Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier: 7gCxFNFgds5Ka/67Zd+8PL65jBeENAol7JQd06UzaIU=
Subject key identifier: 08:67:5D:14:F4:B3:31:04:E4:15:49:EB:E2:47:0E:05:C4:C8:CD:04
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial: 0196CB736AEB5C5D58E99E88E5F362F18F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number: 039F
Signing time: Tue 13 May 2025 21:01:00 +0000
Manifest this update: Tue 13 May 2025 21:01:00 +0000
Manifest next update: Wed 14 May 2025 21:01:00 +0000
Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: stHAtp6Dqi1K9y9gCCsUjN315SgXgVr0UalWCxOsTpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:6a:eb:5c:5d:58:e9:9e:88:e5:f3:62:f1:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
Validity
Not Before: May 13 21:01:00 2025 GMT
Not After : May 14 21:01:00 2025 GMT
Subject: CN=08675d14f4b33104e41549ebe2470e05c4c8cd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:4f:a0:72:f6:68:47:70:79:dc:02:d3:b6:
7c:e9:18:13:a9:55:17:78:fb:b2:3b:29:b6:ab:ef:
92:4d:88:d5:8d:93:50:12:71:e5:55:95:27:dc:80:
9d:f5:20:c9:1e:8e:24:78:00:3c:09:5e:ac:01:09:
9e:ac:96:b4:91:69:9d:2b:79:29:64:60:f5:9e:a7:
60:3f:20:6d:19:c5:5a:fd:78:9a:ce:2d:e2:33:e0:
3b:c2:ed:14:61:ec:c3:f8:79:2e:f9:06:1e:7b:ad:
c2:61:b0:74:20:d0:b6:f7:05:73:e9:03:df:69:07:
7a:d1:c6:90:b2:fa:ab:b1:5a:ce:a5:b0:7b:dc:c2:
9b:99:12:76:ee:4a:d8:b9:72:c3:a4:7e:21:62:c0:
55:b7:42:36:db:d9:1d:da:6e:ca:75:d1:b1:08:13:
35:71:ac:27:8c:d3:4b:ab:f9:85:42:d7:87:9c:05:
ea:cb:fd:72:6c:6a:e8:1c:cd:96:26:fa:9a:ad:85:
0d:61:1b:1f:25:64:e4:5a:70:4e:a2:e5:a1:da:be:
c2:91:15:92:61:eb:13:3a:02:f6:87:65:d7:c2:41:
86:ed:c1:29:bf:a6:0f:3d:48:16:f4:31:85:34:af:
e8:83:bb:d3:f6:73:f2:6d:01:a1:21:63:12:75:18:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:5D:14:F4:B3:31:04:E4:15:49:EB:E2:47:0E:05:C4:C8:CD:04
X509v3 Authority Key Identifier:
keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b3:e9:7e:40:5e:42:98:25:ab:f2:69:41:c8:94:d8:9c:21:
4b:e9:a3:51:c2:3f:59:b5:c7:48:a0:83:35:48:b6:79:b7:97:
dc:77:ca:d9:0f:45:6d:c7:e9:ec:af:55:55:b6:82:db:3c:4e:
f2:5e:8c:8f:51:07:6e:77:d7:b0:68:61:12:87:87:e1:ad:b9:
dd:4d:74:13:08:68:56:fa:4b:3c:f9:65:c8:5d:97:00:cf:68:
be:fa:74:8e:de:f8:bd:8e:0d:f1:3f:14:0f:4f:39:9d:d1:07:
9c:7f:a9:6b:d8:3a:41:13:d9:ff:cb:12:d3:c0:ff:89:06:9c:
07:54:90:a0:3b:34:18:7c:05:68:6d:93:52:30:21:c1:d1:e1:
19:63:5a:bc:1a:20:1b:82:4a:04:bc:34:ca:37:28:3c:0b:2d:
11:46:c3:5b:00:f0:c1:85:22:31:21:f7:e7:a4:63:84:ed:63:
da:4c:f3:13:0b:27:ba:04:3e:ea:cb:8c:1b:f8:67:e7:1a:1c:
52:9a:50:70:0c:63:ce:6e:a2:c9:d5:ee:65:0b:0a:7a:e7:59:
0d:40:bf:f0:f7:fa:f3:39:4c:28:fb:3c:4a:de:70:f5:f0:71:
8f:63:b6:27:f0:a6:2e:3c:60:ad:65:d9:c5:61:c4:0b:8d:54:
31:0a:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:20 2025 by rpki-client