Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: ADJKJ3BwehUps7LRYLiB30PElbUyD0nLnFrtHnjaN7o=
Subject key identifier: CD:15:67:EC:5D:00:B0:E5:8F:3A:9D:B7:1D:E6:B9:CE:AF:72:4C:6F
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019770E37D9725428F79AA8E90D0D36A4910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 4C
Signing time: Sun 15 Jun 2025 00:00:46 +0000
Manifest this update: Sun 15 Jun 2025 00:00:46 +0000
Manifest next update: Mon 16 Jun 2025 00:00:46 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: 8nl0onptCcYyoQMAGNfDVrZL0hJt+rz54dKkmb1JgG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7d:97:25:42:8f:79:aa:8e:90:d0:d3:6a:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Jun 15 00:00:46 2025 GMT
Not After : Jun 16 00:00:46 2025 GMT
Subject: CN=cd1567ec5d00b0e58f3a9db71de6b9ceaf724c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:ba:be:1a:eb:f2:3b:09:d9:5d:10:2e:ac:
52:22:f5:f5:ef:d5:2f:ca:58:ca:43:49:5f:82:1b:
c3:79:a3:7f:76:46:ba:21:98:6f:2e:64:d6:03:fa:
c3:af:17:c9:95:64:ff:f5:22:f0:97:ac:ef:34:e5:
59:0b:f8:f9:22:fe:75:c0:ee:d2:88:4b:15:18:e3:
40:09:74:b7:52:4e:eb:fd:f2:78:20:86:6b:ee:d6:
8b:e5:de:1e:34:aa:9c:5d:b9:62:9a:a0:11:2e:ea:
29:f4:65:a7:94:62:a0:ba:59:c8:90:58:63:21:54:
28:5b:d7:26:9e:f2:d3:04:14:a2:9e:80:f3:fd:3c:
de:5a:96:58:ce:87:ea:17:7e:81:52:5a:ad:f8:a8:
4f:e1:ca:04:9d:3a:31:ce:f1:4d:74:79:ae:38:bd:
cc:cc:97:a3:a9:39:17:b4:95:a5:f1:ee:30:c9:87:
19:30:49:2b:cf:dc:fb:68:78:10:0c:9c:ba:6e:18:
95:e1:95:4c:66:90:12:1b:09:16:d5:b1:85:9b:d9:
b1:bd:53:3a:27:50:0d:3a:ba:f6:6e:c3:53:3b:ad:
34:a2:c8:cb:dd:6e:82:dd:4c:03:3f:0f:8e:0f:54:
d4:3d:f8:71:9d:78:6b:f4:18:08:7a:23:95:0c:4d:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:67:EC:5D:00:B0:E5:8F:3A:9D:B7:1D:E6:B9:CE:AF:72:4C:6F
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ee:82:6f:b3:43:c4:e2:4e:6a:75:6f:f6:95:6e:fc:0c:af:
df:ca:40:bf:b2:5d:41:c5:3e:57:05:87:47:ba:2b:28:09:b3:
88:29:b7:d8:23:f6:1e:92:4a:ba:37:00:a3:a4:d3:b0:df:aa:
40:93:41:80:6d:a3:df:08:2d:f2:81:f3:2a:da:40:30:3e:08:
4b:53:8a:72:f5:85:68:5b:b7:1f:35:ca:e8:f5:20:95:9b:e0:
7b:cf:69:ac:08:01:63:85:26:ce:36:58:50:ab:56:58:aa:b9:
5b:9a:11:44:a4:3e:b7:45:3c:73:26:07:aa:58:5f:62:4d:6e:
6e:10:d4:6f:b9:12:f4:b6:98:95:ab:12:d4:fc:26:46:2f:84:
49:c9:4e:23:0e:e0:52:b9:a6:b5:cc:1a:cd:f8:a7:d9:0a:99:
8e:f9:da:9b:fc:08:23:0f:f6:37:f0:c2:dd:42:74:87:8a:84:
06:1f:dc:03:a7:6a:c0:24:0e:f3:dc:59:ef:ae:06:52:7d:78:
56:84:8e:9d:db:70:b2:49:dd:f8:d8:eb:4c:80:44:06:44:99:
eb:97:78:95:61:5d:ca:07:31:26:10:9d:4e:d7:34:e1:11:d6:
22:f1:99:7b:43:57:8d:54:a6:f3:f3:d4:bb:24:ec:c3:ea:df:
e8:94:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:58 2025 by rpki-client