Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: QArh7JpvTpirdNTPUqNlcRnVuGeNPFkg/qZ3vyqbWpQ=
Subject key identifier: C6:4D:97:3E:9A:AF:4C:F9:C1:16:26:A6:CA:70:F3:64:79:9A:07:F9
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 019896A5A08B25D4E118BD8E90F48DC941C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 01:01:33 +0000
Manifest this update: Mon 11 Aug 2025 01:01:33 +0000
Manifest next update: Tue 12 Aug 2025 01:01:33 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: meAv/oO0bxNxXd8zKvv9yFkKnzz7ExUhhUj2mI92YCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:a0:8b:25:d4:e1:18:bd:8e:90:f4:8d:c9:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Aug 11 01:01:33 2025 GMT
Not After : Aug 12 01:01:33 2025 GMT
Subject: CN=c64d973e9aaf4cf9c11626a6ca70f364799a07f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:87:49:7b:a6:20:da:f5:d7:11:08:0e:a2:
11:94:44:e3:b1:ef:a3:0a:ac:d7:f6:bc:71:7d:3e:
2a:2f:9f:4a:6c:d0:2c:15:d0:f9:5c:2e:06:a1:07:
5d:51:41:7d:73:db:72:fd:de:a4:26:c5:8a:ad:94:
7a:55:96:78:7c:92:a9:7b:91:ce:d3:f2:00:04:6a:
25:92:a1:42:e3:70:1b:36:44:a2:a2:57:b6:85:42:
ea:b9:be:4d:89:36:ae:82:79:ba:85:07:de:b8:74:
56:89:23:27:80:4b:5c:a2:bb:e5:04:e7:8c:81:a5:
d1:ed:9f:5a:40:b3:32:4b:6b:81:e0:28:ef:d3:00:
71:88:e9:ba:99:b3:1a:77:71:26:2b:a7:f1:1c:53:
62:5d:58:21:60:78:1f:8a:76:22:b9:1a:6b:6f:6f:
16:01:1e:b5:40:1a:11:83:1e:45:a6:e1:9f:4f:98:
41:70:f8:e7:a3:c7:e1:4c:9d:ae:2e:e1:14:e7:af:
d3:59:a8:b4:0f:e1:9c:36:c7:7a:93:8b:2a:c6:2e:
77:58:c4:b2:b9:d0:f4:87:f4:36:e4:cf:4e:ed:99:
c5:ff:1e:0c:d0:b0:af:24:5c:5c:6f:c0:18:30:42:
76:63:88:9d:5f:fb:b3:69:19:c5:03:50:3d:f6:96:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:97:3E:9A:AF:4C:F9:C1:16:26:A6:CA:70:F3:64:79:9A:07:F9
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:a6:7f:7c:d9:a6:84:51:0a:4a:96:5f:40:96:e0:f8:a7:
7e:5a:3d:7f:63:10:0b:06:28:e4:3f:0e:bd:51:46:96:f7:46:
f2:3d:8b:f1:ce:be:87:00:0f:61:12:ea:f5:be:91:b8:b2:80:
ab:6a:2c:19:9a:4b:21:a3:c1:c1:21:17:4f:cf:48:2c:37:ff:
af:0e:fc:3a:99:16:ca:af:19:1b:8e:55:24:55:93:4c:c8:5f:
53:0e:66:3a:44:b9:b6:2a:cd:3d:36:94:57:84:72:59:a0:c9:
3b:57:49:73:34:95:72:d9:f3:04:26:a1:b7:49:2f:a3:8d:ea:
32:9d:8f:3b:b4:e4:98:d3:41:e1:c1:bf:50:fa:ab:91:52:a5:
66:0b:53:88:12:fb:bc:46:f8:4d:61:72:31:c8:51:26:0b:91:
2e:6d:59:ff:2e:65:1e:69:21:25:ff:a0:55:8a:50:15:e5:62:
96:79:13:39:b3:39:2f:6a:c8:fe:61:e9:25:e6:14:57:66:f0:
e3:85:76:1b:57:13:ee:7e:4d:71:f8:26:bc:4b:ad:45:13:5d:
2d:1e:75:3b:67:8e:c7:55:ed:0b:ca:40:9c:86:79:3a:71:37:
e2:4b:ba:b9:ca:43:c5:7e:87:a9:fa:73:72:bf:a7:7e:1c:d2:
b9:bc:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:10 2025 by rpki-client