Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: TKsfA7r3+YN9RpDIhqzZt4jhvfCSy3087crTJ/sv6r8=
Subject key identifier: 7E:43:09:CA:81:D8:03:08:F5:A1:7D:24:FB:2D:D1:14:87:FF:4A:82
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 01976D06A001CB2C877E27935E83009A231F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 02BE
Signing time: Sat 14 Jun 2025 06:00:40 +0000
Manifest this update: Sat 14 Jun 2025 06:00:40 +0000
Manifest next update: Sun 15 Jun 2025 06:00:40 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: JJaAvp4DtbS6MR4rdGw6EzO4uC18pP3SXsK5rwhuRNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a0:01:cb:2c:87:7e:27:93:5e:83:00:9a:23:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Jun 14 06:00:40 2025 GMT
Not After : Jun 15 06:00:40 2025 GMT
Subject: CN=7e4309ca81d80308f5a17d24fb2dd11487ff4a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:f0:9f:14:9c:46:16:73:46:bf:ad:be:32:
2b:91:86:c8:d0:b0:c8:ed:7b:4d:75:53:bf:81:9d:
7e:09:f3:5b:b6:64:27:f4:f1:56:10:59:e0:a3:d2:
0f:c8:34:0b:74:84:48:14:c0:2c:c8:0c:4f:17:e0:
80:1a:91:2d:17:78:cd:6c:71:3e:ca:d7:db:bf:e7:
f9:76:21:03:6f:1a:6c:0d:cd:3c:09:b6:b3:68:75:
27:87:02:33:f9:5c:4c:30:2c:b4:9e:d3:02:0c:a9:
3f:ce:01:e1:d4:a3:85:9d:0d:73:2f:a2:98:90:1f:
ff:81:ae:3a:c2:42:d6:87:00:9f:c1:e8:aa:b5:80:
4d:e4:97:6c:bf:f9:24:73:ab:16:0a:1b:d8:70:55:
fc:99:ec:69:89:d4:d9:a0:c7:ce:0a:8e:79:f0:32:
ed:36:2d:e2:2c:bf:ac:55:a9:d6:b7:e2:9b:b9:03:
5d:30:54:96:45:45:a2:81:5c:f7:c9:18:13:35:37:
96:b6:23:32:e4:72:24:33:11:6e:38:f4:75:d4:69:
22:3d:a7:37:36:c1:0e:e2:37:df:6b:cd:a2:37:49:
c9:92:d1:1d:63:6a:1d:4d:54:ec:82:a2:38:2a:b2:
62:b6:90:d8:ed:5c:0a:43:ee:7c:c5:e8:6f:e3:f2:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:09:CA:81:D8:03:08:F5:A1:7D:24:FB:2D:D1:14:87:FF:4A:82
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dd:02:e2:68:ef:27:84:02:8c:ad:9d:71:53:d8:fb:6a:72:
97:0a:ca:24:c1:3c:5e:b7:d9:be:2e:31:b8:37:0b:e7:a5:82:
a7:dc:a2:fc:f3:d6:63:ab:a9:03:fc:c4:20:2b:a4:4d:1f:2d:
23:00:51:1d:e2:3b:62:77:6c:6b:68:54:a4:de:d8:f5:27:6a:
50:92:f9:0e:fc:64:75:3a:8a:ce:35:ce:64:6e:f6:4b:5f:5a:
98:5f:98:23:76:09:5b:c5:9f:4a:80:c4:57:21:43:c4:92:d0:
a2:59:36:ab:4a:05:33:88:e6:4f:23:13:5e:02:58:58:7e:a1:
e9:dc:45:3d:00:df:3d:63:e6:57:a7:57:67:8f:98:49:e7:4d:
94:28:b6:a6:b0:a2:14:d0:bc:6d:1b:19:1b:2e:91:22:03:75:
88:b8:2a:61:49:82:02:32:af:c6:db:87:b3:e2:ba:d1:15:e2:
74:94:ba:db:20:52:c1:09:8a:1a:72:d1:94:ee:d4:69:cd:22:
69:42:cf:94:7c:9b:e3:8b:91:26:18:81:3b:fc:76:54:13:bb:
24:77:eb:26:fe:62:1f:14:cd:44:09:df:10:47:d3:dd:3a:76:
1d:d0:71:39:1e:04:f3:31:d8:09:5f:d2:6c:f1:62:6c:7f:e9:
e5:eb:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:46:11 2025 by rpki-client