Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: uLOaO29SyizNK2gDMpxXgOGjQ47BRZSHrRhEnNVROCo=
Subject key identifier: 9F:5A:8A:90:0C:9E:34:5E:0E:29:19:68:71:16:B9:2A:95:35:0C:7C
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 01987D8B18482098C33773A0FE6DA8EFCEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 04:02:04 +0000
Manifest this update: Wed 06 Aug 2025 04:02:04 +0000
Manifest next update: Thu 07 Aug 2025 04:02:04 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: vqDQBHCudOWkBNpjUdu7tOYuFiuKxv4ef8//kATKh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:18:48:20:98:c3:37:73:a0:fe:6d:a8:ef:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Aug 6 04:02:04 2025 GMT
Not After : Aug 7 04:02:04 2025 GMT
Subject: CN=9f5a8a900c9e345e0e2919687116b92a95350c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:39:ce:7e:f4:bd:e3:bd:93:0d:8c:47:31:
6f:f5:51:f3:2f:fa:2d:c3:83:31:8d:a9:bc:94:02:
93:61:38:45:c7:ae:b1:1f:e8:ca:76:4e:28:81:be:
23:50:bc:ac:c1:2c:db:40:95:b3:d6:9f:fa:c9:50:
11:b3:af:72:22:89:14:0e:de:f5:cb:e1:e9:62:6b:
25:01:a2:b4:aa:cc:93:93:ba:6e:63:dd:29:ae:a9:
6f:98:74:df:1a:a1:de:31:8c:22:46:da:e9:57:c9:
ab:a5:0a:99:85:a1:f9:82:0b:01:28:96:1f:e7:72:
98:6e:b9:dd:c1:45:f2:7b:1e:bc:de:a3:dc:01:e3:
87:98:1e:96:1a:91:a5:27:7c:d6:d5:31:1a:c0:f4:
a4:ca:25:01:ff:6b:3d:68:d5:1f:95:a8:12:ed:aa:
99:aa:1e:9f:da:96:1f:15:1e:9e:74:66:d4:97:2d:
0d:16:f1:e9:10:33:d3:28:bf:3d:14:25:5d:87:ea:
9c:16:a3:53:8f:05:61:f4:ce:a4:fc:64:1d:07:60:
04:86:c0:97:f2:ee:e5:30:d3:26:78:2b:83:44:ed:
06:89:28:2c:36:87:78:f9:0e:0d:4a:9a:fd:d7:3a:
41:db:e9:db:2d:f1:19:ea:51:fc:60:94:c4:3a:e1:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:8A:90:0C:9E:34:5E:0E:29:19:68:71:16:B9:2A:95:35:0C:7C
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c2:ee:73:1e:63:3f:a9:ae:67:63:66:d9:4d:2f:d1:a9:cd:
f4:4e:21:a8:3f:ff:4f:fe:bd:9a:2f:0a:66:94:82:96:3a:c6:
39:76:f9:76:17:17:4a:97:81:6e:7a:06:7f:66:30:60:31:e8:
e7:6d:c3:2b:b6:f7:e2:7d:91:cf:9d:8b:41:96:35:75:51:18:
92:18:c6:fe:09:97:a2:0b:ff:04:ab:b2:bc:fb:ed:c1:bb:5b:
72:fa:c3:63:e5:3b:80:7f:c7:98:87:a4:60:17:49:2d:6c:2f:
21:6c:ef:67:1f:69:26:44:90:23:0e:00:27:1b:85:e0:70:8e:
c1:e0:c5:11:db:73:c3:be:8b:17:14:fe:03:b3:58:f0:62:11:
a6:8b:c0:e9:85:fd:75:21:44:ed:c2:f0:84:00:40:41:0e:8b:
7c:7b:b8:b3:3e:eb:59:dc:62:05:c5:35:52:50:e9:69:33:c6:
3d:8f:3a:a1:e9:4e:9d:af:0c:f3:4e:b0:c1:f1:b4:74:bf:56:
0d:be:d0:a8:25:2c:36:4f:bf:cb:12:b2:06:ab:06:b5:bd:cb:
85:0b:43:9d:1e:51:46:94:cf:5c:2b:a2:fe:41:19:b0:7a:69:
87:1a:11:7f:7f:4b:64:2f:20:6b:ce:fa:83:87:66:80:ad:e0:
c4:66:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:33 2025 by rpki-client