Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: rOthgdD5TfJYj1TCkXmtogQ6psOkFm9C7CXmqC13Gc4=
Subject key identifier: 36:FE:8F:97:FB:EF:3D:3D:E0:4E:74:94:A9:A1:10:CF:70:28:4A:A6
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019769CF20845A68855F5679D644C6C3AC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:01:11 +0000
Manifest this update: Fri 13 Jun 2025 15:01:11 +0000
Manifest next update: Sat 14 Jun 2025 15:01:11 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: 4oorEOQMwQxDWFM6vum1Dp64winw4HWmfWnCL+YUKp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:20:84:5a:68:85:5f:56:79:d6:44:c6:c3:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Jun 13 15:01:11 2025 GMT
Not After : Jun 14 15:01:11 2025 GMT
Subject: CN=36fe8f97fbef3d3de04e7494a9a110cf70284aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:01:bc:5e:c7:87:a6:42:57:aa:3e:6e:c6:
f5:e1:b2:74:12:b4:d4:2a:99:20:56:34:06:54:82:
0f:71:2c:ad:dc:1c:3f:2d:73:d6:c9:26:36:b7:69:
6e:0e:e3:01:f2:0c:c6:c5:a5:80:b6:5d:13:87:a2:
98:6e:b3:a9:f9:69:94:6a:9b:42:4b:bb:ea:35:32:
0b:fc:b8:9c:c7:93:0f:4c:e6:a8:c8:db:00:f1:37:
5b:95:20:56:30:96:17:e1:f3:d8:ae:22:cf:77:96:
f2:41:ec:33:1b:1c:f7:d6:c1:90:d0:a8:9f:0c:ef:
d9:5b:1b:72:9a:4e:00:f3:1a:ba:ee:e0:e9:30:83:
d3:70:6f:c5:f8:6c:43:e3:c4:8b:2b:dd:ce:4e:2b:
fb:16:96:56:9c:9b:5e:41:d0:02:a2:20:b3:d9:20:
ae:d8:f2:4c:e4:fc:cd:f7:b8:35:a3:f9:bc:f2:ba:
99:07:9f:c9:c5:e7:40:2b:89:eb:55:9b:e6:27:ae:
c3:e2:be:6a:9a:78:e8:cb:bd:1f:e8:50:1f:46:f5:
33:c6:68:c4:8d:ce:d6:56:2e:bb:45:41:ad:d2:38:
18:c1:45:66:2d:91:0b:df:91:26:84:e5:54:19:55:
25:c6:80:01:ad:27:f3:1c:03:2b:b8:b0:2b:cc:b4:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FE:8F:97:FB:EF:3D:3D:E0:4E:74:94:A9:A1:10:CF:70:28:4A:A6
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:6b:dd:f0:19:48:fe:d0:22:5a:e8:a5:75:2e:b5:26:15:
29:6e:fc:cc:05:d3:d5:bc:8e:e2:84:d7:39:b6:e5:92:1e:a4:
03:52:60:74:d4:34:4b:78:f3:08:a1:7e:c2:e2:9e:e6:a7:cd:
2a:bb:ec:50:94:4d:b3:f7:81:af:27:77:b5:00:c9:e1:80:96:
34:4c:32:95:c9:04:65:68:de:ed:f5:c2:74:b2:8c:3d:c6:eb:
b7:e8:89:46:0e:cb:23:69:f7:2f:7e:f7:31:72:2f:43:6d:01:
43:4b:19:bb:ec:9b:45:e1:3f:d1:20:31:73:78:51:4a:60:15:
2e:95:fa:c3:83:51:85:f3:07:90:bb:9a:97:c4:06:b7:8a:1d:
40:06:12:a9:4f:4a:a4:8d:0a:84:7c:b3:5b:42:0e:e3:31:97:
c2:f6:26:c0:73:42:3a:22:a0:d5:7a:56:af:1c:05:18:fb:a1:
0d:f5:37:11:b3:b9:ab:ec:41:cb:09:0b:28:2e:c8:68:62:1f:
ef:5c:4f:26:f4:a3:cc:d9:a0:2f:2f:ab:44:5a:7c:7f:c0:0a:
f7:9d:65:9f:49:ec:45:c2:77:5f:54:c1:87:bc:70:b3:1b:ad:
ba:21:0b:87:e2:34:8d:d6:e9:f1:2a:a9:02:0f:2e:db:12:dc:
1f:e6:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:26 2025 by rpki-client