Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier: qXWCMZ5d8MDbmLtTaQmeDrDSnl7Xb5hLI0kW83rsqwg=
Subject key identifier: 52:15:54:06:38:85:22:DC:0D:95:79:D3:3C:9F:8B:C8:3D:C7:6C:86
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial: 0197B70EEBE65BD885715FBF27F4426F02E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number: 0419
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: cc68607qbg83Rg8GYr04aNtkA/HnwKCmNFCJZOjD2zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:eb:e6:5b:d8:85:71:5f:bf:27:f4:42:6f:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=52155406388522dc0d9579d33c9f8bc83dc76c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:ca:bb:9b:1b:de:b5:81:63:71:b0:66:92:
32:7d:bd:a9:d8:33:80:64:1a:f3:1c:ce:a0:81:4b:
94:b2:e3:d7:b2:ff:6f:46:ce:4c:d8:62:d4:f7:87:
69:9d:a4:dd:d1:c3:43:15:2b:c7:f1:95:44:6a:f7:
c2:b3:99:f4:5d:f0:f1:3b:76:c0:31:99:f2:25:b6:
f9:c0:ee:dc:fd:b4:8e:dc:13:59:d3:ce:5c:21:36:
e2:b8:46:18:d2:aa:93:b8:35:14:31:59:a2:83:1f:
6a:aa:dd:f4:02:c8:69:a7:4e:8e:ae:1d:de:37:f2:
a1:23:e5:04:a0:dd:24:9b:de:ef:7f:06:c0:8d:44:
92:b7:09:70:df:93:f4:bd:46:6a:3f:39:05:bd:75:
fa:3d:3c:bf:36:6d:1b:60:10:93:2b:25:27:5d:fe:
3e:98:4d:b7:b1:8b:03:60:64:d2:d2:aa:73:50:1a:
55:ce:7c:47:69:34:b9:33:80:df:d3:e8:dd:19:35:
5b:e1:21:57:21:e5:13:b3:e2:fc:30:c4:c5:7b:b3:
d8:43:95:27:7f:69:b6:e2:61:7d:c2:98:13:18:f0:
6f:55:05:24:70:73:89:56:a5:d3:bb:78:73:1d:15:
d2:c5:46:c2:04:1d:28:a5:df:71:a1:5d:da:57:8a:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:54:06:38:85:22:DC:0D:95:79:D3:3C:9F:8B:C8:3D:C7:6C:86
X509v3 Authority Key Identifier:
keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bf:2a:be:d6:78:d4:c0:5d:40:36:19:18:83:8d:95:bd:5a:
b8:dd:b5:07:81:1e:6a:b2:0f:37:90:e4:ba:30:d1:5e:f2:d9:
de:dc:4e:53:55:31:6f:25:b3:54:7c:27:29:e9:3b:3b:a3:da:
cf:d0:ab:a2:88:63:3d:32:96:f6:b7:fc:c7:c4:9a:2d:ad:e3:
b3:de:03:db:8b:06:47:2a:ad:0c:85:1c:d1:4c:22:9d:69:9f:
06:48:f7:8b:18:ce:2e:f9:31:88:12:0a:29:59:47:a6:0f:12:
11:9a:b9:09:16:01:14:85:cb:95:60:b0:8e:06:6f:79:94:f5:
7d:f8:a5:a7:c8:55:f0:f3:6b:92:5c:b8:dc:28:6e:2c:65:a1:
c4:c1:7e:6f:1f:b5:86:44:16:5e:78:3f:35:7f:f0:6d:5a:19:
d9:c6:1c:d2:36:a6:f2:2c:8b:a2:dc:e2:c7:bc:e6:94:65:4d:
bb:43:6e:30:12:59:d2:cc:58:a5:02:07:cc:76:d5:37:23:bf:
47:1d:fa:b4:27:05:1d:aa:e1:87:20:53:16:0f:e3:4f:b5:13:
32:9d:12:39:58:0a:86:e8:aa:62:eb:46:2b:2a:50:4a:69:ee:
22:9a:5c:bb:a3:c1:6a:2a:f1:4e:86:89:93:90:78:57:cc:04:
47:3a:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:35 2025 by rpki-client