Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: z1EO+5t2v3mk/LABL7oy025sGvkPjlHdz+gMtOCKVc8=
Subject key identifier: FB:0B:78:28:BC:F3:1A:6C:86:74:C3:2A:82:70:00:C0:D1:55:DF:47
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01976E50779FAC35D6BB06131D132C323783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0EB8
Signing time: Sat 14 Jun 2025 12:00:56 +0000
Manifest this update: Sat 14 Jun 2025 12:00:56 +0000
Manifest next update: Sun 15 Jun 2025 12:00:56 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: sw084idp35hC+YupLB8H02SmSWcZEw9oVpTIRLV6muc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:77:9f:ac:35:d6:bb:06:13:1d:13:2c:32:37:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jun 14 12:00:56 2025 GMT
Not After : Jun 15 12:00:56 2025 GMT
Subject: CN=fb0b7828bcf31a6c8674c32a827000c0d155df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:98:9a:e2:68:34:70:b6:8e:75:b4:3a:f8:
93:3f:4f:35:6c:28:38:4e:ce:b8:89:95:9c:44:1b:
9b:cb:3c:4a:92:df:f6:74:d4:cd:36:9b:3a:f1:65:
f4:d0:35:47:f3:6b:ad:b9:02:bd:d3:1b:fb:13:29:
15:be:6e:eb:a1:71:39:54:c5:68:2e:91:52:f3:b3:
9b:89:e3:5d:7d:9c:cf:91:35:c7:ab:2f:16:5e:69:
ba:f3:f4:77:39:ef:49:3d:7f:d0:31:e5:e5:5a:26:
60:b9:71:96:11:0e:35:19:14:c8:de:13:29:05:06:
cd:f0:ae:dd:82:39:37:96:bc:5f:14:ea:67:3d:09:
f1:44:fe:fc:20:c9:28:f1:a0:ba:75:7b:a0:00:db:
cf:44:34:ce:91:af:c5:84:c4:da:35:dc:74:33:2e:
58:46:04:dd:6e:ea:16:45:f8:f5:fd:2c:fa:50:5f:
02:57:18:bf:f1:a5:e9:e3:53:40:b9:6f:f6:6b:bd:
4a:02:91:f0:62:8d:10:bf:e3:d2:bc:c9:69:42:81:
cb:80:08:00:8b:b0:1f:75:1a:3d:08:13:16:45:d0:
78:de:f5:5e:be:1a:cf:cd:54:a4:89:e0:bd:3e:1a:
c5:a9:f3:12:91:34:2f:49:28:5b:de:58:66:5c:63:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:78:28:BC:F3:1A:6C:86:74:C3:2A:82:70:00:C0:D1:55:DF:47
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:18:a8:c7:39:9d:1f:42:fb:60:42:fc:e2:a2:0c:ab:1d:95:
1e:ed:d6:8f:ad:a8:33:53:c9:50:51:80:8e:a5:58:47:9b:89:
e4:2c:4e:6b:2e:ea:92:bb:c3:e2:02:b3:28:63:bd:de:8d:67:
b9:11:4f:f1:17:6e:0a:6a:cf:19:81:da:8f:9c:f0:63:c3:e0:
70:0c:78:a9:c6:4c:ab:c5:a0:4c:36:01:98:44:3a:3f:7e:1b:
5b:bf:8a:32:24:a7:6e:23:1a:31:7b:6e:4f:7a:bf:5e:e6:d6:
ec:0a:97:57:25:71:10:5a:51:de:67:fd:e6:f5:3e:ae:2c:df:
16:4b:11:10:b8:5b:1d:b9:d8:7b:fa:05:ca:ac:6c:08:57:83:
c1:75:35:eb:52:54:d8:57:20:e4:04:22:53:b7:fc:2c:e2:86:
a8:06:de:10:ea:29:f0:20:8b:a0:fa:52:32:73:44:77:44:39:
25:31:ef:64:9c:21:62:2d:de:46:e1:b4:dd:1b:53:db:bd:8c:
33:4c:ce:56:5e:e1:4b:2e:68:90:6c:76:31:fe:74:09:89:37:
0d:b3:d9:47:20:45:56:41:76:35:0c:6c:da:de:0d:2b:70:b4:
21:50:3c:78:7e:ca:67:0f:4a:94:4d:c0:88:da:e3:2b:df:85:
36:e7:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:54:17 2025 by rpki-client