
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier: qi4eNkWOyjPmjEnJFnNZeHTVRNWJuVHh7CCSEn4XxH4=
Subject key identifier: AF:C2:66:6E:8B:FA:92:87:EE:55:56:76:6A:41:EE:77:AD:7B:62:E3
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial: 019892C838425B0E0286CBDB281BC00244B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number: B3
Signing time: Sun 10 Aug 2025 07:00:51 +0000
Manifest this update: Sun 10 Aug 2025 07:00:51 +0000
Manifest next update: Mon 11 Aug 2025 07:00:51 +0000
Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: n/BwbIyD3KZuT5rmREtGwzhXLa9MDpWheKbSrDKLwi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:38:42:5b:0e:02:86:cb:db:28:1b:c0:02:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Validity
Not Before: Aug 10 07:00:51 2025 GMT
Not After : Aug 11 07:00:51 2025 GMT
Subject: CN=afc2666e8bfa9287ee5556766a41ee77ad7b62e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:2b:60:79:02:1c:a3:db:25:7d:df:0f:34:
a9:90:2b:e3:91:7a:27:99:83:bb:84:db:07:2c:c7:
19:01:dd:6f:07:a2:cb:3e:a6:72:ab:86:5e:fd:22:
e8:bd:a5:0a:86:44:8f:c6:9e:ce:6c:ac:3d:d5:ce:
f0:cb:64:b9:f4:bd:01:70:0a:e9:80:64:95:a9:ef:
da:0c:93:86:9e:2b:bc:c7:2f:e0:ad:66:5a:64:fe:
c0:89:de:3d:87:cc:e0:a0:93:8c:49:80:2c:d3:a3:
8d:a3:d6:f2:be:fb:1b:86:73:4f:86:cc:62:bc:39:
4b:dd:6c:90:c8:51:e3:7d:aa:cb:3e:d3:6d:2f:64:
6a:5f:ec:b6:94:80:63:fb:9f:42:75:54:70:0b:fd:
89:6f:8d:e7:1b:15:99:95:5f:01:3d:52:8e:49:80:
a9:2d:10:36:e1:1e:e1:81:2a:1a:3b:d0:fe:c5:d9:
61:4b:ad:18:39:a0:77:c8:b9:3d:99:21:98:63:ba:
fa:7d:61:17:49:72:72:42:be:fc:f9:65:28:23:31:
23:91:df:03:bf:54:1b:7d:4e:e6:a4:c4:b8:1e:11:
09:05:24:ca:83:1a:cb:b0:60:3b:2f:f0:97:7c:8f:
81:fe:99:0a:c4:28:19:da:94:a3:f2:d0:bf:6b:ee:
dc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:66:6E:8B:FA:92:87:EE:55:56:76:6A:41:EE:77:AD:7B:62:E3
X509v3 Authority Key Identifier:
keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:07:00:c6:06:ee:40:ed:00:e3:4a:31:a2:7a:82:5d:c3:
0b:a7:bd:2e:4d:38:f1:c7:53:07:ac:ae:22:ca:9f:f6:86:52:
12:89:af:fe:63:8e:52:49:64:cb:38:3d:b4:1a:fd:3b:e0:5f:
54:82:e5:af:e9:e7:ea:16:aa:01:b3:c2:d6:88:b3:8f:87:77:
f4:d8:81:1a:8b:28:a8:df:6e:ae:c0:50:f4:29:86:f6:d2:24:
41:f3:6d:d4:fa:39:67:57:d4:69:6d:0c:6b:02:3d:d9:31:c6:
3b:5f:10:be:fe:af:22:8f:ff:dd:8d:5f:fc:1b:80:87:63:46:
4f:f2:ba:d6:c1:f3:b7:f7:7d:3e:60:67:52:50:53:89:f0:c8:
34:7a:35:c8:ef:b8:40:99:34:74:09:bc:48:2c:4b:a6:f4:f6:
33:a2:c8:b3:a5:df:24:b7:f5:d4:af:0e:be:6d:f0:4a:75:50:
ed:69:48:3d:15:13:a4:30:b8:77:d2:0f:2c:cd:6c:73:10:bb:
4b:cd:d2:8c:43:ba:de:83:26:85:53:fe:66:e7:51:30:32:67:
8f:8f:78:1d:a5:62:f8:2a:e9:b9:0a:cb:40:e9:e3:cb:26:42:
e8:f9:0e:aa:4f:43:00:4c:b8:f9:cd:d2:c4:70:aa:07:57:bf:
9c:69:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:27 2025 by rpki-client