Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: 6tvK0OwDBChP0bA7IPkHS2ZL2vDjNYAVQotvrnFIa3c=
Subject key identifier: BD:83:7C:1E:98:3B:8A:BB:C8:35:58:58:C5:D4:74:5B:3E:72:A6:C8
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 01976DAB41AFB18A2BF6D7DC000F7966D3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 085B
Signing time: Sat 14 Jun 2025 09:00:29 +0000
Manifest this update: Sat 14 Jun 2025 09:00:29 +0000
Manifest next update: Sun 15 Jun 2025 09:00:29 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: CpGlnPoYb+h8EBTe9LMNDSgFSKPw8fNIJxgGIiAPldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:41:af:b1:8a:2b:f6:d7:dc:00:0f:79:66:d3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jun 14 09:00:29 2025 GMT
Not After : Jun 15 09:00:29 2025 GMT
Subject: CN=bd837c1e983b8abbc8355858c5d4745b3e72a6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:e0:b8:54:e7:41:8e:93:8a:eb:43:ee:79:
24:04:82:b1:f8:6d:34:c1:96:7b:4c:de:4d:e0:5a:
40:5e:d8:97:19:34:02:24:11:d3:df:7d:d1:b7:76:
6a:1c:d2:b3:40:2b:94:1a:c9:d2:97:18:2c:e7:58:
1c:27:dc:e6:b3:56:a1:89:c5:49:d1:78:ec:34:2f:
03:9c:7f:f9:bf:39:4c:af:3f:4d:99:13:26:10:20:
07:f7:05:3f:be:a9:2d:a2:6e:58:85:c7:e9:53:f3:
db:06:28:9a:3f:30:39:10:ac:fd:80:e8:7c:35:a4:
4a:9b:77:0b:8c:a2:87:54:da:b0:d3:d5:d6:cf:28:
53:23:67:ee:79:7b:df:d9:fb:14:47:1c:09:b4:c1:
d1:8e:1e:71:d0:5f:d1:36:07:25:50:e3:fa:5b:a3:
a7:f3:f0:93:6f:8f:0a:1a:f9:7e:2f:21:ce:2a:48:
5a:8a:ba:e7:e4:cc:b1:ce:b9:08:e5:6a:eb:d6:82:
9f:08:3c:1a:c3:c0:08:b5:93:99:e3:04:2e:c9:70:
0b:1a:00:3a:5d:c2:e3:d2:96:0b:33:7c:72:04:e2:
02:fa:a5:2b:7f:b1:f4:cd:c0:7a:50:0a:4e:85:20:
cb:33:50:70:df:c0:aa:b4:78:95:2c:6d:0c:84:ac:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:7C:1E:98:3B:8A:BB:C8:35:58:58:C5:D4:74:5B:3E:72:A6:C8
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:47:ed:54:16:4f:74:02:4d:34:ed:f5:ca:bb:ad:79:96:
57:a8:0b:23:3f:d6:22:ee:ad:04:fd:96:f9:98:74:62:97:2c:
30:92:ef:b7:64:87:6e:03:40:8e:2c:3c:13:c7:4a:10:68:33:
27:04:73:9b:6f:07:7d:5c:35:49:52:35:48:d6:a6:a8:e5:d5:
9d:c3:6c:18:50:61:a1:af:fd:b1:2f:16:60:da:d6:37:36:70:
a6:58:2a:76:b1:bb:83:12:7b:57:42:35:18:ad:34:fb:5c:5f:
88:bf:0b:cf:3f:0f:03:c5:19:f2:1d:ce:44:d0:18:48:ed:d3:
cb:39:a8:04:ca:00:55:01:16:f0:59:35:86:c3:cf:d4:22:95:
30:21:87:2b:ee:db:ff:b6:69:31:b8:f5:22:7e:8e:dc:b0:2f:
a6:3b:76:f9:c0:78:ab:8f:a5:55:14:38:c8:b0:73:2d:d8:64:
aa:78:ad:f1:c7:46:32:b9:76:e9:fe:a8:15:30:1d:2d:01:22:
a1:54:2c:b2:ba:82:15:14:ff:7d:ad:98:8b:84:75:b0:7e:1a:
37:35:10:ff:bc:26:47:eb:7b:5e:e5:bb:ff:21:b5:c9:b6:cc:
cc:83:77:fa:2d:fa:2c:6c:e4:0f:d8:ae:ff:43:92:36:77:d4:
51:18:94:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:28 2025 by rpki-client