Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: 3y71pA6iTt8JFabxZ2NQrtcxEHoXDiLKcDsenfHdbtY=
Subject key identifier: 74:64:0F:2B:53:D0:D4:A6:7B:6E:4F:A2:82:5B:11:9C:24:48:AB:61
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 01976D3DB1D653FA29C2F92050DBA384038F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 079E
Signing time: Sat 14 Jun 2025 07:00:49 +0000
Manifest this update: Sat 14 Jun 2025 07:00:49 +0000
Manifest next update: Sun 15 Jun 2025 07:00:49 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: GvofljEY9TCpDVpPECUE1PHbPdFQagoSxabwEz8i5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b1:d6:53:fa:29:c2:f9:20:50:db:a3:84:03:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Jun 14 07:00:49 2025 GMT
Not After : Jun 15 07:00:49 2025 GMT
Subject: CN=74640f2b53d0d4a67b6e4fa2825b119c2448ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:92:fe:5f:dd:13:bb:dd:1a:d6:33:78:01:
8e:e4:15:f7:7f:95:96:a1:ad:c6:3c:03:b9:15:91:
c5:02:64:d5:f0:81:85:20:33:d3:2f:1d:03:ed:97:
eb:dc:7e:b7:08:11:80:a2:89:10:68:c7:03:4f:03:
04:db:53:19:55:6c:a0:48:8c:79:96:be:ed:ac:cf:
62:13:d4:6b:b8:1a:46:e1:9d:57:ae:98:61:2f:9a:
b9:8c:e0:3f:ff:8d:f6:0e:b7:57:49:0a:7a:80:5a:
b4:86:3d:ed:31:9a:e7:87:40:3c:ab:6b:70:5b:70:
72:b0:39:9a:c4:83:d1:0f:86:0e:c5:dd:23:74:c8:
eb:e1:0c:f0:82:9c:85:1e:dc:4c:10:e6:d1:cd:94:
3c:e4:a2:43:bc:61:4f:fb:da:87:20:18:b8:a2:e7:
c7:99:97:23:49:4d:fd:27:79:16:d0:51:d4:fb:92:
93:cc:14:ca:21:f3:52:ff:f3:31:88:85:a0:67:77:
bc:ff:55:bd:22:77:e3:aa:92:e9:89:71:36:b5:8f:
cd:e6:ca:49:7a:41:e2:ff:e4:35:a4:83:91:bd:d2:
c7:95:2e:cc:fc:d3:95:20:d9:a2:d5:ad:bf:9c:30:
0a:56:71:bf:fa:c2:5c:57:66:a5:7b:f6:b9:c0:79:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:0F:2B:53:D0:D4:A6:7B:6E:4F:A2:82:5B:11:9C:24:48:AB:61
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:6b:96:7a:86:c4:f5:a7:c0:0d:f7:87:e5:79:5c:17:8f:
c3:02:48:8a:f7:a5:ab:25:cb:61:49:ca:4c:24:f2:ae:ca:4f:
e2:fb:39:0a:7a:bc:40:33:37:31:f3:85:83:fa:e5:ec:14:3e:
75:ee:61:8c:09:97:bd:64:70:00:5e:eb:e1:37:ef:c5:80:c8:
de:a4:e3:0f:40:6d:da:41:29:d0:50:53:96:49:a0:be:6d:ed:
ef:08:b3:fb:0f:e6:21:0b:bf:e6:8d:45:d7:a3:26:3e:ca:a0:
92:c3:0a:01:e0:b9:02:fb:77:f5:8b:31:72:5c:25:3f:eb:82:
23:c2:d3:03:43:62:78:f5:91:1b:41:30:f6:15:40:32:6a:5c:
07:dc:cc:c9:a5:07:a5:58:2d:01:93:00:7a:2c:74:39:a6:8c:
31:f4:0d:81:33:68:30:aa:1b:d8:f9:3c:54:06:99:fb:d4:4b:
81:56:06:6b:df:82:98:0a:1c:69:d4:8b:df:1f:49:78:fc:56:
c2:c1:1a:95:f0:bd:98:6d:5f:6e:2e:73:29:81:de:5f:0c:95:
16:ad:45:38:cb:4b:f1:ae:9b:cc:81:1e:d8:f2:b4:d7:b7:68:
07:a3:c6:a0:35:f0:44:ed:f8:68:93:34:41:64:0c:16:9b:04:
f8:cf:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:50 2025 by rpki-client