Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: pA7xCjIOVe7zE7d9e6CDUyuFpel0Qtqn/7EDiWaoKos=
Subject key identifier: 02:01:E1:6F:CB:19:19:07:B5:50:88:72:8B:C4:43:D4:06:83:20:16
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 0197B933AEFA78B6E98310C9F8AAC93371A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 02F4
Signing time: Sun 29 Jun 2025 01:01:01 +0000
Manifest this update: Sun 29 Jun 2025 01:01:01 +0000
Manifest next update: Mon 30 Jun 2025 01:01:01 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: 6r9HjxUDWTY4gmZxBP/5de4Z3YtKjX36zmaSPrDiL5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ae:fa:78:b6:e9:83:10:c9:f8:aa:c9:33:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Jun 29 01:01:01 2025 GMT
Not After : Jun 30 01:01:01 2025 GMT
Subject: CN=0201e16fcb191907b55088728bc443d406832016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:59:19:a8:e6:e8:67:eb:2b:40:48:7b:74:
91:a5:74:39:f4:8c:de:ca:64:42:fe:ef:46:cc:ef:
f3:43:3a:a0:85:e0:7a:04:d4:b3:43:51:52:85:9d:
c3:ed:f7:09:65:ab:65:8c:e7:dc:78:dc:88:18:aa:
cf:73:f3:1a:e5:f4:70:31:4e:3d:6f:70:cb:db:d6:
9a:c6:5e:51:7b:f2:de:f6:24:8e:4c:29:f8:1f:84:
3d:ff:ed:2b:5c:4c:08:17:21:de:b7:e4:67:07:3a:
2d:da:a1:76:bd:7d:49:53:9b:bd:36:f4:0b:9c:d7:
f0:3c:36:96:7e:0a:09:5b:c7:d9:8c:b0:87:6f:70:
1f:ca:8d:ea:ff:4e:fa:08:96:d9:ff:25:22:6e:b2:
7b:64:a6:36:f2:ee:31:f3:ee:99:c5:b6:b3:aa:26:
3c:ab:82:d7:37:93:13:de:73:d9:43:5a:dd:8f:29:
32:df:d0:b4:48:9d:d7:d1:9b:0d:cf:23:a4:53:80:
89:66:bc:65:b5:68:e8:ff:4d:63:bc:a6:78:fd:42:
69:88:db:ad:2a:17:01:6a:de:e9:d1:50:7c:78:9f:
9a:1b:54:68:d5:3f:e1:8a:a7:d7:7e:2f:82:d4:27:
52:98:de:d5:9f:9b:84:5e:34:64:9e:af:eb:cb:12:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:E1:6F:CB:19:19:07:B5:50:88:72:8B:C4:43:D4:06:83:20:16
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:13:c5:b4:6b:05:5d:e9:d3:88:5b:d8:14:fc:d9:23:b5:c8:
1d:02:d1:e7:f1:65:d1:4e:16:60:50:80:7e:c6:aa:33:18:4b:
91:44:c8:ca:90:cd:c5:8c:cc:fe:a0:7b:b4:4d:e3:58:bc:18:
96:e5:a1:85:56:69:15:30:d7:34:ae:89:dd:0a:d2:32:b3:90:
68:ea:be:84:60:bb:56:cc:6f:97:e6:d1:6e:b4:47:53:df:0f:
78:6f:da:a0:c8:92:cf:8f:f5:92:b3:19:94:28:c7:7e:3d:7d:
4e:58:b2:82:d7:06:77:46:b5:fe:e2:7e:e8:45:67:74:30:55:
f4:4e:88:2c:46:20:74:19:88:f8:6d:15:ed:c0:45:c2:c1:60:
a2:20:f0:b7:d9:a1:2a:06:94:66:fa:da:d6:9b:b7:0b:ce:41:
90:84:86:41:08:63:14:30:2e:d6:26:06:46:a4:3e:03:84:da:
c2:0f:d1:29:76:5c:3c:f2:45:ea:39:0b:e7:8a:46:78:c6:e2:
08:90:a2:b2:a6:4f:1a:81:43:e7:03:2e:bd:63:3b:3f:1d:ad:
85:bd:a7:37:60:6b:12:6e:0e:c0:c6:00:32:4a:b1:b3:c1:69:
d5:7d:6a:88:b8:26:53:68:13:ea:93:2b:11:68:1e:0e:64:16:
a0:56:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:47 2025 by rpki-client