f:3e:a0:f0:0d:2f:3e:5c:21:33:98:6a:2c:eb:93:
52:b0:15:33:bd:28:a4:5f:0e:7a:ef:70:d7:c1:5c:
c1:66:e7:9c:00:57:53:e8:33:cf:4d:15:17:5b:6b:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:8B:D3:E8:93:65:56:3C:F1:1E:A6:2A:86:B3:33:21:79:4D:8F
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:4d:87:4b:d9:6f:32:48:ad:69:19:18:7d:6f:31:0d:7e:
cb:8e:5b:a4:e5:53:73:b5:13:ed:0f:5c:fd:c1:26:24:3d:08:
3d:44:0e:31:5a:b3:f6:90:63:78:d0:b9:7f:03:7b:67:5f:40:
ec:c3:fb:16:0a:f9:81:82:95:c4:d2:21:c0:9b:26:de:08:9d:
eb:06:25:e3:83:cd:ee:d5:e6:fb:90:ac:b0:cc:da:d0:71:0a:
ec:e6:89:77:f8:d8:88:f3:13:66:11:b9:90:dc:5f:0d:6e:13:
e8:6d:c7:d0:f3:07:04:4b:85:e9:a5:ea:0c:6c:1c:89:5b:de:
0a:e2:2f:00:5b:28:9f:bc:e5:40:ae:4e:52:94:fa:fa:9c:9c:
de:75:0d:14:35:ce:56:6e:90:43:f5:23:d3:20:77:fc:b5:3f:
6c:40:39:37:33:b5:9f:c6:b8:33:e1:62:f1:86:33:a2:68:68:
83:b6:38:90:c4:a4:57:5b:86:f7:f5:21:0a:21:6b:2d:58:e2:
de:4d:53:da:07:ab:a9:93:5d:15:58:bc:e4:0e:0f:0d:cb:73:
c0:0c:5f:2d:6e:02:aa:36:c5:a3:d5:40:49:05:ab:96:cf:2b:
ab:db:07:6a:5f:82:78:48:35:27:0f:e3:19:2e:5e:8b:bd:0c:
00:03:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:47:26 2025 by rpki-client