Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: 1kRS5/rFrXT5wTGuxFh1j8Mi6GXKiILgeGQ5JvXFLhY=
Subject key identifier: CB:3B:A9:E2:6D:42:90:3A:4D:65:A9:F6:0F:B4:1C:A7:AE:12:59:52
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 0197B70EADB6E88F48065C95EEDA79F37FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: HSehN3JCl0vVFq96vzPHxK+ydjzndqV0iNe6y9I2zTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ad:b6:e8:8f:48:06:5c:95:ee:da:79:f3:7f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=cb3ba9e26d42903a4d65a9f60fb41ca7ae125952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:66:9b:54:32:f8:af:c1:56:96:db:8a:fe:
01:41:41:a9:c7:68:2a:44:41:ed:6b:55:07:f4:78:
b8:1e:81:d8:89:76:df:23:6b:0f:c4:40:15:73:7b:
21:81:ea:2c:88:2d:96:3d:23:f0:1c:18:c5:90:ed:
42:26:f8:98:fe:b1:38:8c:98:08:ca:20:6f:75:61:
cc:e9:f4:2d:a5:b2:cf:8d:64:6c:91:20:25:a4:49:
b3:28:7f:7f:ab:e4:30:d6:81:50:80:d7:3d:ca:26:
6e:c1:82:f8:3f:75:23:c6:bd:47:83:bd:e5:e6:66:
17:5e:5d:ae:3a:46:b7:71:45:e5:a4:26:9c:5a:03:
49:3e:12:e3:a0:8b:17:e3:12:24:51:b5:e1:7a:01:
39:23:01:be:79:0d:a6:09:da:b0:20:e9:54:42:6c:
79:45:42:67:5b:e3:91:63:1c:a0:21:90:b2:1c:22:
25:75:68:9e:e3:36:9f:77:0f:02:7b:0f:69:c4:43:
01:b3:77:b6:a4:c9:81:3b:84:d6:66:50:4b:5d:4b:
53:f4:2f:a5:56:a8:3d:3f:90:44:58:ac:6d:ae:9f:
a8:de:96:39:dc:c6:3f:1e:b5:ae:f4:29:b8:67:26:
4d:4f:bf:71:81:f9:d4:36:02:60:81:fb:c6:ee:bc:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:A9:E2:6D:42:90:3A:4D:65:A9:F6:0F:B4:1C:A7:AE:12:59:52
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a1:95:c8:5f:76:7d:56:09:d0:b2:e1:6e:60:eb:e9:48:06:
f1:b4:4b:50:47:04:ca:7c:7a:33:fd:89:b8:05:6d:99:47:04:
c8:ed:74:ba:bc:28:e6:78:e7:d0:70:b4:9a:41:a5:66:81:f4:
5c:6e:a4:ae:c3:bb:3f:02:ce:ed:84:9f:c9:fd:10:0e:3a:ab:
16:a3:c9:33:33:93:66:19:ac:a4:3f:27:18:94:1a:fb:eb:3a:
78:d1:55:01:9c:0e:31:3b:fc:02:dc:bb:57:80:ac:15:f5:b0:
94:62:07:21:55:bb:33:cf:84:c9:50:c0:b2:89:2a:33:5f:f9:
2b:7b:54:ec:9b:da:3f:3c:9e:d9:ec:9c:0d:53:be:80:8c:47:
9a:b1:83:a3:20:51:45:cd:20:1d:d6:50:34:84:d4:73:25:e9:
b1:5a:e8:34:c7:34:fd:99:68:b9:d0:bc:ac:22:7c:8c:e5:4e:
fc:a6:5e:b7:fc:19:86:87:ef:aa:23:48:a0:99:b2:18:85:40:
5b:14:02:41:66:dd:8d:af:54:32:9f:1d:9b:e1:2d:02:96:12:
f7:ed:55:3c:99:7b:0b:ac:50:68:4e:ac:13:af:11:e2:ca:b8:
c6:be:80:ea:1f:77:41:36:37:8d:79:fd:27:a5:4a:cd:70:22:
3e:24:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:56 2025 by rpki-client