Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: 8Jn1GTgY+3iwxzOWpR4poXKP9e/qWk3HQHq9cQIL/t0=
Subject key identifier: 34:F2:23:AE:60:67:4B:61:74:0E:DD:EB:38:6B:6A:28:C6:95:74:9F
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019769CEBC13ED5559C5A1DA2CC6D17959F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 15:00:45 +0000
Manifest this update: Fri 13 Jun 2025 15:00:45 +0000
Manifest next update: Sat 14 Jun 2025 15:00:45 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: Ngd5xXzX3WfG2NjV4AzAxT95uAdAl61FSqDfjmkdxM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:bc:13:ed:55:59:c5:a1:da:2c:c6:d1:79:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Jun 13 15:00:45 2025 GMT
Not After : Jun 14 15:00:45 2025 GMT
Subject: CN=34f223ae60674b61740eddeb386b6a28c695749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:3a:92:ca:84:ce:ba:5c:26:db:6c:4d:10:
c5:b2:98:cc:5c:e5:9d:10:fc:bd:98:78:ae:dc:68:
b4:95:b3:01:9e:fc:a8:2f:f6:e0:bf:8e:72:8f:cb:
2c:03:40:23:98:17:25:33:75:80:91:54:c5:38:15:
4c:cb:11:8a:a1:15:23:71:7d:a3:6b:9c:5a:1a:5e:
1d:2e:d1:db:c7:82:c8:95:cc:a6:9f:34:0a:db:81:
eb:bd:ec:c7:66:48:9c:06:6f:d1:7f:44:ea:e4:09:
bc:55:8a:1e:f2:3a:38:3a:43:d8:eb:2d:30:71:a2:
92:3c:81:4b:85:6f:42:72:92:8e:11:65:11:0d:43:
01:39:54:10:4d:13:55:9a:fc:7f:b7:ca:db:d5:3a:
4e:7e:f7:95:41:0d:bb:fe:58:70:9b:b8:91:7c:1c:
b6:8f:89:c3:f2:eb:4d:9c:a8:24:4b:6d:72:8c:90:
41:26:77:c1:95:2d:fc:ce:10:bd:54:8a:31:d7:ff:
5e:ce:80:91:bf:bc:f0:ed:6b:15:6b:e4:6c:67:6a:
b2:3f:c4:78:46:67:94:9c:0e:0b:bb:c3:26:a2:23:
81:84:96:c8:60:37:ee:1a:06:ac:73:ff:ae:57:d8:
12:61:b4:b6:4a:a2:a1:2a:78:f3:ce:c8:15:35:59:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:23:AE:60:67:4B:61:74:0E:DD:EB:38:6B:6A:28:C6:95:74:9F
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:63:21:47:99:cb:48:d4:5b:cc:e1:f2:c4:e3:f2:a1:1d:55:
44:1b:be:31:81:ff:67:cd:b8:af:d2:48:df:55:9e:97:f8:f1:
85:05:8d:c5:73:4b:1a:a7:17:f1:54:4c:50:94:3b:19:bb:c0:
01:43:f0:c1:f3:12:0e:33:c3:f2:bc:cd:96:e6:85:87:a1:e4:
59:c3:ce:66:04:57:81:3a:89:19:cb:96:55:89:6b:94:df:87:
f1:72:ef:b4:bb:da:77:30:42:db:c5:ec:c5:cb:33:1f:bd:c6:
18:9d:b4:24:0d:2f:52:d1:b3:b3:0b:0b:3c:bf:84:15:78:1a:
d7:2d:61:34:c6:04:4b:85:e9:e2:f6:cf:3f:f1:0f:7a:1b:f3:
68:cf:0d:02:67:b2:8c:94:23:53:60:ab:ea:6f:9c:9c:1a:52:
c2:5a:4e:6f:96:26:fd:89:d5:56:cc:e9:83:6c:54:3d:05:87:
60:2e:52:92:cb:f6:08:66:0a:02:7a:f2:54:26:27:51:0f:fe:
c2:d7:7a:8b:28:80:d9:06:0f:e8:94:e8:1b:e1:56:aa:df:e9:
00:0e:76:da:1e:a6:3f:a0:15:71:39:5c:ab:07:9e:99:bb:98:
5c:86:cd:47:54:82:d5:25:24:fa:dd:62:2a:e7:4f:20:3f:58:
e4:6f:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:56 2025 by rpki-client