Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: 9gaChNEfZrY89ekk6+BIFfga38Fgrn4rwMkgm+p8Zqw=
Subject key identifier: 4C:F9:F8:14:91:6A:9D:D8:27:6C:D1:FB:6A:E2:9B:C9:AC:9D:CA:3E
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 01987D8BD197F3F336712C5C652B238E14D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 04:02:51 +0000
Manifest this update: Wed 06 Aug 2025 04:02:51 +0000
Manifest next update: Thu 07 Aug 2025 04:02:51 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: gZZceaZGLi06xgiVQL47pPDvw522htM8c531MVpErdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:d1:97:f3:f3:36:71:2c:5c:65:2b:23:8e:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Aug 6 04:02:51 2025 GMT
Not After : Aug 7 04:02:51 2025 GMT
Subject: CN=4cf9f814916a9dd8276cd1fb6ae29bc9ac9dca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:78:8a:53:9c:6a:dd:c6:4b:ee:12:66:53:
05:52:f6:cd:60:db:70:e9:54:0a:76:22:c4:1a:a8:
93:9f:7e:b5:fb:7f:9a:e8:e6:6e:0d:7a:49:55:56:
a4:dd:fd:7b:45:bd:5e:9f:5d:92:6a:b3:50:98:90:
51:00:f7:ad:72:4e:24:27:c6:f0:dc:02:ab:c7:2e:
e0:7d:90:ef:eb:96:07:76:bd:cc:b9:33:6c:b7:fc:
4b:1c:3b:05:f3:e8:35:ed:e2:5e:7d:94:82:b2:49:
09:ef:2b:5f:43:b7:af:e6:ab:e0:50:1b:fc:a4:21:
ea:b8:6a:f0:3b:5d:0a:7d:15:f6:d2:7e:01:bd:d9:
ba:0d:85:02:9e:e3:8e:13:49:73:ee:69:5d:ae:55:
16:bb:84:cd:cb:33:a5:55:50:e8:e3:d3:ef:c8:fc:
66:c8:db:8b:ae:11:ca:46:34:cb:ce:b6:bc:e2:ac:
22:d8:fa:01:ff:2e:1d:db:90:9b:f9:9f:d9:a1:e0:
9d:f8:29:1d:4e:cd:ed:39:63:9a:b0:bb:ef:26:4b:
24:58:77:5a:68:2f:aa:bb:7e:29:67:a7:c6:65:ce:
dd:9f:63:f5:30:31:d3:05:f2:8b:af:80:1f:8e:98:
e9:9a:4e:49:23:89:3a:46:ce:84:d0:08:33:e9:c5:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:F8:14:91:6A:9D:D8:27:6C:D1:FB:6A:E2:9B:C9:AC:9D:CA:3E
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cd:1c:08:fb:0c:b1:bf:fb:c0:73:56:cf:a3:ea:31:f2:a0:
87:3e:46:7c:4f:e2:f4:93:35:aa:8b:f3:b7:5d:27:aa:ef:e8:
59:a9:2e:40:d8:4b:2b:62:e5:cf:dc:b5:db:40:c3:d3:c6:e9:
3e:8c:1c:4a:f2:ab:ec:2e:ec:a2:1f:0d:2c:2c:9f:9f:d1:06:
5f:74:a7:b2:9f:1a:32:5e:03:1e:68:c6:e4:79:44:c9:1e:a7:
18:c8:80:2c:c4:fd:4c:64:5b:48:1b:cc:0a:91:09:b6:98:29:
1b:01:3c:19:5b:48:ec:e2:a7:71:f6:05:76:f5:c4:26:8a:94:
e2:e2:c8:d4:1f:48:6e:cb:55:3f:53:d7:ea:ec:b0:40:36:1c:
03:af:65:b3:53:9d:c7:c5:80:a5:7c:94:08:89:52:c3:09:c2:
f3:6a:cb:02:ec:0f:ac:2f:d6:2b:f3:b2:8d:0b:9c:b8:7d:7d:
ee:21:b8:ab:62:80:20:37:e7:f9:84:b5:4d:9d:1f:57:54:3b:
99:20:72:d5:06:0f:bb:77:9b:c6:13:14:f9:9b:09:d3:ac:79:
3d:09:d9:ca:27:db:8f:aa:bf:a4:78:1a:56:a0:df:b1:44:62:
4d:32:6c:47:1b:bb:4a:f2:f8:bf:0a:aa:f4:ce:ba:b2:94:b3:
72:40:a0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:41:23 2025 by rpki-client