Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: PymIqKjvxgxUPyRhz4cVw8C4LvBA4xnFpXupBceb9Og=
Subject key identifier: C2:97:67:D3:CF:20:95:F7:A5:C4:9A:8C:6D:78:AD:1D:9A:58:DF:4C
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019769CEC6D3583AAA4666C9191C0A9D0EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 15:00:48 +0000
Manifest this update: Fri 13 Jun 2025 15:00:48 +0000
Manifest next update: Sat 14 Jun 2025 15:00:48 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: bJS96QU3IS6QOY1GH17hsDKdf3A/L+f3pmuDgqx9iWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c6:d3:58:3a:aa:46:66:c9:19:1c:0a:9d:0e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jun 13 15:00:48 2025 GMT
Not After : Jun 14 15:00:48 2025 GMT
Subject: CN=c29767d3cf2095f7a5c49a8c6d78ad1d9a58df4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:3c:0b:1d:82:33:84:fc:8d:e2:d1:64:5f:
70:82:28:56:83:9d:3f:2f:77:f7:8b:10:8f:74:4a:
a6:60:f1:58:1a:0d:93:ea:b6:2f:a6:f4:e7:9b:59:
7c:0b:ef:aa:74:c6:11:23:e6:89:41:4c:e7:e4:fe:
9e:45:36:c1:f7:4e:68:93:ff:f0:ec:33:70:60:9a:
0a:10:8f:ee:65:53:61:90:4f:a7:42:96:26:a3:09:
a6:47:f8:81:e1:f3:e4:28:7e:8d:8f:94:d7:ba:7f:
23:87:23:95:8d:bb:32:b7:a2:39:37:14:53:70:7c:
f2:f0:5f:27:2a:eb:ab:d0:f2:a3:ab:82:bf:1f:4c:
12:ed:85:ea:1d:64:ed:1a:b6:6b:35:b6:86:a6:8c:
56:0a:d9:a7:9c:88:10:7e:14:81:98:5f:1d:e6:ad:
8c:89:24:92:7b:96:2c:1f:07:a9:69:69:d8:85:04:
e4:1c:63:3d:9d:72:80:4b:fb:08:b9:4b:c3:17:c8:
b6:41:34:17:5b:c4:99:9a:56:70:b2:13:d3:b1:61:
a8:7f:dc:a8:f1:bf:65:f1:16:05:57:d1:1f:7d:37:
44:a8:72:c6:f7:84:73:48:1c:5c:a9:1a:64:a1:6d:
65:45:fd:e9:60:05:b5:0b:bc:af:2b:4c:dd:e7:eb:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:67:D3:CF:20:95:F7:A5:C4:9A:8C:6D:78:AD:1D:9A:58:DF:4C
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:2d:95:b1:d9:57:6e:ae:2c:ec:88:56:82:db:24:71:36:
19:bc:7f:b2:c0:ba:04:f2:bc:97:51:7a:61:74:34:2d:a7:1b:
aa:31:ac:c0:9b:1d:8f:d1:68:7b:dc:81:65:b7:87:8a:11:d0:
92:e3:80:06:09:7a:0d:96:da:af:24:c4:26:d9:31:0b:8a:5b:
97:c9:3d:45:18:0d:10:03:35:bd:ce:db:4d:26:5c:2d:69:7f:
9c:53:54:db:e7:8f:8b:1d:37:66:7e:31:15:5a:11:bf:e2:d9:
2a:c1:b3:b3:64:b0:6b:07:fe:61:76:43:03:d4:38:09:d2:e5:
41:d8:f8:ea:03:2f:07:29:c7:a6:e2:15:16:48:bc:46:0a:6b:
c3:7f:7c:9d:0e:35:bc:3f:bd:ca:96:31:dc:f1:df:8d:1d:f4:
76:f8:d7:f1:4b:08:bf:d7:d0:ae:e8:bc:c1:e3:a8:d8:b0:2c:
1f:bc:28:80:5e:d2:2e:8e:3b:81:89:bd:5b:45:89:be:5a:70:
81:f2:7c:3a:7c:ba:cf:f7:57:a4:f6:f1:f8:ee:66:0d:f0:fc:
e9:1c:30:7b:b5:2f:e1:5e:00:a8:2f:9d:9a:c0:02:f0:d0:e5:
f1:77:8a:16:48:ca:c5:af:ba:2f:65:ef:3f:74:1d:3a:ea:19:
58:65:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:32 2025 by rpki-client