Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: 2lQ+sfVUNn+SCiIH3FHcoi6vfNSZ+p6Lb3Fwo7Nkjuc=
Subject key identifier: 13:AB:97:F2:4F:83:76:34:7B:77:14:59:DC:87:2F:5B:C9:62:D2:66
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 019872987C894B3D88AFE94666317C8A2619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 1652
Signing time: Mon 04 Aug 2025 01:00:52 +0000
Manifest this update: Mon 04 Aug 2025 01:00:52 +0000
Manifest next update: Tue 05 Aug 2025 01:00:52 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: rxnYQofCBmiiBxBJ7dVuqoV6DE+wE6ei0H5Tz/WwCO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7c:89:4b:3d:88:af:e9:46:66:31:7c:8a:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Aug 4 01:00:52 2025 GMT
Not After : Aug 5 01:00:52 2025 GMT
Subject: CN=13ab97f24f8376347b771459dc872f5bc962d266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:09:7b:6a:99:08:c4:4c:ad:65:40:15:43:
28:55:e2:2b:ee:17:0c:6f:ad:27:a6:cb:c7:a3:91:
00:a6:82:08:72:89:cc:6e:84:82:61:02:6a:1b:9e:
d8:8c:d7:77:b2:dc:8e:fc:38:73:89:8e:e2:b4:15:
90:f0:d7:92:b9:c4:b9:4a:6c:d4:79:5f:28:4e:eb:
fb:c2:8b:a1:c8:c1:6c:a1:e1:f7:d8:1e:e3:9e:8d:
07:a5:0c:b2:64:7d:bf:86:4c:d8:da:65:a1:5c:5b:
76:0d:4f:cc:ee:33:d7:9e:0e:1b:42:f8:05:28:1b:
7a:7c:2d:9f:01:ba:57:26:23:32:9d:74:3a:bd:01:
e9:2d:cd:6d:5e:21:3e:55:e9:ee:15:48:db:64:e9:
db:ff:42:6d:4f:e2:b6:cc:c8:d8:70:80:9c:5c:47:
ae:90:04:9a:ac:62:f2:c8:11:9c:97:56:d6:c9:e4:
09:30:e4:ab:e0:7a:46:ae:df:79:f9:c8:d1:aa:30:
09:b7:65:c0:f9:dc:55:98:00:ec:6d:3b:5b:8d:13:
07:25:ae:99:13:66:4d:bc:87:7f:ed:b8:59:b9:1d:
c3:ea:3f:3a:f1:9d:20:30:e1:46:fe:4c:2c:98:52:
ca:00:0e:db:dc:81:ad:29:04:a8:7e:60:c6:d2:b4:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:97:F2:4F:83:76:34:7B:77:14:59:DC:87:2F:5B:C9:62:D2:66
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:3f:01:cd:11:46:2d:9e:80:69:d2:a3:ec:b6:f9:87:de:
51:b8:16:03:80:d0:dd:0c:27:27:ed:e0:97:01:06:e1:69:62:
50:37:8c:ed:3b:4c:49:18:dd:31:1c:10:2c:15:73:6b:b5:61:
4b:c8:3b:3a:49:1a:6a:51:a8:b9:ef:16:6c:68:8c:ee:d6:07:
ed:f5:ec:fc:24:48:eb:65:46:d0:64:9f:a4:24:1e:5d:ce:28:
dd:64:d0:a3:e1:8f:f9:c5:d4:eb:0e:a8:1e:ac:38:7f:ec:09:
ce:73:f9:34:01:fd:60:7d:47:2f:8e:38:e5:4c:4b:94:73:a7:
dc:f4:83:a8:10:37:50:77:db:e9:93:eb:2c:7e:d9:b6:82:1e:
71:9e:4d:3d:ae:41:e2:05:1b:c6:78:af:c9:20:b1:a3:9e:f1:
28:cb:3f:ae:7f:c3:36:53:77:a4:c7:e1:1b:9e:13:c3:11:d8:
88:55:52:2f:94:35:e0:b2:18:00:e7:fe:eb:3d:cc:be:07:b0:
38:6f:36:ad:ac:ab:75:a7:d7:8d:05:4b:90:96:14:28:69:de:
f3:03:04:e7:12:b5:75:d0:5c:2c:33:aa:57:13:aa:3a:82:d9:
25:f2:16:3a:09:ed:04:c4:14:35:c3:ac:2d:e7:49:6e:91:a4:
a8:14:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:37 2025 by rpki-client