Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: Tj8zMWD04kXSRuoAgu+yvZEsEhsLeJCkCXefPmBb+IQ=
Subject key identifier: B2:46:6F:14:A7:E0:75:D4:B6:DE:C5:6B:8B:C6:66:F6:6D:F7:1F:C1
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 0197789CB1306FB9A00082C368430BB33F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 0E98
Signing time: Mon 16 Jun 2025 12:00:24 +0000
Manifest this update: Mon 16 Jun 2025 12:00:24 +0000
Manifest next update: Tue 17 Jun 2025 12:00:24 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: ynxH2d51tnC0wTWCCHPorbSIXvTUD3k/nx5GklOvjzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:b1:30:6f:b9:a0:00:82:c3:68:43:0b:b3:3f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Jun 16 12:00:24 2025 GMT
Not After : Jun 17 12:00:24 2025 GMT
Subject: CN=b2466f14a7e075d4b6dec56b8bc666f66df71fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:5e:9e:74:85:2a:28:8a:7e:7d:dd:f7:91:
9d:d6:c1:e2:39:49:27:bf:bf:cc:7d:30:fd:8f:dc:
c0:d0:d4:6d:83:46:b0:f6:7b:18:0b:db:51:37:d7:
56:e7:8c:96:5c:02:e3:35:0b:0f:4c:f1:3b:87:2d:
aa:6c:08:27:1b:20:dc:77:55:67:5f:b2:cb:fe:32:
31:3f:13:a5:62:c0:35:3e:d4:c0:a7:96:22:82:57:
e5:fe:b1:52:35:19:d0:f0:07:29:3a:15:28:42:b3:
e3:b3:a1:8a:b4:28:63:c8:8b:31:1e:3d:66:a5:3f:
0b:84:7a:c0:b4:0b:ba:8a:00:ea:11:a2:94:5e:c7:
22:c2:7c:a5:fb:c9:c1:cf:2f:f7:eb:a0:90:ca:26:
6b:e4:0c:0b:e0:20:a4:74:5a:4b:62:d8:e2:e4:e0:
b7:be:d2:ef:06:02:da:c0:84:8b:84:70:44:66:64:
40:7f:6c:b9:c1:e1:f0:0e:89:7a:9f:89:e1:04:ee:
19:cb:da:e3:d0:5c:d0:c2:0f:13:dc:7c:79:09:0f:
9e:51:89:1c:a2:22:f4:70:05:ac:e8:0a:f2:04:f2:
41:a9:20:b3:83:24:cf:33:76:4c:97:98:04:fa:0d:
d1:32:fd:c1:38:a4:66:cb:be:65:c1:b8:88:8f:7e:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:6F:14:A7:E0:75:D4:B6:DE:C5:6B:8B:C6:66:F6:6D:F7:1F:C1
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:de:e1:f1:01:57:0b:b6:6a:1c:a8:2b:ca:44:9d:74:36:
de:3e:6e:e5:a1:95:31:9e:48:b9:97:30:ef:a1:64:4f:48:98:
ff:b1:6d:98:3c:bb:b6:bd:a3:4e:46:d9:63:42:48:a7:e9:cf:
7a:73:b4:04:d2:11:c4:4d:f6:1f:81:bd:f8:dd:e0:ff:b3:70:
59:70:a6:f4:1b:cc:75:c0:e2:01:83:c3:37:cb:64:e1:62:e6:
21:0a:dd:4f:a7:e4:35:3e:e2:7b:6f:54:3a:0d:10:cc:b6:d3:
79:eb:8b:9a:0a:c4:83:26:9c:e2:02:17:93:c4:f6:b3:0c:54:
13:df:15:7f:20:9d:e8:54:93:0b:4a:14:6a:90:54:3a:8f:5a:
c3:6f:cb:36:c9:da:3b:8a:6e:9a:e1:e9:52:5f:61:5c:a3:f6:
4c:c2:98:aa:d8:ef:27:87:b5:8f:85:12:ae:5e:2b:6a:a2:74:
97:bb:f1:a0:09:43:37:c2:79:01:c4:ab:0d:b6:e1:7d:85:87:
35:b5:76:2f:20:e1:57:26:5a:d4:b3:5d:78:72:3c:44:ca:85:
6f:4d:1d:07:b8:dd:4b:ce:58:78:d4:10:15:95:8b:a3:b2:8a:
30:e2:3c:2f:2b:67:da:03:9f:8c:6b:62:0f:54:b3:76:cb:c7:
e6:1f:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:31 2025 by rpki-client