Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: gW9A39uITJDPPCEmpItV8VLO9VQ0MDKlzJqrF/i7g5A=
Subject key identifier: C5:A8:58:40:ED:40:FD:92:30:7A:12:5E:94:35:E5:AA:C5:BD:06:D1
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 019769CECDA7789CB6D986253CA76EE72C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 07E9
Signing time: Fri 13 Jun 2025 15:00:50 +0000
Manifest this update: Fri 13 Jun 2025 15:00:50 +0000
Manifest next update: Sat 14 Jun 2025 15:00:50 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: x7i8dBZtDVIN0EYs/Oqngh6rMx3E7cFYSwGLKBS0RNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:cd:a7:78:9c:b6:d9:86:25:3c:a7:6e:e7:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Jun 13 15:00:50 2025 GMT
Not After : Jun 14 15:00:50 2025 GMT
Subject: CN=c5a85840ed40fd92307a125e9435e5aac5bd06d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:52:b5:df:0c:2b:53:4f:18:52:73:6e:3a:
b9:d3:53:a6:7b:88:2a:f9:66:ef:af:04:72:a1:6f:
9a:c8:bd:1d:cf:48:98:69:a3:e0:e6:af:db:d2:0b:
73:7a:96:45:83:60:d2:32:5c:2d:40:d6:9a:7f:c1:
de:44:dd:ac:e9:fe:79:78:0d:6e:80:4d:f5:32:c1:
70:ec:01:b5:74:df:68:45:2a:13:a1:90:6f:d6:9c:
69:36:bf:61:f1:73:b3:23:ec:d9:d9:94:d7:92:a1:
aa:c2:65:f7:6b:70:cb:28:01:ee:7c:a2:32:c9:4e:
56:e5:1f:dd:2b:4c:01:cf:28:9c:f6:42:f8:af:32:
8d:8d:21:27:a1:18:6b:c1:c5:8e:32:06:47:2f:47:
fa:31:b5:ae:97:11:27:40:c2:80:a6:41:c8:81:88:
ac:91:64:f7:84:cb:bf:92:2a:41:ef:8c:db:5e:44:
be:82:f3:2a:cd:f3:08:a5:67:5c:56:9a:d0:fe:c6:
ec:a4:01:fe:bf:11:d2:15:24:fb:56:7a:30:f8:77:
40:c1:00:50:5a:af:93:2e:9f:5d:41:34:ba:af:0e:
9c:f2:48:80:3b:61:23:31:d0:81:0d:f1:ba:87:47:
cd:0e:23:0b:6e:ca:af:37:ac:b0:0d:cb:7b:23:4e:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:58:40:ED:40:FD:92:30:7A:12:5E:94:35:E5:AA:C5:BD:06:D1
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:43:9b:c8:54:52:f3:12:d1:f7:3a:eb:86:25:48:ed:5f:20:
87:f3:63:18:93:e2:57:b7:ca:16:f2:5b:7a:e8:f5:7e:78:d8:
81:76:10:5b:b8:22:0e:e9:ae:b2:47:1b:21:e8:69:2d:4e:3d:
f1:ea:28:01:5c:5a:f2:f6:ce:15:0d:a7:a2:5d:7d:bf:0f:c2:
29:22:9f:87:ca:92:af:6c:b3:0b:1d:08:13:39:b1:91:f6:45:
27:7c:ae:30:74:e1:cb:d7:cc:17:01:e3:b9:3e:b2:a3:63:79:
06:42:4e:af:1d:88:eb:3a:1f:6b:24:68:65:71:a9:ff:0c:7a:
5a:c6:e3:f6:22:cc:02:23:2b:94:e7:19:4d:0f:6a:2e:c9:40:
b9:e6:ae:d8:ae:01:5e:20:49:53:dd:3f:58:37:0b:4b:8b:cd:
91:f0:60:28:ae:fc:58:cc:83:28:aa:0e:8d:3e:75:d7:c4:61:
c1:3d:88:63:10:21:12:b4:ff:c2:19:ac:7a:01:20:c3:78:ab:
6e:de:6a:40:a7:3a:a3:4a:b3:e8:4f:aa:98:71:3c:29:d3:38:
dc:d2:c6:c6:de:9c:4c:25:79:84:4f:d7:4a:ef:06:de:ed:51:
df:49:b7:a5:6a:cc:04:48:8b:e8:bf:02:37:88:01:4b:8e:6f:
f1:da:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:03 2025 by rpki-client