Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
File: 4SGVC1Am_t2W9uUCmPkLrC28T-I.mft (raw, json)
Hash identifier: dhxYj2kpW8wi9Z2T55YWM3NcQs+d/L3HoX3/z0nY920=
Subject key identifier: 2D:2B:BD:D1:E1:B1:E6:76:B5:37:A6:E5:37:E1:37:71:14:2F:46:90
Authority key identifier: E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
Certificate issuer: /CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
Certificate serial: 0197684E278F1A76375D805C7B68AF15B51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
Manifest number: 05B5
Signing time: Fri 13 Jun 2025 08:00:41 +0000
Manifest this update: Fri 13 Jun 2025 08:00:41 +0000
Manifest next update: Sat 14 Jun 2025 08:00:41 +0000
Files and hashes: 1: 4SGVC1Am_t2W9uUCmPkLrC28T-I.crl (hash: eeWR6Yc8RsLgB15gDNQ22ZQ4UUxdZ8onsCibuuaP+cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:27:8f:1a:76:37:5d:80:5c:7b:68:af:15:b5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
Validity
Not Before: Jun 13 08:00:41 2025 GMT
Not After : Jun 14 08:00:41 2025 GMT
Subject: CN=2d2bbdd1e1b1e676b537a6e537e13771142f4690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:41:d2:86:94:34:46:82:8c:cc:b6:f0:d8:
f7:84:cb:a7:48:17:96:05:f4:02:47:da:5f:ec:c5:
53:ef:33:3a:7b:03:bf:78:33:88:e3:e1:f3:6a:04:
2e:9e:a5:6b:d1:02:43:4b:b0:1a:59:1c:9b:0e:50:
38:4c:e4:53:26:4c:7f:8d:26:83:2c:be:dd:47:1d:
40:1e:d8:cf:31:df:c4:9c:88:d8:6d:a7:9c:a4:76:
b5:78:ba:e7:3b:22:4d:3b:0a:59:4e:9d:79:1d:82:
c0:7c:b0:c4:48:c6:d7:fb:9c:0d:78:fb:c5:25:c5:
17:90:ab:fb:97:08:b8:b9:78:63:54:9b:be:f6:3d:
ab:1d:48:2b:a0:69:62:c6:5b:cf:07:9f:4f:47:c8:
e8:01:7f:a1:29:14:d0:36:ad:75:4c:fd:cf:dd:21:
1a:90:d0:37:a7:18:34:fd:7c:06:17:51:1c:88:cc:
dd:c6:b7:d8:6c:c2:53:6d:14:39:17:0a:a5:3f:23:
29:88:75:fc:9f:54:49:19:6a:57:bd:3d:2f:17:54:
3c:76:d5:9d:e9:5a:de:3a:4a:51:3e:96:8c:76:10:
6f:a7:e0:48:99:d2:47:c1:50:d5:e2:99:9b:ec:b0:
d9:a0:57:a5:41:9a:50:98:77:01:60:c6:b7:5d:aa:
b9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:BD:D1:E1:B1:E6:76:B5:37:A6:E5:37:E1:37:71:14:2F:46:90
X509v3 Authority Key Identifier:
keyid:E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:13:e2:90:d0:17:c6:0f:80:7a:a7:d3:86:d1:55:0d:ba:
42:6f:11:f9:33:5e:42:55:3e:e6:27:83:28:d9:4f:5d:24:66:
80:ac:12:bd:be:6b:3c:e2:7b:06:64:b5:9d:60:4e:0a:e2:05:
97:63:0c:f7:86:32:98:65:a6:8c:35:80:66:12:7e:df:d6:d7:
2e:c4:8b:a3:cc:92:57:15:c0:6b:77:6b:06:64:cd:81:3d:f5:
f6:cd:1e:1a:7c:4e:20:4b:e5:9a:96:b3:80:4a:60:4d:6c:dc:
44:39:02:89:92:2c:91:22:03:c1:97:6e:5e:3c:7f:e0:1c:a9:
51:e4:d6:2a:af:8e:63:82:23:3a:19:cc:56:11:95:97:4b:56:
d4:95:78:12:56:b0:f4:3c:5e:e7:04:07:a8:19:d2:2b:9a:d1:
3a:dd:5a:5d:58:17:11:4b:b3:2c:0e:d7:42:b4:15:a4:51:c4:
41:a7:a9:12:29:e4:ca:88:fa:d6:65:57:6d:bf:82:f6:ca:7b:
a9:52:e3:77:c2:79:bf:f9:5e:97:d7:bc:a0:9e:f5:63:af:41:
01:5c:2d:c3:03:df:42:92:15:79:7c:8f:3f:23:68:58:6a:4f:
d3:a6:11:0b:dd:1e:6e:bd:c9:dc:c7:43:8f:e5:9f:c9:d7:dc:
d9:40:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:21 2025 by rpki-client