Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: 4peU9EFXqxsGTCZdludCEZc7PGqn8Mnx7eE90xoHi/Y=
Subject key identifier: F0:2A:CC:CE:FA:FC:DD:D8:6F:C0:94:16:2C:E2:31:70:81:C1:AC:F7
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019892C8A85B13384034BE9388D6D4F18F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 07:01:20 +0000
Manifest this update: Sun 10 Aug 2025 07:01:20 +0000
Manifest next update: Mon 11 Aug 2025 07:01:20 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: MWroEQc3eo39CN6rm6oUqkGmqR+uNshP9xdjO1rHXF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:a8:5b:13:38:40:34:be:93:88:d6:d4:f1:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Aug 10 07:01:20 2025 GMT
Not After : Aug 11 07:01:20 2025 GMT
Subject: CN=f02acccefafcddd86fc094162ce2317081c1acf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:37:76:c9:7d:f9:6f:e6:08:92:69:04:f4:
d7:d8:a8:67:cd:62:1c:17:6c:ec:c4:8d:e8:03:b0:
d0:c0:2f:0f:be:6f:dd:f8:b7:7d:43:97:91:19:2b:
a0:19:aa:c2:99:c0:ca:a7:e2:59:63:bb:73:58:61:
01:6b:0c:63:53:76:56:9b:ac:7b:c5:e5:30:9d:56:
1f:8c:ed:16:dc:1e:64:37:ef:2c:05:8a:31:a3:24:
c7:ac:b8:f0:29:6c:03:c3:6f:a8:4e:09:5f:14:f2:
4f:c0:89:5a:75:69:7d:c5:67:20:a1:37:39:49:d4:
9f:cf:cf:48:95:a6:93:e5:3c:81:79:ef:77:0b:05:
04:ae:18:e7:c9:61:76:21:40:3c:7c:c2:ca:6a:07:
38:9d:f3:2d:51:72:12:fc:41:09:bb:87:cd:b9:7a:
68:8e:af:ad:01:d6:db:7a:2c:94:67:11:eb:c5:4d:
8d:ae:ad:0f:53:6d:aa:4f:95:a9:7e:11:6d:51:7a:
cc:48:88:55:5a:d8:77:5c:b3:82:9b:ee:05:d2:2a:
60:d3:d8:77:9c:8b:ef:94:2f:73:99:3c:69:10:5d:
5e:11:a6:ad:a6:92:07:84:1d:5b:d8:94:7b:1a:c5:
16:aa:c0:54:22:26:a6:c8:85:ed:6a:df:ce:38:79:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:CC:CE:FA:FC:DD:D8:6F:C0:94:16:2C:E2:31:70:81:C1:AC:F7
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:93:4f:c8:bf:b6:e7:f9:ae:f9:ee:17:70:6d:1e:de:e9:
dc:3f:b7:71:8c:10:38:86:2d:b3:ec:bb:18:a3:f1:a6:ae:c0:
69:2a:3d:59:8b:b0:92:c8:0f:f8:81:4e:be:5a:32:94:d7:0c:
69:13:63:85:27:8c:d1:1b:d8:2c:51:55:1c:a7:17:87:a6:82:
99:6e:6e:86:08:c6:a2:67:e7:c2:7f:aa:40:92:8d:f5:ff:12:
4e:45:28:04:9c:a6:2b:b9:f4:b4:8b:25:b8:9e:5f:9d:82:9b:
67:37:07:06:f2:da:31:35:2c:2f:49:7f:85:49:6a:7f:c9:d5:
5d:72:d4:50:9b:0a:57:38:0f:b3:c0:ab:32:ea:90:2d:de:92:
51:93:51:d8:6b:92:4e:14:65:64:4f:50:2d:54:f6:d8:35:75:
34:8f:7f:0c:01:53:56:59:78:b8:cc:95:9a:6c:c8:76:86:7c:
67:ef:1d:7c:2a:21:ab:93:32:b7:7c:4c:0e:92:46:b1:ba:80:
66:ef:12:98:de:f9:36:42:63:d1:4d:5f:87:e4:fc:0b:78:9d:
e3:58:08:29:4a:9e:8e:0e:dc:0b:2e:82:09:65:a7:a4:f5:d1:
25:ee:2f:a0:62:b5:dc:53:cd:bb:00:fb:9d:bd:b6:3e:37:f2:
de:f5:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:29 2025 by rpki-client