Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier: w1A24I9tUC99myFrGPSEKU8QKOB/x/1lsfcDKX0btek=
Subject key identifier: 99:F9:30:FD:45:6E:A6:BF:BE:A8:F8:8E:E5:E0:C0:35:99:70:9F:07
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer: /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial: 7805D893F89789FC4B5F20EB6322ECFA2AC1EA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number: A1
Signing time: Sat 28 Jun 2025 09:33:35 +0000
Manifest this update: Sat 28 Jun 2025 09:28:35 +0000
Manifest next update: Sun 29 Jun 2025 10:42:35 +0000
Files and hashes: 1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: RRU5teKG8CL7NXWaSWCD999G9q9SHqSAv/n9echMnoo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:05:d8:93:f8:97:89:fc:4b:5f:20:eb:63:22:ec:fa:2a:c1:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Validity
Not Before: Jun 28 09:28:35 2025 GMT
Not After : Jun 29 10:42:35 2025 GMT
Subject: CN=99F930FD456EA6BFBEA8F88EE5E0C03599709F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:43:47:97:d8:d7:78:8d:4a:83:ff:ab:b4:
b7:c8:bc:32:0c:5c:ad:3c:ca:a7:2b:f3:9a:8e:47:
32:47:b5:c1:38:da:44:8a:19:05:7d:54:12:81:72:
46:f2:89:bc:e2:95:40:b5:1d:52:92:b2:5c:3d:fc:
44:c3:a7:d4:b9:71:18:fc:dc:f3:b0:5d:a6:e7:a5:
92:e3:fa:67:ac:bd:24:6c:97:9e:6d:1a:eb:cc:82:
97:17:76:9e:4d:94:d7:01:3e:4f:01:6a:dc:6d:d3:
86:ed:d1:82:31:76:92:cf:9f:04:0b:0f:90:ad:35:
b1:a0:c3:8f:27:67:fb:85:c9:09:1d:1f:71:5a:c1:
4a:e7:e4:6f:88:fa:a1:ab:4d:42:6e:c2:bf:da:dd:
6e:e4:0b:2d:e9:51:4e:32:e6:90:ef:80:a7:2f:79:
3a:4f:21:f6:f8:0a:9e:55:7a:ad:e3:43:80:99:f5:
df:91:26:6b:49:05:3b:3e:61:c8:9d:9c:52:84:93:
ca:01:3c:50:49:03:20:c5:be:f5:99:d3:df:ec:50:
fd:5c:7e:73:31:9f:80:b3:c0:73:45:d4:62:c0:32:
ea:22:13:f7:9c:f8:e4:c9:7f:43:00:e1:d2:c1:83:
76:35:ac:4b:db:04:ea:d6:bc:e1:99:21:44:0a:cd:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:30:FD:45:6E:A6:BF:BE:A8:F8:8E:E5:E0:C0:35:99:70:9F:07
X509v3 Authority Key Identifier:
keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3d:7c:d3:61:78:e4:dd:f0:59:9b:99:8e:3c:fc:5c:48:cc:
e8:fb:ae:0e:c9:8a:11:4a:64:b3:74:71:d8:77:de:0b:7b:6e:
a6:7f:73:8c:04:6f:73:63:cd:dd:18:44:58:d9:c2:d9:c0:38:
69:23:c8:fe:f1:91:18:12:73:33:1c:01:ea:97:4c:8d:e7:ab:
7a:70:82:ee:e5:82:7e:98:e1:a7:29:89:2e:71:08:21:2b:df:
04:68:b5:ae:9b:c9:e9:58:18:ef:eb:16:7b:ef:11:0f:65:9d:
ab:f9:ca:9b:e8:d0:a6:91:aa:31:83:4f:44:12:1e:76:6f:be:
87:29:38:dd:a4:5c:3a:f3:e4:76:fa:8f:9e:10:26:a8:e7:40:
37:15:50:7f:1c:0b:3a:b5:2a:9e:1b:9a:86:dc:18:73:25:16:
36:f7:ec:29:30:67:22:3c:20:43:94:b5:38:f9:44:58:02:d0:
57:13:26:f6:c0:a8:95:d8:56:f5:ad:5a:88:17:e1:26:86:e1:
fe:c6:a4:0c:5a:67:56:7b:e5:87:31:25:ae:eb:82:8b:20:4f:
bf:8e:fb:7f:27:30:70:d6:05:ef:dd:bd:85:9c:b2:a8:57:56:
a4:64:45:1c:b8:a3:37:b8:d0:a4:bd:07:33:24:30:e8:3a:3c:
2d:36:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:55:46 2025 by rpki-client