Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier: DIdhSIx+W1FNaxPa1nDp9MP9AeSR7Y3IYFt6+mNu/nI=
Subject key identifier: 46:14:C1:EA:22:2D:E3:E4:A9:E3:E1:41:4B:54:83:B4:CD:36:94:AD
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial: 019768BBC50143EBFB321C19AD7436C88926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number: 4E
Signing time: Fri 13 Jun 2025 10:00:25 +0000
Manifest this update: Fri 13 Jun 2025 10:00:25 +0000
Manifest next update: Sat 14 Jun 2025 10:00:25 +0000
Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: TBYEsZS4E/Kbd/XdfL27BJLchJqCi4gu4ETg5lpMXls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c5:01:43:eb:fb:32:1c:19:ad:74:36:c8:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
Validity
Not Before: Jun 13 10:00:25 2025 GMT
Not After : Jun 14 10:00:25 2025 GMT
Subject: CN=4614c1ea222de3e4a9e3e1414b5483b4cd3694ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:65:80:9d:92:d2:55:3a:84:96:e2:6b:8a:
37:72:bd:1e:34:05:8c:28:3c:f4:08:30:5b:7e:11:
6b:f7:29:86:7d:eb:3b:d5:e9:95:ba:a9:a7:4c:2f:
8e:88:56:61:47:b8:e3:8e:96:40:7a:45:6e:bb:80:
d7:c9:94:ff:a4:06:83:8d:e6:1d:75:a6:00:63:87:
ed:9c:b7:d7:b1:74:fe:1b:b5:aa:24:34:83:df:c8:
22:d0:c1:de:d3:06:54:6c:68:74:68:3c:8f:69:ca:
4a:6b:38:c6:7d:38:0b:15:d7:a7:ca:a1:11:5d:a9:
31:0b:b1:6b:a3:40:ca:36:d5:d1:c8:15:04:aa:15:
60:6f:83:21:49:92:82:69:59:36:2b:0e:90:29:c6:
32:fc:66:3f:f0:ee:db:98:df:4a:98:ce:35:e2:2f:
fa:f5:0a:d8:08:eb:85:18:89:24:a7:f3:3f:3b:13:
dd:68:85:bd:63:19:cd:8a:9a:fe:8b:45:e7:7f:8b:
7f:66:00:74:16:23:a8:27:da:36:b9:7c:c6:5d:f1:
39:a7:59:4e:1c:54:30:19:d6:d9:b0:90:7e:3f:cc:
42:2e:ee:be:97:51:14:30:1c:a2:b5:04:6e:66:1d:
cb:c9:a2:84:b1:aa:0a:1e:db:08:17:01:59:6f:1f:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:C1:EA:22:2D:E3:E4:A9:E3:E1:41:4B:54:83:B4:CD:36:94:AD
X509v3 Authority Key Identifier:
keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:3e:cc:73:14:ef:91:3b:a5:40:e7:78:e7:d4:0d:c9:ce:
67:04:37:79:b1:eb:03:c9:4d:c9:a2:7f:11:ec:f1:c5:95:d7:
6c:75:98:af:44:7c:3f:20:94:e1:2e:2c:a2:2d:92:b7:a9:f3:
97:84:18:6f:c9:ec:db:44:0b:43:54:00:14:21:c6:2b:54:76:
9c:ba:ba:3b:3e:d0:38:1c:c6:cb:08:9f:ba:0e:df:83:82:77:
7f:65:97:58:7a:7d:10:ec:6a:82:77:e8:5a:c1:6d:a3:71:17:
c6:18:f7:10:aa:57:2c:12:7f:9c:1e:1e:e9:5b:98:f1:48:bc:
9d:99:db:ad:39:6e:5c:fd:4e:5c:63:02:df:3d:6e:e3:8a:44:
38:e4:5c:56:d9:4f:23:04:b8:cd:0c:49:96:1c:ba:ad:a6:7f:
d3:98:c7:be:2a:b9:50:c1:46:8e:46:83:b1:45:16:f0:3b:13:
25:94:5f:40:09:0c:de:4b:88:20:78:ce:5c:ef:4a:f9:e5:c3:
4b:4e:53:da:1a:7d:0c:1c:bc:2e:de:bc:0f:ac:3b:fe:e4:07:
59:39:af:55:f6:7a:04:e2:b7:47:cd:59:df:e3:f4:b9:14:62:
4f:48:67:be:5c:67:8d:c0:9f:cd:56:40:57:94:d2:91:da:02:
97:72:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:13 2025 by rpki-client