Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: WHOPfiANuopK+E+JB9jzA3mZRS1mXtx7iiuK71QdH7w=
Subject key identifier: FC:12:7F:ED:D1:63:60:F8:A8:C4:36:7A:94:F6:C2:39:C1:E1:10:EA
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 01988166FD8EC4261FDECB054F6CC4FA10AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0B2F
Signing time: Wed 06 Aug 2025 22:01:06 +0000
Manifest this update: Wed 06 Aug 2025 22:01:06 +0000
Manifest next update: Thu 07 Aug 2025 22:01:06 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: Pba6NZDGLk+1MQJ9ml3c3UnV00CRBUhuXKcsuNyhvOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:fd:8e:c4:26:1f:de:cb:05:4f:6c:c4:fa:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Aug 6 22:01:06 2025 GMT
Not After : Aug 7 22:01:06 2025 GMT
Subject: CN=fc127fedd16360f8a8c4367a94f6c239c1e110ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:32:89:be:57:ea:b6:e8:e3:67:0c:86:32:
11:e9:95:f3:38:93:7f:eb:75:2c:a8:b8:91:c1:9f:
7c:33:85:b2:e3:8f:a2:ce:a3:04:68:98:ea:30:5f:
39:e4:b9:aa:4d:32:bf:67:b2:e9:04:de:68:f4:c1:
26:a6:d5:12:a0:62:ae:9b:f9:18:08:c3:e8:88:6d:
07:43:14:82:e5:25:fd:d4:dd:28:12:e1:25:99:1e:
7c:72:4d:76:25:70:11:02:d2:25:8b:b6:85:14:bd:
ac:62:64:b8:78:71:c4:f3:ab:38:e4:d6:98:d9:49:
76:4b:6c:40:af:5e:7e:0c:b7:cb:10:f2:75:27:9e:
19:ab:67:c4:20:98:23:e3:15:28:49:c5:d8:d3:d3:
f8:c8:45:90:20:50:61:de:91:83:16:c1:eb:a2:21:
3f:06:59:59:07:ca:c3:21:e2:cf:1a:3b:be:f0:4d:
0e:a5:49:bc:67:22:29:a3:bc:00:c1:e8:47:e6:99:
d0:d0:17:3f:3f:39:85:e6:0c:cc:5f:61:5d:a8:f4:
0e:b1:1f:53:8d:90:0c:42:ad:58:20:aa:db:5a:fd:
6b:6e:bd:43:d0:02:e0:83:94:00:be:8c:4d:dc:f7:
d5:62:b3:be:d6:23:8c:aa:08:aa:04:97:36:57:58:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:7F:ED:D1:63:60:F8:A8:C4:36:7A:94:F6:C2:39:C1:E1:10:EA
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:85:98:7d:f0:42:33:10:89:7c:23:ff:a4:38:92:3e:71:1a:
17:11:d8:5d:c5:60:14:ea:1e:e4:4f:d9:6a:61:62:95:8a:87:
0b:ae:98:cb:a4:86:d0:d1:1b:02:63:a7:94:a3:ec:fd:a2:86:
53:a1:f3:a2:75:e2:2c:4e:02:04:8f:37:cc:67:15:cd:a5:c8:
b5:cc:9f:07:ca:c6:5a:e8:9e:d0:34:1f:8b:e2:f6:78:b9:5c:
a1:b9:e0:49:84:5a:e7:c3:3f:20:30:53:37:f6:92:5f:b4:5e:
dd:7f:59:ef:22:5d:fc:1f:31:03:9c:fd:4d:f0:d0:11:39:41:
b8:4f:1a:f9:d7:4e:54:80:7a:fd:a1:e2:5d:8f:7f:dd:cc:8e:
fc:16:6c:ea:05:f1:0c:79:54:16:48:db:8a:d0:ad:8c:91:c1:
4c:bb:af:d1:2c:bf:df:d2:73:77:9e:85:4b:65:fc:87:30:5c:
b4:62:ea:68:5a:7d:cf:ef:50:c5:13:9e:97:f5:6d:94:2f:15:
49:0f:4c:cf:d8:d7:c3:a7:ad:26:aa:33:7c:d7:21:2a:50:d8:
ed:32:0f:3b:f0:e7:95:56:a2:32:0c:ef:08:11:a9:33:d7:4b:
f8:08:89:e9:32:31:73:8c:22:0b:3d:eb:2e:4f:ef:1e:35:4b:
b7:ab:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:34 2025 by rpki-client