Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier: sllA2IwZWvngazFK9hJl/hJd0WnGs5MW0TEMqhspvhs=
Subject key identifier: CE:AA:EE:1E:8F:C9:61:54:BB:4F:F1:08:D5:CE:AF:C6:14:9E:4C:38
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial: 0198816863F6D1EA3ACF332310B20EF4444C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number: 01AA
Signing time: Wed 06 Aug 2025 22:02:38 +0000
Manifest this update: Wed 06 Aug 2025 22:02:38 +0000
Manifest next update: Thu 07 Aug 2025 22:02:38 +0000
Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: +KrHGqqRIm22Q1l3Xgc1EUrY8MZkpOZW1Gs8ekA/aKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:63:f6:d1:ea:3a:cf:33:23:10:b2:0e:f4:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Validity
Not Before: Aug 6 22:02:38 2025 GMT
Not After : Aug 7 22:02:38 2025 GMT
Subject: CN=ceaaee1e8fc96154bb4ff108d5ceafc6149e4c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:c7:54:54:b4:87:c3:cd:06:b2:61:a1:90:
3b:75:cb:6a:af:3b:26:5f:c9:51:18:f5:61:77:f3:
30:63:08:6f:56:19:8e:8a:2a:eb:54:a4:a3:75:89:
a7:32:fd:76:89:f6:33:ab:c3:47:a8:7b:00:92:8f:
fb:ed:cd:74:8c:09:cb:a7:9b:38:6a:d2:be:a8:57:
92:d2:08:c6:5b:67:14:3e:8d:89:5f:21:2e:2f:67:
1a:43:37:ed:28:37:1c:6c:f5:49:24:d6:bf:04:19:
0e:30:16:0c:f5:85:bf:bf:a2:3c:62:c2:34:c0:be:
93:ba:cd:b2:35:83:21:20:d2:e9:3c:ac:72:ba:06:
b9:f0:5d:53:8a:a9:dd:0a:52:e0:64:9d:74:a1:c9:
97:45:64:e1:1b:68:66:e3:2c:90:af:4a:fd:ab:ef:
f9:a7:22:62:70:c7:d6:8b:b2:f4:87:57:fb:3f:b5:
f2:39:a7:4a:f2:7d:ae:e1:6b:67:2d:fc:ac:7d:ca:
e2:9e:1b:58:c3:36:4c:84:c9:e5:15:82:e9:52:9c:
be:f8:6a:e5:44:5a:83:2e:cc:e4:71:8c:41:5c:53:
6f:c4:58:b4:d4:f6:f1:0d:79:24:1d:a8:b8:49:0c:
92:75:29:95:b5:af:6e:42:30:4d:28:4a:a3:67:a4:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:EE:1E:8F:C9:61:54:BB:4F:F1:08:D5:CE:AF:C6:14:9E:4C:38
X509v3 Authority Key Identifier:
keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f5:d5:e7:3d:11:93:a5:29:c4:c0:dc:af:4f:55:16:48:3f:
54:80:75:f8:9c:f1:c7:89:df:c3:1e:cb:75:ea:e8:12:aa:97:
fd:4f:a1:a0:dc:46:c2:a3:fb:75:76:cc:47:f6:86:3a:a4:f1:
9d:d5:d7:af:33:05:64:df:9e:11:02:be:4f:39:03:1b:b7:47:
5b:a7:65:fd:4e:5c:3b:7b:e6:61:8c:79:2d:d1:c0:e4:ff:9f:
bf:3f:11:7d:e4:d4:e5:07:40:e6:7a:de:3b:0d:1f:aa:6e:de:
87:be:93:10:a4:9d:16:4a:5f:83:7a:57:2a:6f:69:0e:64:b7:
77:6c:35:67:4c:bb:d2:75:03:2d:eb:be:13:47:66:2e:1b:7e:
ca:dd:ef:6d:aa:da:42:0f:6d:f2:58:a9:9b:1b:c4:be:32:bb:
84:59:ba:b2:a5:46:24:68:34:d7:7c:60:d8:0d:9d:47:67:6a:
0b:eb:1f:60:2e:f8:51:52:cc:53:25:fa:87:7e:77:b2:15:37:
90:c3:5a:aa:ff:c2:dd:d0:f4:6c:5d:9e:02:97:15:11:c1:dd:
44:76:da:ff:fb:81:ec:8a:c0:79:b4:71:01:b4:c5:74:5c:26:
37:45:d8:14:e3:f8:79:05:6a:ec:25:9c:77:39:13:c5:3b:f9:
9b:67:b6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:01 2025 by rpki-client