Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: D53J1uwsgMY/A3ap87d/LKAOiXfSZLyB+cUVuUaE3dg=
Subject key identifier: 54:D4:06:63:A2:7C:B1:51:A5:E6:22:44:59:8B:5F:86:9D:17:D6:B1
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 0198744FEFCE05FA4970DD0596A8BB4ABF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0873
Signing time: Mon 04 Aug 2025 09:00:52 +0000
Manifest this update: Mon 04 Aug 2025 09:00:52 +0000
Manifest next update: Tue 05 Aug 2025 09:00:52 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: qj7H32DVQBztt/peiuyrh3JHyYTzokACOXYC1lBEwwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ef:ce:05:fa:49:70:dd:05:96:a8:bb:4a:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Aug 4 09:00:52 2025 GMT
Not After : Aug 5 09:00:52 2025 GMT
Subject: CN=54d40663a27cb151a5e62244598b5f869d17d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:93:83:82:6f:7b:1c:53:21:f4:a7:b1:b9:
d6:8e:6b:2d:1c:58:c4:e0:c8:4d:25:7c:a1:f1:3f:
6e:fb:a2:2f:21:df:4d:94:0e:09:1e:3a:0f:80:c9:
d2:59:62:53:90:df:f1:7b:3a:2a:b6:5b:6c:70:eb:
39:e5:dd:b6:f4:fb:35:1b:a5:9d:8b:d0:42:ad:c0:
6d:c3:b5:72:c3:b5:4d:ca:a0:f9:f2:9d:e6:9b:1c:
4f:ac:bd:f3:56:97:2d:20:54:f4:3e:e8:6f:c5:5d:
4d:7f:ce:50:56:71:63:b3:35:10:7f:d2:c8:18:62:
ff:84:e4:a9:9b:10:7c:3b:00:cd:96:27:10:5b:87:
ae:42:16:08:de:3c:d7:f5:5c:8b:1f:09:fd:e1:5e:
ce:5e:ff:70:9d:19:5f:06:a0:28:63:4c:17:ea:a2:
15:1d:50:e1:8d:31:65:54:c9:5b:dc:b9:97:75:76:
be:c2:17:78:c4:82:ca:50:8b:c2:e1:c5:18:04:f3:
9d:37:24:81:99:ac:2a:6a:b5:e8:8c:32:f4:50:da:
ca:71:03:0c:ba:c2:7f:96:f1:7e:07:c6:c2:df:9b:
4d:8f:60:6a:3a:fe:f5:3b:d8:8a:ef:32:0c:48:8d:
20:ac:46:df:e1:09:9c:ef:d3:a0:86:7b:8d:71:3b:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D4:06:63:A2:7C:B1:51:A5:E6:22:44:59:8B:5F:86:9D:17:D6:B1
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:09:06:a8:6a:c6:e6:3b:45:8e:19:cf:61:ea:f7:b7:24:
42:d4:dd:85:a1:27:1d:80:a4:68:09:17:5f:40:63:be:d7:5d:
61:05:d2:ca:fe:88:ba:84:a0:48:e4:d8:a8:3c:b8:b2:b2:b2:
9c:01:d4:a1:2c:d1:0e:4a:69:86:6e:2e:e4:bf:e4:34:7b:ce:
9b:6c:27:21:3e:6f:36:0b:c6:a8:d9:85:c4:c2:7e:ec:52:c3:
03:3c:a7:a2:7b:d2:cd:ac:8f:2d:be:78:e6:d3:aa:01:0e:42:
5a:93:33:b7:7a:aa:0e:22:25:eb:3d:1d:e2:c9:7a:e2:52:4e:
6c:24:4c:1c:81:f0:27:b5:40:0a:43:0d:50:e5:f5:eb:5c:bd:
80:55:91:4d:ef:a4:25:ce:2b:8d:5e:1b:fa:b3:b3:2f:e1:6c:
10:7e:b1:a3:ec:35:a5:f7:62:18:f8:87:2c:32:c8:73:9e:ed:
1c:39:26:50:55:8e:5d:58:94:c4:2b:dc:13:92:8e:98:e9:6a:
fc:75:8c:a3:40:4d:99:b5:95:6f:84:19:82:38:05:5c:22:29:
5b:9a:c8:0a:22:5f:17:df:8c:b6:0c:60:9b:db:af:ac:ca:30:
7d:d4:09:c3:9a:5c:36:0a:a2:a8:e1:c8:14:9f:a0:49:78:84:
51:e6:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:53 2025 by rpki-client