Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: V2ERzmzKIhEEE26cxa90vLQ23S2pdp/W06w+qd42EYE=
Subject key identifier: 1E:13:4B:2D:96:A5:EF:77:82:FD:11:C4:45:E9:C0:CC:3A:02:F1:EB
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 019893A49103B16A230BAD64B4BB2E90D319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0BA4
Signing time: Sun 10 Aug 2025 11:01:32 +0000
Manifest this update: Sun 10 Aug 2025 11:01:32 +0000
Manifest next update: Mon 11 Aug 2025 11:01:32 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: x815cunB8rU8jgvMowWuYnLdet7zn8cOKN6jc42wtDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:91:03:b1:6a:23:0b:ad:64:b4:bb:2e:90:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Aug 10 11:01:32 2025 GMT
Not After : Aug 11 11:01:32 2025 GMT
Subject: CN=1e134b2d96a5ef7782fd11c445e9c0cc3a02f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:05:2d:48:65:13:df:bf:c7:1c:81:44:19:
1a:56:3f:22:73:3f:67:f7:d9:6e:73:01:38:c9:f9:
af:83:7b:34:bf:84:2d:42:3a:6e:e2:5a:5c:60:9d:
dd:ea:3c:7e:06:85:41:55:0b:13:ac:b9:35:84:9d:
c6:27:92:96:40:cd:a9:fa:7e:bc:c6:ef:9b:a0:9b:
8d:67:5f:96:e3:e8:3e:e8:6b:3a:99:da:c3:59:2a:
19:7d:51:ed:fb:c0:4c:a1:e4:e1:44:b3:37:e6:c1:
81:4e:eb:ad:7a:cd:e7:f6:77:18:d6:3d:3c:bd:39:
c7:76:3c:83:fd:ea:82:63:1f:b0:75:8c:9c:dc:9f:
4f:0c:07:78:cd:fe:34:1a:69:c3:29:7d:a5:78:3d:
21:39:32:91:b1:47:28:c5:4b:85:a0:e2:a9:de:7c:
b5:38:58:00:1d:a5:2b:53:da:61:45:ae:61:03:f3:
1b:2e:0e:bf:04:b2:49:d5:e5:76:29:1a:1c:e5:f7:
ac:5d:6a:3e:e9:7e:e8:2a:d7:2c:e4:39:6b:e0:c0:
71:9f:83:b9:06:ea:f3:6b:8d:79:ce:30:c1:6a:83:
d8:13:63:fb:c6:e9:ab:fe:72:de:45:dc:aa:3c:6a:
4f:48:03:90:21:e1:b6:73:b5:fc:35:12:b1:8b:0f:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:13:4B:2D:96:A5:EF:77:82:FD:11:C4:45:E9:C0:CC:3A:02:F1:EB
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5b:7d:cc:24:2d:c6:b7:a9:3b:f9:59:ad:83:a3:a3:a9:17:
25:25:e2:98:d8:65:0e:7e:6d:e7:9d:8f:18:fd:d1:41:7b:99:
dc:af:6f:37:d0:0f:a1:1e:90:02:88:e4:63:24:8f:67:9a:24:
ab:96:12:0a:d3:17:4e:5f:9d:60:fc:d7:5a:19:8d:b4:bd:c1:
71:e1:f7:4e:b1:7c:26:bb:44:82:cb:29:c7:e2:30:50:ce:9c:
c9:88:9c:9f:3a:58:99:f3:c4:b2:2c:95:66:bd:90:c8:03:b6:
c6:61:b8:ce:c5:c8:53:c7:d4:44:f8:d7:86:ad:45:4b:97:94:
a0:6d:d1:c4:0b:a4:96:af:3a:ad:b8:3f:de:e1:80:fa:4f:41:
86:41:dd:03:f9:a9:e1:61:36:68:f6:e8:ff:e7:76:c2:7f:ed:
8f:aa:08:56:12:76:66:65:37:82:40:ab:c1:7d:98:7e:98:ac:
6e:33:bc:9e:24:d8:81:1c:f4:a8:1a:ab:ba:b8:9d:1b:19:59:
27:c8:22:78:a1:46:9b:4d:cc:b4:5a:72:d9:ff:e5:e2:81:3a:
ff:25:5b:fe:32:2e:ca:c2:29:21:f9:23:af:48:3c:30:a7:1d:
de:e9:e9:01:c9:ba:e3:64:97:7c:5d:34:c5:f0:98:80:14:35:
65:14:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:40 2025 by rpki-client