Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: ngbAFqP9p1EnK2lCsp1Gsn/m6W924rGixjjKw/SWR+M=
Subject key identifier: 59:99:28:25:B8:C1:D8:68:2C:6D:C1:1A:48:0C:62:7C:C1:B0:04:83
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019896A510BE4FDD6764486A90BC6760B5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 1359
Signing time: Mon 11 Aug 2025 01:00:56 +0000
Manifest this update: Mon 11 Aug 2025 01:00:56 +0000
Manifest next update: Tue 12 Aug 2025 01:00:56 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: Gdnez7guVKMiM53Ricb1+EeW6hCL7R/QyI6h+WFZBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:10:be:4f:dd:67:64:48:6a:90:bc:67:60:b5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Aug 11 01:00:56 2025 GMT
Not After : Aug 12 01:00:56 2025 GMT
Subject: CN=59992825b8c1d8682c6dc11a480c627cc1b00483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:e5:75:9e:28:13:75:c7:15:5a:cf:ca:97:
a7:3b:f2:d7:a4:97:77:3a:e2:aa:7c:d8:34:80:83:
3a:42:4c:4d:ac:67:cc:c9:14:6e:54:9a:5c:ba:21:
7d:2f:59:e0:6c:cd:9b:c0:b4:74:a9:ad:ba:57:f2:
b5:f4:5c:64:d7:9e:24:e2:d9:13:7d:2d:fe:93:7c:
33:7e:34:f4:28:15:42:fa:be:21:73:92:ad:30:7b:
94:2c:1d:48:79:6a:d2:1a:a6:2d:1d:ee:bb:80:a4:
30:00:9f:44:03:73:67:21:bd:e9:fb:2a:85:11:c1:
35:f8:7b:1c:2f:32:ff:1b:0c:ab:ec:df:1a:8b:0f:
f4:e6:a0:a7:ec:f3:79:46:2c:4f:4d:87:55:2a:83:
14:d2:b0:3c:28:ac:d1:19:23:1c:68:2d:3a:49:09:
d8:61:b4:87:2e:e1:63:35:b0:fc:a9:79:9b:3b:8e:
73:d8:d7:6d:56:5c:2b:fe:bf:61:0c:d6:2d:b1:67:
2f:71:11:93:dd:cc:36:7d:bf:80:a9:a1:e0:1f:d7:
9d:b5:97:ce:cc:96:f4:d4:4b:fd:e2:aa:f1:80:54:
fa:f3:e7:a9:58:71:75:bd:9c:9c:40:ed:39:95:e5:
03:f6:bb:6e:7e:c3:4a:e7:ad:01:4f:fc:71:8d:83:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:28:25:B8:C1:D8:68:2C:6D:C1:1A:48:0C:62:7C:C1:B0:04:83
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:06:59:16:4d:fa:c9:e5:dd:e3:c6:76:df:fb:24:05:67:
2a:95:58:68:11:be:70:aa:39:7c:ad:88:2a:a0:55:ad:68:0d:
09:5b:b8:5f:b1:72:e9:7c:14:b5:b7:f9:ec:39:a7:8c:be:0c:
fb:0d:b0:81:16:cb:ff:7e:ae:0f:58:98:04:03:09:d3:5b:ed:
5a:4b:86:d0:3e:85:ae:fa:7f:5d:86:8a:9a:95:e0:21:ba:ef:
09:cb:4e:de:dc:fe:e2:dd:30:7e:78:fb:58:83:84:71:45:58:
47:6a:4d:59:c2:a9:fb:b4:57:89:22:05:43:63:14:14:e6:8d:
47:3a:d5:ee:52:30:c5:c8:6a:a0:e4:d3:7c:31:ad:f6:bb:1a:
87:0e:9a:4c:e7:3b:71:5d:9a:7a:d2:ee:0d:23:cc:b6:4f:fb:
6b:ec:57:87:96:4d:d4:48:bc:5d:1a:5a:d0:fe:2c:e5:5b:87:
75:77:89:be:60:a4:eb:fe:fd:d5:20:8d:a7:db:82:6d:08:7a:
3e:28:19:57:d5:e6:da:d7:8e:89:f0:58:1f:cc:57:b5:2f:eb:
7e:20:c3:f4:31:6d:41:c8:c3:e1:1c:00:62:ae:42:f4:ee:e4:
1d:3e:31:99:f1:46:ef:16:29:2c:8f:36:ed:75:5c:ac:8a:b4:
e6:2e:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:29 2025 by rpki-client