Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: vcYnAqwJAyx/bgPn1cwBAvkcdZ7YRYCipQe7b8R2QNI=
Subject key identifier: 0E:DA:BB:B8:38:AC:C8:F2:48:01:5A:93:89:C8:8E:2C:50:8D:E7:56
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 01976BF49970B8E38973916181CC336496B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 01:01:21 +0000
Manifest this update: Sat 14 Jun 2025 01:01:21 +0000
Manifest next update: Sun 15 Jun 2025 01:01:21 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: 9/O7JA/5SYfFdi2KO87G7VowrXGd6T5IWUJjGowz9ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:99:70:b8:e3:89:73:91:61:81:cc:33:64:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Jun 14 01:01:21 2025 GMT
Not After : Jun 15 01:01:21 2025 GMT
Subject: CN=0edabbb838acc8f248015a9389c88e2c508de756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:35:39:7f:10:e9:91:a3:ad:3c:8b:51:1c:
ef:82:c1:c5:12:d6:40:25:ed:82:dd:76:d2:b2:eb:
45:00:be:25:5a:81:d9:53:81:32:ae:16:a8:df:f9:
ef:45:a3:0d:b4:bf:09:8c:38:67:c1:75:1e:a1:4b:
20:ce:c3:2f:fb:7e:05:f1:79:6f:7a:7a:94:a8:e0:
15:41:bd:fd:42:2e:bd:11:d7:16:7e:e9:d2:b4:fa:
b6:7b:14:f0:3e:8f:d2:67:9c:9f:e3:01:39:2c:8d:
a2:1d:e2:58:02:3d:32:80:a9:f5:3a:7a:cf:ef:74:
5a:d4:36:85:ba:e4:ac:1e:1e:89:b0:f5:5b:29:44:
c8:85:ec:44:7b:2d:b3:83:3b:82:3e:0b:66:1b:98:
f3:e1:12:61:3a:08:d8:7e:fe:bf:5a:f7:35:94:31:
44:b5:5d:0d:eb:8b:53:50:53:07:0f:df:aa:f9:ff:
31:94:96:4c:c2:0a:b5:27:e7:4f:cd:91:05:c3:38:
23:92:01:80:a5:22:e4:0a:00:33:a0:85:b6:cc:3c:
e3:df:8b:d5:4c:35:d2:7b:65:50:71:55:f1:fd:57:
0e:a8:ac:fb:da:cd:22:99:9d:6c:3f:5d:a6:5d:26:
3e:11:09:6c:e9:b9:a9:e4:88:ee:a3:5e:44:f4:2f:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:BB:B8:38:AC:C8:F2:48:01:5A:93:89:C8:8E:2C:50:8D:E7:56
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:1a:26:fd:3a:62:55:f2:34:e2:ad:1c:e8:be:8d:2d:95:
4b:50:14:03:04:02:a9:b6:89:13:d9:2b:ae:83:1f:39:02:d4:
27:aa:87:0f:39:a1:8b:39:56:03:09:7f:85:de:7a:ff:9d:a2:
47:68:8b:c7:79:bc:76:d7:72:37:38:53:1c:c7:e5:ca:26:ba:
da:27:a8:e3:2e:81:81:54:2e:6c:e2:9c:9a:7f:fd:4e:28:0b:
8f:11:a6:50:4a:79:de:f1:58:14:de:04:19:54:50:06:ba:a2:
39:f2:13:4b:a1:d6:ef:c2:82:5f:76:02:c9:d4:73:42:ef:81:
d8:55:2f:92:12:71:ed:2c:0f:41:b1:d9:e2:4b:5a:81:f8:31:
cb:c7:27:ed:08:45:b8:ea:b5:5a:d1:29:3a:05:cd:62:53:3b:
98:ca:57:4c:51:20:d6:1e:8d:09:96:59:ef:82:56:79:f0:44:
1d:23:02:13:de:66:d4:56:57:73:10:aa:95:f7:93:f6:01:43:
1b:f8:53:9e:75:4a:94:37:67:f2:fd:40:51:54:b8:df:41:86:
89:39:76:5e:da:04:f7:f3:e9:3d:10:0f:12:d5:a8:af:3e:2c:
0f:eb:f9:a0:6d:2f:4c:5f:41:2e:3c:d7:31:c7:ef:fc:0f:30:
7e:6e:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:42 2025 by rpki-client