Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: yhtjENnkZDfRdb5L+pCopxgVL1f+hc6c2QCF34r45+g=
Subject key identifier: DF:D8:D7:3A:29:7F:09:31:17:3E:95:C2:64:7F:35:78:6C:DB:D8:21
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 01976C2A9A649B3176032230F81695D6F203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 07F4
Signing time: Sat 14 Jun 2025 02:00:20 +0000
Manifest this update: Sat 14 Jun 2025 02:00:20 +0000
Manifest next update: Sun 15 Jun 2025 02:00:20 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: D06uAsfQVjW4cQ+WLRkFtqKVbLjXcyCYGlrutLZeNQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:9a:64:9b:31:76:03:22:30:f8:16:95:d6:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Jun 14 02:00:20 2025 GMT
Not After : Jun 15 02:00:20 2025 GMT
Subject: CN=dfd8d73a297f0931173e95c2647f35786cdbd821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:57:59:4a:de:78:c7:42:07:a3:55:39:d6:
38:5b:7a:56:fb:8a:c7:64:76:63:2c:f6:bc:97:c5:
a0:6a:1f:58:15:d2:83:a2:3d:bd:ec:20:ce:a2:c5:
f7:22:e8:bc:1c:bc:3e:3d:9d:43:4a:8d:96:7a:e5:
5b:59:75:9d:ec:78:0d:a0:a9:6f:3c:98:03:19:83:
a2:68:8a:48:da:a9:28:4f:52:f8:a1:b0:66:f4:ff:
90:3c:9d:77:76:fb:49:75:0d:e9:fc:91:25:a5:bd:
3d:94:7b:ba:94:25:f9:f6:29:88:f4:a2:8a:89:f9:
1c:05:8b:40:2a:9b:4c:f1:49:fc:61:3c:33:8e:b8:
06:1f:bb:82:af:10:01:d6:50:3a:4a:f2:54:40:aa:
3f:7e:36:3b:9b:b1:b4:c0:13:3e:70:28:80:98:5c:
a1:43:35:15:67:ab:1f:a7:15:7b:cc:ab:3f:f4:7d:
f8:b0:e2:15:d6:eb:94:23:79:f1:f3:be:41:59:63:
2a:76:d3:a4:95:69:c0:94:41:df:8e:3c:a5:37:66:
d1:cd:f3:f1:35:2b:45:37:12:f7:22:5f:28:42:67:
80:2c:c1:86:29:89:13:a1:b0:11:08:a5:13:12:67:
e1:e0:d7:a1:27:38:5b:95:e8:90:e9:13:6d:bb:7b:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D8:D7:3A:29:7F:09:31:17:3E:95:C2:64:7F:35:78:6C:DB:D8:21
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:36:2e:e4:87:b5:35:fb:f3:a9:79:44:bb:dc:40:32:13:
c6:63:03:ce:7d:c0:b3:f2:3b:e2:ed:c3:57:f7:79:c4:55:b6:
05:ef:45:02:69:40:cd:0a:aa:a6:70:68:0c:79:c1:0c:bc:ce:
24:13:4c:97:e1:c0:d9:90:1a:15:45:18:f2:e6:80:cc:c7:d5:
57:89:25:19:bb:e3:d5:74:d6:ed:92:af:73:02:8e:48:01:b1:
29:cf:b4:d2:fb:b1:33:c1:8e:1f:cb:4c:bc:a9:a5:b8:15:5e:
e3:ad:a8:8a:24:b2:a2:2a:16:74:dd:88:73:57:78:31:36:a3:
17:77:ce:08:97:1b:47:3b:30:aa:e3:f6:c9:6f:7b:c2:10:d0:
4e:69:eb:cf:b5:58:6f:f4:15:15:ef:c5:11:c4:0f:de:75:29:
75:74:86:9f:de:4d:2d:1e:71:6e:27:b4:a3:79:fc:44:f4:0f:
15:cf:78:6f:b8:64:ea:a0:91:41:a6:3a:98:7f:d4:a5:0c:43:
e5:de:6e:b9:f1:16:3f:b7:48:b8:39:8d:5d:d8:26:25:11:f7:
69:64:3c:79:d0:11:43:9a:e5:2e:b6:e0:bc:eb:ff:bc:db:37:
9f:91:0e:9a:72:fc:a4:bb:38:79:00:1f:ba:08:2c:bb:af:15:
a4:5b:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:51 2025 by rpki-client