Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: yIhZicIgAQhJL/G64XL95zs7P8UQH+TL4RQG9pMrWDA=
Subject key identifier: 1C:11:74:85:42:16:22:5F:36:64:C0:14:14:66:F8:AB:F2:A6:9E:AA
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 01976D3D9C9CEE4E4969FA9C1AE9966FA78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 0FA9
Signing time: Sat 14 Jun 2025 07:00:43 +0000
Manifest this update: Sat 14 Jun 2025 07:00:43 +0000
Manifest next update: Sun 15 Jun 2025 07:00:43 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: i/vYHK6uwXWKRMbhLmwFt7sQhcp0PjiUhVQUW9P/t64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:9c:9c:ee:4e:49:69:fa:9c:1a:e9:96:6f:a7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: Jun 14 07:00:43 2025 GMT
Not After : Jun 15 07:00:43 2025 GMT
Subject: CN=1c1174854216225f3664c0141466f8abf2a69eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:9d:2a:fd:f1:da:7c:3c:6c:ca:c9:1a:09:
43:23:3d:4a:02:5b:d7:d8:07:77:2a:86:c8:3e:40:
57:5a:e0:f5:3e:ca:b9:55:18:48:86:62:41:21:16:
28:02:3b:2a:e3:44:9c:c7:1d:2b:5e:c5:2b:d9:1b:
b5:16:47:66:67:c3:43:f4:dd:e3:ce:59:56:5d:23:
ae:77:09:d7:3b:a2:c5:7c:57:f0:8e:38:dd:99:c2:
42:7e:ef:c2:cc:e7:5f:fd:de:9a:fa:66:e3:b4:9e:
76:70:6e:d4:de:71:89:28:ae:a7:d2:57:49:13:ef:
85:1e:8b:02:dd:77:d7:17:e2:90:ae:2f:87:0e:84:
f3:6d:61:fa:63:a7:49:aa:19:32:57:c2:6b:f1:da:
67:42:58:24:a6:00:84:b2:bb:8c:33:c9:3c:07:ce:
03:de:ae:dc:a4:e0:28:75:b2:f4:4e:5b:d6:b2:3f:
60:d0:3e:66:31:3a:03:e2:91:04:18:79:20:dc:dc:
bb:63:59:12:e7:da:6d:f3:b3:36:d8:15:8d:cd:6d:
7a:4b:47:16:3d:c8:ce:9a:c5:0d:53:12:19:de:7c:
f9:88:02:7f:7c:b8:cc:c5:af:01:8e:70:d8:28:88:
ea:80:d4:01:33:f9:e7:27:7e:34:fd:72:93:5a:40:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:74:85:42:16:22:5F:36:64:C0:14:14:66:F8:AB:F2:A6:9E:AA
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:aa:45:de:67:c7:3b:6b:44:99:81:ac:a2:2c:6b:fe:20:e6:
27:4c:06:95:a3:b4:4c:90:f4:ba:6d:73:c7:02:94:3f:b4:ec:
46:73:5c:f7:9b:6e:29:db:5d:94:ad:fa:92:5a:11:d5:40:51:
83:a4:6c:7b:73:ec:fa:f4:7d:b1:96:0d:77:b3:49:20:c7:b4:
de:2f:ad:34:80:0a:12:1d:33:63:cd:bb:0f:d5:71:d9:e7:f7:
f9:4d:70:19:b1:20:f7:4c:5c:95:db:2d:4b:9d:05:56:8d:51:
1d:e8:be:ea:2f:da:48:97:b3:00:8a:b2:31:c6:02:e6:42:cb:
86:b7:85:da:c5:c9:06:cb:fa:aa:25:07:dd:a6:ab:8d:b5:26:
ff:87:8d:07:e4:1a:5c:07:43:48:5f:a8:5f:ef:01:9a:3b:0d:
86:c2:b8:06:8f:7c:c1:38:6a:3e:73:40:58:72:31:46:b4:91:
9a:0c:1c:40:d1:7f:b3:c0:d8:01:3c:e7:63:35:28:bb:16:40:
99:1c:8b:53:e6:96:be:3d:c0:e2:40:cc:6c:0a:f2:e0:ae:78:
ab:3a:dc:01:81:a8:84:cc:46:11:f9:ec:12:1a:cd:5b:a3:71:
bc:a1:c7:98:08:2f:2c:0f:43:1c:24:e5:c2:43:4e:a4:88:72:
93:29:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:26:58 2025 by rpki-client