Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: gWbZYxTOyILhnMcKHTzpZRpXqGxHuPXc2pklHk9p9Q8=
Subject key identifier: 64:0C:5A:B5:FE:6D:48:CB:9F:76:EE:1D:2A:EF:0D:5D:3D:4D:42:D7
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 019890D9D1651D9E243F116F59316B059FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 0F29
Signing time: Sat 09 Aug 2025 22:00:50 +0000
Manifest this update: Sat 09 Aug 2025 22:00:50 +0000
Manifest next update: Sun 10 Aug 2025 22:00:50 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: kmyvzTJgmtpBsgFzAKW3WTk7LiQT+3rd1DcuxpIXa8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:d1:65:1d:9e:24:3f:11:6f:59:31:6b:05:9f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Aug 9 22:00:50 2025 GMT
Not After : Aug 10 22:00:50 2025 GMT
Subject: CN=640c5ab5fe6d48cb9f76ee1d2aef0d5d3d4d42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:9a:38:5e:9f:61:ab:d1:1c:0c:37:7c:48:
62:c3:f6:5f:b0:ad:71:05:b3:f7:74:3b:b6:4b:44:
38:30:5d:8f:57:d3:da:e9:56:79:bd:28:6d:cb:42:
82:32:ad:d4:8b:0a:1b:62:ee:ce:3d:88:47:b1:db:
44:05:4c:37:cb:f3:70:04:dd:d4:36:a0:6a:58:fe:
65:46:56:e3:68:59:dd:b1:af:48:25:9f:55:d3:fa:
b3:ba:07:6b:6c:83:1c:51:dd:0c:3c:42:bb:a6:5c:
85:f7:35:0a:0d:5c:9f:c1:d6:67:84:9e:2c:1d:00:
7d:c2:a2:c3:e3:c8:8a:b6:0e:31:06:cb:a9:0f:90:
e5:0d:8e:3f:0a:7f:f9:a1:59:e8:fe:b2:2e:9c:de:
35:86:5e:78:b9:12:15:04:b3:6f:f8:1e:cd:a3:d8:
10:07:8a:bb:11:bb:42:72:41:97:1a:de:db:c7:c1:
c7:9a:73:19:d2:61:b2:18:0f:c8:85:29:6c:b1:f1:
b1:4f:cd:27:97:32:ec:ce:59:df:f2:bd:cd:61:d5:
44:fa:ef:79:36:dc:ca:df:e9:09:a6:cd:bd:00:76:
a8:82:92:4c:df:9b:6c:62:78:be:fc:52:3e:5d:5c:
c8:c4:11:38:c3:34:b7:03:38:4c:ef:5b:2b:c8:36:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0C:5A:B5:FE:6D:48:CB:9F:76:EE:1D:2A:EF:0D:5D:3D:4D:42:D7
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6c:28:2d:81:45:82:7a:fa:f3:d6:cf:0b:89:9f:98:f9:06:
74:02:ef:97:38:9f:d3:55:4a:94:bf:9e:ad:23:8d:f8:76:30:
b7:7d:d1:76:e1:05:29:e8:30:1f:c3:0b:4a:a1:2c:c7:05:48:
f5:5a:78:8b:50:23:d7:f6:7f:2c:5f:21:b6:a2:5d:a9:6d:5d:
25:7d:97:02:39:1c:3b:08:69:20:7e:49:21:a9:3e:a9:99:27:
b6:05:32:c8:1d:6f:26:e7:e8:4e:35:1c:7e:a9:ba:7b:2e:4f:
70:c5:06:55:1e:cc:8b:18:53:f8:f0:35:10:90:b7:9d:92:3b:
9d:4e:47:0a:2a:75:f0:ac:53:a5:59:8c:69:cc:7e:06:eb:66:
64:11:d3:d3:cb:68:27:6f:95:f1:54:49:45:f8:d7:9b:97:0b:
51:5c:75:02:63:6f:74:5b:ac:52:8b:30:62:8f:84:fb:ad:76:
4d:98:ec:62:92:07:dd:2c:1c:c4:63:22:15:74:bd:a6:99:76:
2d:2f:58:04:90:45:b8:d7:3d:ff:94:e8:74:4d:ef:f5:07:5c:
35:ac:d5:3c:5e:6e:d2:03:a2:e7:c4:a4:9e:19:05:52:c1:90:
cd:5f:f0:e1:c4:1a:ee:ae:b9:09:9f:5c:ed:d2:76:32:20:82:
ea:23:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:16:06 2025 by rpki-client