Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: HmA5Ndykg7Y4/JMELGfsvwqgiX8L38m+avR5jTqiW5g=
Subject key identifier: 89:D9:27:EE:B4:A4:3D:91:EB:E7:20:FF:9B:3E:DC:05:DF:43:ED:1F
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 01988FC79E286C2306504DB7BA422BA307F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 11A5
Signing time: Sat 09 Aug 2025 17:01:20 +0000
Manifest this update: Sat 09 Aug 2025 17:01:20 +0000
Manifest next update: Sun 10 Aug 2025 17:01:20 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: Qq/0b4Vvy0tAxxHGDdpYDkqfuHzhkmDsHFEcAQxEur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:9e:28:6c:23:06:50:4d:b7:ba:42:2b:a3:07:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Aug 9 17:01:20 2025 GMT
Not After : Aug 10 17:01:20 2025 GMT
Subject: CN=89d927eeb4a43d91ebe720ff9b3edc05df43ed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:c6:e0:bd:91:49:5a:cd:02:19:9d:32:f9:
cd:30:54:58:20:7b:d5:59:15:14:16:9b:fe:e3:55:
54:f9:3a:58:08:4b:aa:af:1a:21:d2:35:bf:50:39:
bf:51:0d:0a:4a:a7:12:48:e6:88:d4:3f:ef:74:3f:
73:e9:a3:d0:a4:89:ff:55:af:d5:06:14:ca:24:e9:
5e:d5:74:62:a4:ff:cf:9e:ce:fb:b7:81:86:39:b0:
82:b2:33:5e:d4:f0:80:3b:26:bf:b1:d1:58:3c:3d:
dc:91:f9:b1:1b:55:6d:71:12:0d:dc:5e:98:19:4b:
19:d2:67:9d:12:43:e1:a4:64:55:39:22:65:7c:c6:
77:51:6f:06:84:b2:ec:0b:1b:f6:4f:61:c4:19:b9:
fe:3c:0d:6b:b0:76:da:0a:1d:05:7a:85:b7:35:95:
6e:86:b1:b4:91:13:20:ae:19:e7:11:7c:43:da:29:
91:42:5b:d3:7d:51:6d:6b:f0:3c:53:88:f6:9b:43:
fb:80:69:b3:5e:fe:ae:8a:90:7d:f6:d1:4b:3e:cc:
33:b0:31:c7:a1:8d:fd:d5:6a:d1:e6:11:f5:e5:f9:
98:94:d7:37:a4:7e:56:31:ed:67:f0:b2:6f:d4:26:
f0:2b:2c:a5:a1:61:d3:a8:5e:71:8e:ba:63:e5:80:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:27:EE:B4:A4:3D:91:EB:E7:20:FF:9B:3E:DC:05:DF:43:ED:1F
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:4e:8c:7c:a0:27:79:ce:a7:92:7c:9f:4d:15:d3:92:0d:
ca:0e:ca:4f:41:36:12:60:aa:37:3e:19:16:58:5f:d1:07:f9:
3a:97:41:22:99:2b:f1:07:91:fc:50:dc:db:7b:33:66:d7:ac:
2a:f1:5a:f3:08:74:eb:87:b2:f6:99:d3:e2:dc:f8:b5:99:37:
f7:f5:d3:be:e2:f4:87:28:f8:00:df:95:c2:bb:a2:12:8a:2e:
48:29:13:a9:fe:dc:64:e3:22:66:74:c4:e7:fc:38:83:92:a4:
a1:96:11:1e:a1:a3:fe:50:79:c5:90:61:51:5d:12:5a:8b:57:
ec:94:cb:7f:15:45:0b:af:84:57:a6:93:ed:4f:55:2a:99:16:
b0:be:a8:e8:ee:2b:42:96:1f:1c:d5:f8:70:01:56:99:21:45:
0e:8a:24:00:44:1e:9e:19:45:50:9c:39:f9:6f:53:b0:17:7a:
cf:43:d5:ea:36:58:06:85:8d:5d:e6:67:ee:61:ec:da:7f:6b:
f6:52:42:79:5b:68:a4:3c:44:68:ee:45:25:71:79:b0:3f:b4:
e0:5b:f0:e9:ed:36:2f:72:c8:72:9e:90:0d:af:6d:c1:18:74:
bf:05:28:fd:07:f4:3c:30:a9:58:24:e1:d6:11:a0:d4:9f:13:
23:a4:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:18 2025 by rpki-client