Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: w9TiSNFWXCwMYiNZytzpZCGgeIZfZMyvTIqDcfxAy5E=
Subject key identifier: 46:0F:FB:5C:F1:A7:C6:18:22:7F:63:CE:52:21:3E:66:A5:E1:53:ED
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019768BBBF6EF6A6BF7CB846247640EE2016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 08A7
Signing time: Fri 13 Jun 2025 10:00:23 +0000
Manifest this update: Fri 13 Jun 2025 10:00:23 +0000
Manifest next update: Sat 14 Jun 2025 10:00:23 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: TG7scFGZdApYQVxU0ztgXfi6lq2NUCKO60kV2/PQFjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:bf:6e:f6:a6:bf:7c:b8:46:24:76:40:ee:20:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jun 13 10:00:23 2025 GMT
Not After : Jun 14 10:00:23 2025 GMT
Subject: CN=460ffb5cf1a7c618227f63ce52213e66a5e153ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:5e:86:de:0a:5b:19:1d:14:c8:ca:7e:76:
b6:d6:16:6f:e3:f2:c8:bb:b6:07:4c:24:bb:c6:ae:
51:64:44:8c:3b:b7:32:5a:c0:9e:e4:21:86:03:a1:
07:e0:37:c0:34:97:ca:fc:b5:c2:37:a7:12:60:77:
d9:e2:5a:de:b3:67:e6:f9:a4:4a:7f:a5:28:6a:57:
d8:02:f3:94:ad:83:f1:f4:9e:c4:58:7a:93:40:38:
14:71:41:9a:3d:20:5a:b3:43:d7:2d:f5:6b:cd:fc:
83:5e:6a:bc:5e:6e:3d:81:8b:30:21:67:d2:48:1d:
3c:e5:16:90:c3:7a:66:f5:a9:44:3b:ae:3d:9b:a9:
47:1d:a4:9e:48:2f:27:28:8a:ef:01:04:d3:da:17:
e6:c9:65:cd:da:50:e7:1b:9e:e9:f6:72:b2:1e:b2:
84:3d:b9:f7:7d:04:a5:77:11:83:e4:e3:e4:05:dc:
6e:88:92:a0:24:d5:26:c0:35:4f:72:fb:31:32:b8:
c3:67:24:77:38:e2:50:a7:c1:95:db:f2:df:b6:82:
1c:6c:12:93:c2:23:29:d1:5e:25:7f:ac:2a:2d:d3:
b1:d4:d4:4b:4a:a5:a2:cc:64:a4:94:65:4b:96:7e:
c8:43:a6:ee:4f:dc:46:2a:2d:e1:1e:10:fc:c0:00:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:FB:5C:F1:A7:C6:18:22:7F:63:CE:52:21:3E:66:A5:E1:53:ED
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:97:23:7d:f5:d7:45:72:bd:4c:13:b4:5d:2c:83:51:72:18:
9b:c2:d1:60:6e:5d:0e:14:10:59:2b:e9:09:60:31:8a:cb:dc:
65:1e:b9:ff:68:1b:40:2e:04:58:68:8b:a3:c1:aa:e8:14:9a:
80:42:1a:80:ce:2a:fd:52:c1:d9:30:56:31:91:ab:f4:2c:cc:
37:fc:b9:da:d4:87:bb:b9:5d:47:4b:cb:8c:5c:86:42:5e:7d:
bd:64:e9:ba:47:1a:af:b8:36:41:a7:4d:ca:cd:77:c3:c0:2e:
d5:80:20:e5:63:a1:a4:74:ff:df:ed:ad:5f:66:00:5b:80:a6:
f3:46:b0:60:04:0a:ce:c5:24:a3:db:e0:0e:19:0c:43:9a:20:
c8:bd:53:aa:85:6c:28:f5:fa:e5:81:cb:42:a7:fc:8c:c0:39:
f8:7e:cc:11:83:57:3d:81:43:db:c9:24:93:d4:4b:43:06:fa:
0a:ed:7f:fc:41:ee:c3:0e:7d:a4:4f:78:46:2a:df:8e:8a:b5:
68:25:27:ac:fd:d1:c4:23:1e:60:42:75:6c:1c:b3:fb:2f:b2:
0b:fa:cb:d5:65:a3:60:35:be:07:f0:91:c9:ed:bd:27:4b:eb:
df:cd:30:8b:a4:d5:0a:85:af:fd:2a:a7:42:d7:77:88:87:a3:
31:c6:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:51 2025 by rpki-client