Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: V2B+WXLsz/wESbillN9NjteP72YKTOj2Idn4Y2EOkOA=
Subject key identifier: 3A:A9:6D:AE:46:43:44:6D:33:A6:31:D1:D2:BF:4D:4D:8C:C0:83:D8
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019874193CE95419AFB20A2AFE30C8996BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 0433
Signing time: Mon 04 Aug 2025 08:01:07 +0000
Manifest this update: Mon 04 Aug 2025 08:01:07 +0000
Manifest next update: Tue 05 Aug 2025 08:01:07 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: iPHdpOAMNw9rIOht4dAi0D0JBl4f7csRpESmLWL71aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:3c:e9:54:19:af:b2:0a:2a:fe:30:c8:99:6b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Aug 4 08:01:07 2025 GMT
Not After : Aug 5 08:01:07 2025 GMT
Subject: CN=3aa96dae4643446d33a631d1d2bf4d4d8cc083d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:d5:70:33:12:61:2b:07:6d:88:59:e6:18:
21:8d:fa:33:d6:52:0b:a6:ac:29:8c:1b:18:52:7d:
fb:98:d3:50:b3:f0:33:49:a4:92:1b:3d:58:ff:94:
f1:09:3d:0a:b5:76:38:dc:6b:5c:da:f9:51:55:d8:
c4:eb:01:fb:1b:fb:e7:83:77:75:76:b0:05:19:79:
55:7b:fe:45:b1:5a:63:c2:94:b4:1c:b3:da:d1:aa:
12:16:df:40:bd:dc:90:bb:ad:ba:77:76:0c:1b:36:
e0:05:e8:e7:7a:bc:5c:c3:a9:43:60:26:48:f9:83:
e1:16:0e:80:47:71:d9:f6:b6:a8:56:b1:9e:b3:64:
23:8c:d0:03:d6:cc:cf:86:af:d7:db:4f:61:76:57:
83:29:44:3f:0c:f8:70:92:6b:03:97:b2:2d:e5:81:
77:e9:83:f8:66:d7:e7:97:73:d5:b9:66:ed:b6:89:
42:3f:6f:7a:9f:5e:9b:39:8e:58:86:96:2f:f0:19:
64:23:1e:ca:0c:e7:16:4b:70:d5:5f:22:88:01:80:
32:6b:92:15:ac:b7:47:17:e1:99:eb:b6:fc:51:4e:
ff:b7:1e:6b:1f:43:30:22:b7:93:bd:0e:0e:f8:10:
2d:86:0a:32:f8:1d:c4:57:95:63:ad:c7:66:18:ca:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:6D:AE:46:43:44:6D:33:A6:31:D1:D2:BF:4D:4D:8C:C0:83:D8
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:9f:31:1c:18:c7:67:b6:ce:43:67:8b:34:7d:e2:78:cf:
00:57:5c:d7:ee:4d:41:c7:94:ff:a2:40:58:20:c9:2a:d8:59:
29:35:d3:04:9a:e0:ad:e1:82:11:0c:7f:6c:7a:4a:19:86:66:
58:8d:0e:58:9a:45:50:0c:b6:06:77:2f:1a:53:d7:ae:97:74:
8f:f4:4e:b8:74:8f:4e:30:8e:ba:ad:b8:fc:52:f3:c5:41:2e:
da:9b:3e:d0:6c:77:3e:59:73:2c:d2:48:78:19:0c:99:2f:06:
b9:f4:e6:a9:ae:a4:87:40:ad:69:f9:66:e5:47:6d:c8:7e:9a:
53:54:47:1e:11:52:16:45:fc:1d:2b:2a:30:b0:d3:a0:a1:a5:
d5:35:33:3a:7e:fd:7d:86:0d:f1:8e:6b:d8:c4:82:a0:e0:6e:
46:39:37:a4:58:55:a4:c6:2d:83:fb:e7:0a:1e:22:69:c4:a5:
ae:5b:50:09:0b:ee:f5:c8:14:87:4e:68:a8:05:1f:0c:49:e3:
eb:43:63:eb:c6:4b:bc:f0:da:3b:8a:f0:6e:cf:89:fa:87:69:
92:fe:96:b6:53:59:6f:e8:e0:5d:b6:66:17:24:36:e1:ee:5b:
8f:42:d1:0e:fa:e0:3a:9f:46:de:ca:3d:8a:c5:25:20:f1:27:
18:eb:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:12 2025 by rpki-client