Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: YI6AIcLEZbOA1RqOitwhCfsH7Fh4D1+0yCzxdDc1cCk=
Subject key identifier: 1E:9B:E9:D1:93:69:35:4A:E4:A2:3F:BE:52:2D:1A:B7:16:79:15:45
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 01976960C76A1A916EB061057A240F277EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:00:39 +0000
Manifest this update: Fri 13 Jun 2025 13:00:39 +0000
Manifest next update: Sat 14 Jun 2025 13:00:39 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: JQOrY1mqetVYEeGdIHxoGw+NvInOK1iI/hu7HdX2P40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:c7:6a:1a:91:6e:b0:61:05:7a:24:0f:27:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jun 13 13:00:39 2025 GMT
Not After : Jun 14 13:00:39 2025 GMT
Subject: CN=1e9be9d19369354ae4a23fbe522d1ab716791545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:ab:16:a8:36:9c:db:68:95:4d:ba:7d:3f:
0e:76:19:07:14:b7:9d:67:78:0a:ca:21:b9:93:b2:
27:81:cd:82:c7:ca:60:cc:d4:96:a7:2c:06:94:7f:
e4:bc:0b:81:b5:56:5d:55:d7:53:c3:2a:54:3e:fd:
03:1f:e5:8f:d6:c5:f1:ae:40:2f:2f:e5:88:6f:25:
c3:7b:94:15:8f:55:93:e5:5d:6b:ee:fe:13:d1:ee:
66:21:75:d0:f7:b2:02:31:3b:8d:ac:f9:d2:0e:ff:
b5:80:5a:19:08:71:4d:9f:f4:2f:90:8a:fd:3b:b6:
7b:4c:85:07:a1:b2:8a:b7:fc:dc:a6:3e:bc:f5:c9:
b5:0e:ce:f2:53:c8:3b:e6:70:86:68:63:93:36:82:
aa:dd:df:b1:d7:80:2f:50:61:97:5a:21:c1:39:0a:
b2:2d:3c:ff:39:73:4d:91:a6:10:c2:69:d1:6e:81:
f9:d1:10:7b:5b:be:61:e0:49:0e:d4:55:52:6b:ed:
49:16:2d:68:4b:8a:a9:19:3a:34:ee:df:a5:d5:73:
28:fe:52:4e:f1:9d:23:10:f4:bc:9b:8b:16:f8:73:
85:34:db:a5:d7:19:b6:c3:3c:b6:91:d7:d0:9c:42:
a4:0b:6e:e5:3a:46:5e:63:9d:76:f4:90:6b:9a:48:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:E9:D1:93:69:35:4A:E4:A2:3F:BE:52:2D:1A:B7:16:79:15:45
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:89:99:37:dd:ef:eb:fd:1c:f3:de:0c:27:65:c6:d8:bd:b9:
44:ae:b3:aa:d8:8e:70:e5:97:96:a2:56:03:3d:07:f0:f5:f9:
dc:18:7d:53:09:fc:de:03:82:86:67:f5:f8:aa:70:01:c3:90:
52:0f:b5:59:e6:51:88:8a:40:70:06:dd:f2:f4:2e:4b:7f:47:
03:ed:96:14:ab:00:e8:4f:55:32:ae:6c:d4:23:4b:19:64:ce:
9d:53:3c:c7:b0:85:7a:35:62:3f:32:33:79:68:0a:63:b6:77:
e9:5c:94:68:0a:cc:f7:ac:05:f5:75:5b:2a:fc:db:a6:20:4a:
64:83:89:10:6c:10:fe:8a:1e:ad:4f:e4:c9:6a:42:8b:b9:6e:
04:8c:0d:d8:43:65:69:9d:0e:27:be:e2:77:15:39:4b:d4:83:
ab:23:df:a5:55:ae:4a:77:f3:cc:e7:0a:d3:3c:e1:c6:6b:f4:
be:8d:af:7e:3e:60:32:68:40:0b:8c:3c:ce:39:31:f1:64:0b:
75:ae:9e:dd:da:23:e4:90:0b:f0:90:fe:5a:89:00:8e:7c:dc:
0c:99:0a:77:7c:84:81:46:39:8b:e1:d1:76:57:33:64:20:e7:
b6:c0:33:10:b8:2c:ed:68:fe:4d:a1:d9:d3:bc:12:a6:1e:b5:
54:c1:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:38 2025 by rpki-client