Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: mEeh3T02Cp/L011cgp7km0+cN59ydTCWHaxVWoepjWc=
Subject key identifier: E6:FF:0A:2D:F1:24:4C:FD:B1:D5:08:DF:37:EE:B6:E1:A4:26:D1:BE
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 01976C98E52DA5EDD40F82A92B7A9A1D1338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 14F5
Signing time: Sat 14 Jun 2025 04:00:48 +0000
Manifest this update: Sat 14 Jun 2025 04:00:48 +0000
Manifest next update: Sun 15 Jun 2025 04:00:48 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: fbS11AYvB1dcod6cWxMdKj469CiLGvebRsAwOvFx2wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e5:2d:a5:ed:d4:0f:82:a9:2b:7a:9a:1d:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jun 14 04:00:48 2025 GMT
Not After : Jun 15 04:00:48 2025 GMT
Subject: CN=e6ff0a2df1244cfdb1d508df37eeb6e1a426d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:00:50:bd:ff:9c:bf:2c:d6:5f:0f:9f:b2:
7d:74:27:51:3b:35:20:57:4a:01:b9:e6:e2:3c:f2:
41:ad:6b:74:ca:68:90:1d:ce:d2:9a:ab:bb:ff:5e:
6e:a7:0b:19:e2:56:70:57:8d:4d:6f:25:aa:29:c4:
ca:19:cf:6c:74:04:02:07:98:ce:17:00:0e:ed:1c:
42:21:0b:07:b5:44:24:72:65:18:5f:bd:43:c6:b4:
b5:7b:34:68:e7:9e:af:7a:78:15:17:12:6c:05:04:
bb:15:aa:2c:b6:68:96:4a:cf:c2:6d:52:e7:e1:7b:
02:92:ed:a4:bf:58:46:d9:2a:97:05:1d:7f:e0:1e:
f7:5b:1d:35:5b:9f:94:f6:f1:16:f6:0f:03:19:4c:
25:db:19:65:32:dc:4b:d6:87:48:f9:87:b3:48:87:
38:42:a6:63:07:9e:2a:79:27:c8:bb:7f:ba:7a:37:
5e:df:e3:43:d9:70:35:24:11:f5:44:9f:ef:7f:1e:
72:72:f9:be:65:32:f6:69:36:0d:94:62:e2:82:84:
21:b4:3d:95:63:90:a3:25:ff:69:c0:1e:09:9b:f7:
7b:01:c0:87:a9:5e:09:7b:e3:93:1f:93:4d:ae:93:
ea:eb:2c:8d:43:01:bc:12:33:d9:a6:34:2a:bb:c7:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:0A:2D:F1:24:4C:FD:B1:D5:08:DF:37:EE:B6:E1:A4:26:D1:BE
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:0e:b1:7a:be:59:b8:c4:57:91:ac:40:e0:09:d2:06:f1:71:
b3:66:c6:8d:df:45:33:c9:d0:8e:c7:dc:a5:09:03:48:54:65:
4e:45:b6:3e:da:ab:e6:33:56:df:87:4a:94:3a:9c:26:20:1e:
f7:2b:2b:df:de:b1:dc:f3:ef:56:43:98:79:b8:b0:a5:1e:62:
1e:86:09:db:34:f5:dc:84:d0:c6:65:47:07:0f:f0:9d:06:a2:
93:71:1a:cf:7b:e8:9e:4c:8c:13:ac:5a:68:aa:19:ea:d7:97:
53:80:3f:37:d9:cc:45:a5:be:35:da:4b:ec:bb:4c:dd:31:8d:
7c:ac:38:2e:d2:c3:ce:27:35:5d:7a:7d:5d:d3:eb:7a:16:f1:
9b:c1:78:94:4b:e9:d0:27:d2:03:f1:38:1b:bd:2c:c0:93:1a:
e5:65:16:d2:65:1e:49:62:d4:58:b7:f4:8d:27:a6:e2:d1:b9:
14:8f:b1:01:dc:3a:31:d2:7f:b6:86:63:d8:07:ac:35:f3:a1:
de:40:91:79:8b:13:df:51:df:99:2f:5d:17:d5:53:5f:91:a9:
7b:7a:fa:ba:da:29:72:37:51:c4:de:6a:85:4c:32:3f:b8:a2:
e4:80:9f:0c:85:da:c3:21:a2:5d:36:fa:46:9b:9e:47:fd:fb:
63:f4:07:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:56 2025 by rpki-client