Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: T0tVtkzI95z+o56BDDEzWcIpKcLLsUD/lA2pEuRmyA0=
Subject key identifier: 4D:62:92:74:ED:5A:F0:C9:F2:C5:4F:89:5F:28:B9:A2:03:FC:56:CB
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 0197684E458064CC47AC13CED54E8DFFB6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 040B
Signing time: Fri 13 Jun 2025 08:00:49 +0000
Manifest this update: Fri 13 Jun 2025 08:00:49 +0000
Manifest next update: Sat 14 Jun 2025 08:00:49 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: HXdmaIOh8otYZeLOrR+Ap5b38GeQz/8+2SGS/nTM3f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:45:80:64:cc:47:ac:13:ce:d5:4e:8d:ff:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Jun 13 08:00:49 2025 GMT
Not After : Jun 14 08:00:49 2025 GMT
Subject: CN=4d629274ed5af0c9f2c54f895f28b9a203fc56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:36:8a:21:fa:77:85:92:1a:35:19:38:87:
c5:43:48:46:24:64:06:3c:34:8c:66:1d:a0:b4:2d:
23:e9:8e:36:03:13:07:cd:c2:75:98:84:9c:4e:c1:
3a:65:f9:84:93:3f:e5:aa:8c:b0:6f:27:43:15:74:
18:9f:8c:8b:11:3a:92:4f:f7:e9:dd:7e:78:2c:8c:
a9:37:af:23:7c:c6:32:cb:03:53:6c:e1:e0:69:7c:
dc:e2:87:51:e8:58:19:73:dd:cc:7e:40:54:7a:c1:
b1:22:8e:3e:67:2e:42:5b:be:11:02:9a:84:f2:31:
36:31:54:1c:62:48:b3:63:e7:e3:18:c4:69:73:37:
74:9f:d1:9c:52:53:a5:da:8b:f0:60:a9:77:c6:59:
99:58:77:b0:ff:6d:26:1a:e0:38:75:03:db:4b:7d:
b1:1c:4b:52:e1:18:99:e6:8e:75:81:b0:fe:f9:2d:
f3:2a:21:81:d7:8b:91:1a:0b:77:e8:c1:f7:b2:54:
16:45:39:5d:5d:cc:5c:b7:99:68:ad:12:5f:68:8b:
b0:27:e7:30:c5:d2:ae:30:be:a3:d2:d7:f9:ff:a4:
07:a3:9b:8c:06:0a:3e:fe:26:98:a1:1f:ee:5a:02:
4e:68:6a:7b:18:2a:3c:85:96:14:29:8b:f4:4c:a2:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:62:92:74:ED:5A:F0:C9:F2:C5:4F:89:5F:28:B9:A2:03:FC:56:CB
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:84:26:83:a0:49:af:77:9e:c6:c6:09:a6:89:34:cc:16:43:
75:ca:bc:eb:8d:89:e6:18:24:30:de:2d:5a:ab:22:9e:01:5c:
4d:6c:23:85:3c:b7:dd:39:50:af:dd:ac:cf:56:fd:3c:e8:02:
5f:c0:a0:4d:f1:e4:6a:30:64:06:91:88:71:2a:1a:44:04:03:
c5:2a:ca:28:7f:63:75:d7:22:b5:60:de:65:35:b7:98:ef:b5:
b5:39:44:2e:39:19:ef:42:73:46:fc:6a:fc:5e:dd:31:f8:2e:
75:30:1d:b6:5e:93:76:62:ce:a7:50:dc:8f:f5:be:8b:e2:ec:
e2:6f:9b:f8:71:76:82:e4:b8:bf:3b:8a:83:9c:6a:5d:6d:7e:
6d:78:9b:26:bb:3e:6c:a2:7c:dd:e4:f7:51:f6:46:17:22:d8:
04:0b:f5:fa:0f:ef:c4:d6:f5:d6:d8:55:83:55:4d:d8:a4:98:
8d:78:0a:3e:19:7a:3e:08:d5:f0:0b:30:10:1f:e6:11:c4:57:
c7:2e:0d:ac:25:14:58:eb:cc:e6:b9:35:d2:07:7f:ef:e5:cc:
7c:5e:87:54:64:99:4d:4e:dc:07:37:2b:a9:29:7a:b0:65:09:
cd:3b:0a:24:1d:8c:6b:08:08:c5:1d:ea:ea:0e:9e:e9:9b:aa:
c0:f9:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:51 2025 by rpki-client