Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: VMLyG6uAdZSZpRdvgGEg3qbbW4CORyXwBV0hZH+paL4=
Subject key identifier: 95:FD:BC:53:A8:B7:2E:EE:72:32:8A:19:AE:11:B5:23:8B:03:FF:F2
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 019873E2B14D23C04F3F1D98495E0CB92144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:01:32 +0000
Manifest this update: Mon 04 Aug 2025 07:01:32 +0000
Manifest next update: Tue 05 Aug 2025 07:01:32 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: IIMCyQU9zugdfyPro/2wDdQ+9EYqHNix6O3w3Q2pnYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b1:4d:23:c0:4f:3f:1d:98:49:5e:0c:b9:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Aug 4 07:01:32 2025 GMT
Not After : Aug 5 07:01:32 2025 GMT
Subject: CN=95fdbc53a8b72eee72328a19ae11b5238b03fff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:99:8a:f5:71:71:b2:89:40:a1:a6:fb:21:
00:e0:2f:03:06:52:02:f2:62:76:39:fb:81:f4:8b:
7e:17:9e:0d:a8:4a:fc:7e:a1:db:bc:11:0b:d7:41:
69:f4:da:84:8d:cd:36:6d:55:dc:80:ed:18:a1:44:
fb:89:d3:37:0f:5a:02:7a:ca:1c:d4:53:48:c4:a8:
ab:b8:16:9b:94:4a:b5:f9:df:43:f7:30:49:d6:13:
0b:87:6b:b1:34:3a:11:b4:9d:85:0e:ce:c9:83:4d:
00:83:31:23:00:df:b4:52:69:ae:ac:c0:cc:c3:09:
e8:c6:c5:fc:e5:ee:fd:c3:81:8e:1d:82:7f:22:93:
e6:47:76:7d:71:61:60:5d:1b:85:bf:12:ae:42:01:
2c:39:57:9f:83:37:70:19:9d:57:71:38:bd:56:aa:
a8:11:12:53:30:0e:62:94:2d:6b:ab:6c:56:d4:7a:
7a:d8:2b:23:79:70:f9:62:2c:5a:d7:c2:0e:2e:fd:
eb:82:d7:48:30:81:99:43:52:f4:60:4a:03:0a:19:
aa:07:89:28:63:a0:82:23:11:66:06:b8:03:80:97:
18:fc:b8:6d:2f:4e:01:21:a7:e0:3e:ea:94:76:4e:
9d:92:8b:da:c7:ce:35:ea:85:1a:e0:19:d9:4d:c1:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:BC:53:A8:B7:2E:EE:72:32:8A:19:AE:11:B5:23:8B:03:FF:F2
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:f4:a7:bb:ac:11:3d:d4:d9:22:1c:e8:6e:9c:b3:b6:b5:
0f:78:34:b4:5e:2e:46:09:e3:0a:42:dd:14:ca:73:15:ee:92:
aa:55:66:af:d1:75:5b:47:75:c8:06:5d:cf:ef:18:82:ec:b1:
5a:3c:e8:98:38:db:83:89:7e:12:88:a1:76:f3:23:04:ee:00:
95:5d:2d:96:51:96:6c:b6:a7:57:f6:75:9c:12:62:f1:65:65:
88:c0:28:c2:62:fb:a9:32:a9:fb:ac:da:25:03:36:20:65:4b:
39:b2:f9:29:63:09:31:7a:6b:de:42:99:e7:4f:43:d5:0f:df:
7d:79:f0:db:eb:a6:c3:a9:ca:27:53:b4:0d:a7:1f:a9:35:57:
5f:4b:3c:fb:3a:b3:52:19:bb:d0:6d:ec:7a:fe:84:36:50:1c:
42:08:b1:81:6a:72:34:25:73:05:79:e8:62:21:ea:f3:d2:12:
66:25:64:30:00:07:f6:cb:92:1e:0c:95:ff:62:6c:84:47:61:
d3:37:b5:38:44:3f:f9:97:27:92:89:be:81:d5:2e:4d:66:b0:
35:a3:72:04:57:e3:0e:6a:d6:a5:ce:9d:39:17:3f:09:87:8d:
c1:ec:aa:97:a5:aa:c6:af:d9:64:fc:74:01:f2:a6:d1:f0:ef:
a2:78:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:12 2025 by rpki-client