Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: YVOV4jLVW18FYWuSRFHzBnbSunhGqPATjp7ctUC5Buc=
Subject key identifier: AF:8D:38:01:52:09:BB:44:CF:7F:E2:A7:09:2C:BF:15:A6:A8:56:B5
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 0197B70F136AB59B15B840F9125EFABABA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: G/ut5Ib4ACqrpAxfFgdEXwpnzQmxbLToxK65/0qom7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:13:6a:b5:9b:15:b8:40:f9:12:5e:fa:ba:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=af8d38015209bb44cf7fe2a7092cbf15a6a856b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:18:be:aa:0e:bc:c2:4d:aa:dc:8b:14:4c:
33:b3:8a:6a:db:0c:15:ab:fe:aa:df:54:1a:1e:33:
a2:79:a9:63:0d:2d:8a:6e:0f:a4:48:14:21:98:c9:
80:41:79:2b:52:3c:34:3d:40:c4:6a:51:14:ec:24:
42:35:c8:70:0a:5a:4d:75:5b:bd:69:10:7f:12:86:
81:bb:20:5d:75:dd:dd:80:24:bc:e7:15:04:e9:45:
7a:7f:47:15:c5:7b:ec:a9:f2:e4:38:9a:67:dc:b2:
29:97:f1:48:c5:00:df:48:4d:7f:3a:9d:b6:ad:dc:
02:49:ea:53:2b:aa:fe:82:2e:87:5e:df:54:ba:7e:
a0:7f:67:a2:66:09:ad:bb:58:6d:22:53:4e:d9:a8:
49:71:8f:14:69:8e:08:1b:18:54:3d:0d:9a:51:5d:
4b:80:02:02:bf:9b:ef:87:ca:2f:7b:97:7b:35:b0:
2c:42:3d:06:aa:32:4e:5b:75:25:34:67:f2:a8:fc:
ba:54:70:ab:94:01:47:ad:c4:ff:40:51:7a:8e:d3:
80:98:f9:de:36:d3:94:82:9b:43:88:bc:4a:80:e6:
84:38:b3:7e:c7:69:cb:63:f9:cf:f3:06:c6:46:0e:
be:19:ad:8e:a6:6d:0c:56:31:57:50:1b:88:b8:85:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:38:01:52:09:BB:44:CF:7F:E2:A7:09:2C:BF:15:A6:A8:56:B5
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:a7:95:a1:28:72:ab:ac:40:d2:1f:25:41:0f:5e:e4:98:
60:dc:17:57:e9:9d:7f:a3:81:66:9a:bc:7d:5c:4d:eb:8b:44:
b7:3b:cb:4a:53:56:8f:3f:52:05:96:84:84:ec:ba:f9:a0:2e:
bf:07:b5:63:02:0f:03:5b:e2:79:0a:50:60:73:72:f2:77:b8:
c2:c7:d1:62:e6:59:df:e6:e1:4d:25:26:cd:bb:5b:fe:eb:6e:
3f:f2:0f:64:75:80:ba:96:4a:5b:56:ad:05:21:5a:4f:f9:39:
1b:23:86:06:cf:27:62:7a:c4:9e:9b:c0:48:45:8f:d4:29:e5:
3a:4a:17:1f:85:9c:ea:ff:2f:c1:71:c6:43:40:8c:ba:a4:82:
8d:e1:ac:5a:81:af:05:ce:2f:bc:02:7c:55:29:03:2f:3e:3b:
87:65:af:2c:da:17:00:c9:1d:b1:dc:79:22:b9:a8:e3:be:b0:
f8:15:32:9a:19:b9:a3:8f:d6:0b:8d:40:13:37:dd:9c:c4:54:
e6:6b:2b:a0:d7:6f:b3:e9:5e:f7:4a:23:a7:93:ce:f6:b8:26:
b8:75:5c:bb:2b:56:a7:c7:21:78:6e:a0:44:0d:90:f8:ef:ea:
f8:8c:83:9b:ef:6c:ad:f6:01:fa:fa:23:6e:33:0d:50:a2:80:
4b:f7:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:48 2025 by rpki-client