Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: jEEZy8t0ztSexDwANlubcunirw1LIKajRVULFw65ISU=
Subject key identifier: 65:46:98:CE:DB:4E:BC:28:AE:0D:8D:1A:72:53:4E:42:3A:25:0B:BE
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 01976A05F109A563A2B07C7CEBEBD644EC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 02CB
Signing time: Fri 13 Jun 2025 16:01:03 +0000
Manifest this update: Fri 13 Jun 2025 16:01:03 +0000
Manifest next update: Sat 14 Jun 2025 16:01:03 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: 2pXFAY87aKVsqa8Jbbd7/uHydf7eGh6SXCf97q5s/6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:f1:09:a5:63:a2:b0:7c:7c:eb:eb:d6:44:ec:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Jun 13 16:01:03 2025 GMT
Not After : Jun 14 16:01:03 2025 GMT
Subject: CN=654698cedb4ebc28ae0d8d1a72534e423a250bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:57:79:82:ab:2b:03:41:f2:d9:f4:b3:67:
de:8a:b6:2b:7d:bf:88:6a:0c:57:7a:cf:3d:18:7f:
09:e0:95:0f:72:f6:d1:4c:0d:57:c5:af:a8:00:3f:
cb:97:74:d2:33:19:05:48:3a:e8:51:b8:c8:94:fb:
4b:0c:19:55:7a:76:e6:19:66:ce:b2:f7:e0:23:5e:
7b:4c:2b:97:cf:a1:10:19:bd:fe:4c:0d:ca:d2:c2:
ff:70:46:98:31:fb:72:4d:dc:9a:86:4e:9e:a7:31:
1c:08:3a:d0:c0:0f:a2:30:af:5b:0e:27:54:47:35:
1e:f3:80:63:de:b6:bb:99:87:b5:2e:a9:13:f7:38:
ad:e2:95:17:5c:33:37:f0:8c:78:8d:04:ec:ba:70:
80:55:b8:e4:dd:ba:4a:9d:ca:e1:fa:94:6f:bc:ff:
28:24:e1:20:fe:ab:b8:04:95:07:a6:82:c7:d1:f6:
f4:da:8c:17:e3:19:dd:f5:3f:9b:37:19:fe:d7:44:
1f:0c:98:a3:c1:50:e9:1b:3d:4c:80:7b:03:01:08:
bd:2b:61:1b:b1:1c:25:68:ae:25:cd:6f:d6:63:48:
1e:67:52:23:06:33:34:84:ca:12:a6:54:05:53:f0:
0f:d4:4c:1c:6e:a9:10:2c:c9:21:cf:12:59:54:54:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:46:98:CE:DB:4E:BC:28:AE:0D:8D:1A:72:53:4E:42:3A:25:0B:BE
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:9a:a8:44:e2:6e:f5:dc:b2:37:6c:52:1f:9b:62:cb:82:
d5:e7:48:90:51:48:ea:41:fe:b0:15:fc:6b:83:f3:d0:80:ec:
13:34:20:6e:1c:6e:14:c0:03:cf:5d:c0:12:28:91:8d:47:34:
1c:1e:8f:d0:c8:1f:48:66:78:2c:cf:b5:c2:b7:1a:0e:f5:93:
29:f2:f8:c3:47:59:e3:a9:5c:e8:b3:46:80:0d:2d:f7:7d:3b:
e0:fc:6f:2c:9f:3d:c8:bd:72:5b:07:01:29:6d:f4:73:62:3f:
0d:21:ac:ee:52:e9:8e:47:30:86:88:ae:a0:98:88:b3:f8:f0:
b4:77:49:75:d1:94:9c:5e:b1:0b:21:5e:9d:6d:de:9b:23:64:
42:70:c5:cd:ef:5d:06:a0:88:8f:8d:16:a6:b0:63:0e:0f:43:
48:b9:5f:5e:3f:08:f7:e7:55:a1:f3:0a:1f:db:52:0c:17:09:
d1:af:5d:d7:30:69:75:ee:4c:74:07:76:85:ff:16:c8:34:35:
36:12:ea:d3:e5:9e:75:83:2f:f0:35:3e:6f:5a:96:53:96:7f:
2e:2f:b1:a0:b7:19:25:37:77:4c:67:f9:c2:7c:3b:33:53:fb:
fc:8b:0d:c4:04:22:7e:ca:40:27:4d:c6:d6:69:0d:99:2d:f8:
68:95:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:55 2025 by rpki-client