Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: CfhZKLsaigH1s4jYiZbB+VdFPEcphkikM3Y6wu6tjKE=
Subject key identifier: A7:65:18:64:35:4E:C4:B6:A1:BA:D0:3A:0D:C6:1E:13:15:F4:C1:48
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 0197782F6AE15D5CD58DD5C90125962BB8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 0717
Signing time: Mon 16 Jun 2025 10:01:02 +0000
Manifest this update: Mon 16 Jun 2025 10:01:02 +0000
Manifest next update: Tue 17 Jun 2025 10:01:02 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: xIKL3tgpvCOj8mz7fuR/SCqIvmz+EiSyUqxLOObP14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:6a:e1:5d:5c:d5:8d:d5:c9:01:25:96:2b:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Jun 16 10:01:02 2025 GMT
Not After : Jun 17 10:01:02 2025 GMT
Subject: CN=a7651864354ec4b6a1bad03a0dc61e1315f4c148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:74:75:c5:02:ed:2b:74:fe:04:e4:15:a9:
13:f8:af:7c:84:b4:ae:51:f4:3e:32:72:44:75:4d:
0f:78:3b:67:40:74:e1:3e:2a:df:be:dc:83:6c:df:
ce:5a:6d:1d:1c:ad:fc:a2:5b:1f:4f:c8:03:0f:e7:
3a:0f:b6:e7:b1:a3:6e:0c:27:47:6f:f1:13:cc:2b:
81:35:6b:20:a7:69:75:4e:b5:7e:e7:84:5b:48:a8:
aa:71:6f:9b:3f:60:14:c4:61:89:ae:09:b5:94:7b:
9b:b4:8d:54:7f:e8:86:27:c6:85:85:94:e9:c6:fa:
d6:d6:52:7e:be:e4:5a:44:d2:02:0c:35:83:ff:5c:
65:6a:c9:7e:74:f3:42:82:a7:89:a8:7f:91:d8:9c:
2a:52:07:8f:ba:64:36:d6:80:21:37:36:02:43:d6:
1f:1c:09:08:8c:00:fd:79:65:e5:84:a8:78:41:fe:
d1:44:2c:8b:b2:98:87:d1:bb:13:49:a7:66:26:73:
e0:38:87:e1:bf:2a:34:4f:50:c8:ca:8b:d5:f0:9f:
b9:60:82:82:cc:b2:0f:30:c3:76:01:3f:ca:b8:4e:
e4:40:28:aa:cc:7c:aa:00:c9:cd:60:54:03:1e:82:
46:ec:2c:6c:5e:6b:c5:7d:c0:aa:16:88:46:a9:f7:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:18:64:35:4E:C4:B6:A1:BA:D0:3A:0D:C6:1E:13:15:F4:C1:48
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:f9:95:cd:26:2e:4a:d1:2e:ec:d6:22:f9:b1:84:3d:c1:
af:f0:51:88:81:e1:2e:4c:6f:75:76:19:0b:d5:d7:66:94:27:
03:5e:f7:45:d9:28:46:47:5c:bd:4c:40:72:84:8f:b7:d5:75:
aa:2d:15:8f:a7:4f:fa:4d:ee:5d:7e:1c:68:19:a9:a0:76:2c:
a1:15:be:5a:b5:26:81:9a:06:5e:5c:d2:90:af:67:3d:70:7f:
cf:d0:83:aa:ac:27:a5:9a:29:06:d2:ef:0a:b5:99:a4:c3:da:
cd:71:08:a1:a1:52:72:3a:4c:b8:65:be:e6:c3:c9:a0:04:19:
ac:9a:b8:bc:38:62:c2:98:12:85:8f:9d:b7:91:93:cc:9d:eb:
20:e5:3e:5c:7e:c9:05:be:16:2c:06:4f:d3:9c:80:78:6a:ef:
f3:1d:5f:ae:22:2a:37:a1:91:65:b8:f8:cb:df:52:e9:09:86:
df:4d:27:dc:d6:f5:98:3b:48:b4:f1:42:30:6e:56:16:51:3a:
31:3b:16:cf:fc:86:5d:55:78:ce:1f:1f:dd:37:2c:8e:92:70:
44:2c:ea:c4:14:94:b8:c4:e6:d9:78:a7:85:54:1d:45:4e:f7:
a6:cf:70:69:6e:17:ab:09:0c:76:12:7f:ce:8d:f3:50:e1:d4:
e8:b2:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:28 2025 by rpki-client