Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
File: MtYmm4lSBJZffsl_Gdi12ckwt40.mft (raw, json)
Hash identifier: Zxy2NHuzO2hfmJAfYED5RqvEDU9NTYUoPICeyfFndVI=
Subject key identifier: 4E:2E:58:77:69:DF:B1:04:EC:7E:E8:09:B0:15:1E:B4:20:77:F3:90
Authority key identifier: 32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
Certificate issuer: /CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Certificate serial: 01976D06EA34044642F81A82533391149045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 06:00:59 +0000
Manifest this update: Sat 14 Jun 2025 06:00:59 +0000
Manifest next update: Sun 15 Jun 2025 06:00:59 +0000
Files and hashes: 1: MtYmm4lSBJZffsl_Gdi12ckwt40.crl (hash: MLqNEsVEee3ARsap9Nul8wkmsKO0v9VeDbQf5jDw50w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:ea:34:04:46:42:f8:1a:82:53:33:91:14:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d6269b895204965f7ec97f19d8b5d9c930b78d
Validity
Not Before: Jun 14 06:00:59 2025 GMT
Not After : Jun 15 06:00:59 2025 GMT
Subject: CN=4e2e587769dfb104ec7ee809b0151eb42077f390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:16:13:f3:97:96:82:14:a4:4a:7d:59:b5:
0d:1a:19:10:6d:86:8e:73:97:34:81:8a:ee:90:2a:
d1:88:3a:64:68:57:c1:b5:11:f3:38:91:0f:db:e1:
76:5f:f3:83:4d:ab:26:0d:c4:a2:0c:b6:07:45:73:
1c:87:30:df:64:15:17:1f:94:e2:98:54:8e:b1:cd:
15:3c:db:64:84:49:dc:6e:99:e4:ab:0e:ea:4d:f5:
8a:7d:b3:a8:61:c4:e6:47:27:a8:84:5a:dc:d5:41:
bb:54:ce:28:f4:7e:ac:6b:2c:ea:2d:46:8f:2b:cc:
c7:7a:2e:99:1c:fa:28:84:73:06:4a:2b:e0:8d:d6:
fd:98:53:54:19:c2:c4:dc:42:3a:c9:08:e9:11:fc:
18:20:30:f5:d4:ce:1d:28:dc:b0:fb:a2:ed:62:8e:
c2:3e:6c:5a:7a:b9:e3:48:7a:8e:cf:85:24:50:1d:
d5:d5:e4:59:86:d4:13:e8:2b:f8:49:e3:72:4e:8d:
c8:97:aa:76:1b:50:1e:e1:be:51:a8:10:41:e2:e8:
15:96:5d:60:e5:61:1b:74:0e:ff:2b:f5:41:46:61:
b4:c8:57:c5:5e:29:05:8b:22:c1:a2:ff:a2:af:cd:
8f:fa:1f:34:73:fe:68:d9:38:97:ab:60:bf:31:fd:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:58:77:69:DF:B1:04:EC:7E:E8:09:B0:15:1E:B4:20:77:F3:90
X509v3 Authority Key Identifier:
keyid:32:D6:26:9B:89:52:04:96:5F:7E:C9:7F:19:D8:B5:D9:C9:30:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtYmm4lSBJZffsl_Gdi12ckwt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e7277e-f8db-4e32-bddd-9815249aadef/1/MtYmm4lSBJZffsl_Gdi12ckwt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bb:bb:f6:b6:eb:73:e8:9b:8a:e8:a6:b6:e1:7b:22:6a:3e:
9c:49:5f:7b:80:e7:56:2e:15:b5:a9:b2:08:2b:b6:7e:8e:14:
70:8f:15:73:6f:1e:2e:9b:ca:98:c4:0e:59:7b:6d:25:9c:39:
16:d7:c3:1d:dc:3d:48:ec:74:fd:0c:23:af:9f:76:b5:29:08:
b6:91:e1:a2:19:b7:f6:c4:07:14:54:bb:50:c4:38:f2:c3:fb:
67:98:2e:53:44:0d:e9:00:ef:1e:2c:73:99:aa:3e:f6:a5:61:
a6:38:92:3e:40:2c:58:06:51:06:e3:42:80:7a:99:f3:9e:be:
bc:c4:d3:c2:4b:ea:f8:e7:3f:7e:99:07:65:bc:73:8d:b0:10:
43:82:5d:88:ab:67:4f:4e:a4:25:c5:06:58:d1:39:9c:7a:45:
e3:d8:83:ca:1c:68:42:f6:0f:fb:20:fc:c2:8f:eb:79:aa:78:
2a:e7:a5:b2:8d:cf:9e:31:94:33:86:15:0d:49:c1:c8:85:e5:
fa:d9:64:c1:4d:ce:66:82:16:64:9c:50:df:6d:ff:3c:c9:43:
da:c2:44:7d:b3:9c:c2:8f:6d:c4:2e:96:ce:1e:2d:13:f3:4b:
0a:68:bd:f2:cb:98:9b:af:f4:2d:14:83:2d:5c:6b:79:0c:1e:
e3:9f:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:49 2025 by rpki-client