Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: UrNkcK1ILRQO21W5EvKF0K/zqqevv9FWKajayCMQ5VU=
Subject key identifier: C3:EF:53:FB:5C:5B:23:88:2C:75:64:FF:01:5B:11:84:99:45:64:90
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 0198733D2FD4F4F00671797E4366967B5A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0D1F
Signing time: Mon 04 Aug 2025 04:00:46 +0000
Manifest this update: Mon 04 Aug 2025 04:00:46 +0000
Manifest next update: Tue 05 Aug 2025 04:00:46 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: 2ep8yOX+wAstv2kyLe1QScZ4gK/ZS0cOY/NJMs3HBBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2f:d4:f4:f0:06:71:79:7e:43:66:96:7b:5a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Aug 4 04:00:46 2025 GMT
Not After : Aug 5 04:00:46 2025 GMT
Subject: CN=c3ef53fb5c5b23882c7564ff015b118499456490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:14:a7:e5:30:a3:79:19:9e:d7:3b:bd:87:
35:91:b8:57:93:08:c8:08:d8:c4:54:43:77:4f:ed:
46:7c:d0:df:33:b4:10:a2:ca:fc:01:c2:ed:db:5e:
94:46:ab:c6:b8:c3:c2:1d:1d:bc:ec:b1:2e:38:7d:
69:2e:f6:a4:58:0a:83:2c:76:b9:ea:6d:1a:84:04:
0e:0d:01:68:67:91:2d:84:ad:2a:73:bc:90:3e:4a:
ab:fb:61:a2:a2:58:af:ec:77:4e:d6:e1:3c:14:63:
82:c6:eb:46:4f:43:21:d3:59:3c:66:d6:0d:67:fe:
b7:fa:a3:48:f8:2d:45:fe:1d:07:ac:50:76:78:33:
14:e4:e9:fc:e5:cc:92:b2:90:81:3c:04:dc:af:3b:
a3:0e:88:ae:5d:8d:10:3c:26:68:72:09:b9:f7:7f:
d4:24:c9:fc:83:9e:d5:a1:8b:10:45:dc:31:4e:5c:
09:28:8e:bc:3c:15:5c:fd:c2:ed:7e:64:be:94:e8:
42:6a:e5:77:c6:a6:c4:34:d7:75:23:21:5c:54:da:
a5:3c:f6:35:bf:7b:30:f5:d6:30:ac:cd:45:e6:37:
51:28:5b:a9:11:86:fd:45:38:61:3f:da:d3:9c:ee:
1a:f2:bb:c8:0d:8b:32:98:f0:2c:64:4c:f3:3f:97:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:53:FB:5C:5B:23:88:2C:75:64:FF:01:5B:11:84:99:45:64:90
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:83:62:76:86:b6:cc:f7:d1:02:ab:84:7f:37:1a:c5:f8:29:
a0:a4:1d:b2:ec:dd:a3:ff:7c:f4:b1:0f:81:30:8a:11:da:d4:
e6:74:4e:9b:5a:77:1c:f7:fc:1a:07:93:fe:a1:e1:4e:9b:81:
90:da:b6:37:b6:be:df:8a:c4:98:41:9a:97:d9:25:a3:d0:ad:
3a:58:53:89:8e:35:02:c0:b9:7a:28:db:2c:5f:00:ca:da:cb:
ff:16:3f:c6:ad:be:9a:eb:ab:d6:b4:a6:81:5b:58:ee:c6:c7:
15:5d:df:a4:8f:f9:bf:e5:65:31:19:16:2b:f0:d3:4f:89:d0:
01:e8:b6:45:a2:3f:0b:79:ee:c0:b2:34:9b:9d:a3:4e:95:c5:
56:83:75:94:45:db:89:df:57:ef:8d:71:8e:e4:a8:97:1a:50:
87:2a:47:b5:f2:f8:cd:08:88:04:48:0d:df:1d:19:f3:ac:91:
af:6a:ad:49:11:ff:86:05:45:5f:16:6f:58:bd:c8:e0:33:c7:
c0:32:5d:56:da:12:10:20:56:a6:a3:2b:a7:62:79:34:19:f7:
ed:65:7d:1d:2c:b3:e5:38:24:2e:7d:99:8c:35:e2:29:e3:e1:
a6:eb:4d:23:40:9b:29:06:56:45:6a:10:cb:4d:ac:71:da:30:
82:dd:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:32 2025 by rpki-client