Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: USCK3W91Nj+d1LbPZAr2Dlc3wjcGa9xSY/7Xlevu70E=
Subject key identifier: 75:86:11:CF:C0:57:6C:17:FF:2A:4E:FD:05:29:78:98:1F:BA:02:CA
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 01989148401F2122071A6C9F44091927BB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 12B7
Signing time: Sun 10 Aug 2025 00:01:27 +0000
Manifest this update: Sun 10 Aug 2025 00:01:27 +0000
Manifest next update: Mon 11 Aug 2025 00:01:27 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: /FvrEn6QLPxpmL1n/KR0JcOiMNYd0aGNx0RGrt5PucM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:40:1f:21:22:07:1a:6c:9f:44:09:19:27:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Aug 10 00:01:27 2025 GMT
Not After : Aug 11 00:01:27 2025 GMT
Subject: CN=758611cfc0576c17ff2a4efd052978981fba02ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:69:6a:fa:5a:78:83:b4:4f:9b:0c:90:44:
98:6a:54:00:b4:44:d0:8e:4b:fe:16:ee:03:ae:8b:
23:18:fa:fb:be:5c:6b:bc:09:ca:ab:f4:c3:87:b4:
7a:5d:a0:f9:6c:14:1a:90:fb:b9:93:12:79:55:3c:
0e:41:c4:aa:59:21:19:32:1b:d6:de:14:e5:6e:b2:
9d:8a:3f:73:bd:c1:9a:62:1d:f5:96:39:da:4a:7a:
b3:0b:ab:bf:ec:f5:3c:9d:b6:ba:86:eb:9a:83:58:
7b:94:27:35:c5:26:8b:6c:b5:ad:f2:59:1d:54:52:
30:0a:b3:6c:4a:a6:d4:f5:a4:8e:f6:1f:0d:d8:43:
18:f8:64:e4:93:a7:75:96:02:9b:da:9c:11:ca:f8:
72:4f:97:53:ac:bc:3c:f4:4c:0d:73:bd:0d:56:bc:
03:57:bf:85:79:37:97:9f:3e:8c:31:42:ef:77:dc:
28:ca:c6:83:ad:20:02:ca:63:26:80:d0:d5:75:eb:
56:ea:0e:d2:e0:fd:00:97:e6:fa:62:d4:3e:5a:dd:
cf:49:69:f2:b6:78:ad:c0:71:97:f6:38:76:1c:b1:
da:93:1d:ca:a3:68:f3:34:0b:61:03:78:1a:09:1f:
fa:06:93:4d:c7:e0:e6:b5:49:3e:42:27:e3:4b:18:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:11:CF:C0:57:6C:17:FF:2A:4E:FD:05:29:78:98:1F:BA:02:CA
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:98:65:53:c9:77:96:01:ac:04:06:8b:78:80:3d:99:61:
7c:bb:58:66:89:e1:d1:58:95:8c:d2:41:54:05:c9:c7:7e:d4:
57:32:9c:8f:ac:db:da:f0:51:8b:98:ee:47:51:44:0f:3a:c5:
cf:a3:1e:65:7e:1d:e9:cf:e1:6c:e0:60:38:9b:10:90:62:29:
7e:54:db:ef:9e:5f:d7:1e:d9:dd:85:8a:5c:df:05:fa:09:d4:
42:cc:b2:76:3d:b7:70:ed:51:f6:e0:36:ab:28:ff:0b:34:2e:
da:d2:23:fb:70:84:69:8b:b6:be:ca:0c:d6:1c:77:72:ad:15:
ea:12:43:b7:d9:8e:ef:2c:77:c0:4b:04:0e:40:14:3f:2a:1a:
0d:8f:d9:a7:b1:38:46:0d:bb:86:bf:89:20:9e:5e:91:7a:d9:
59:e0:dc:f2:35:03:6b:96:35:f9:df:53:ad:1c:01:b2:46:82:
ba:c7:12:c6:54:ad:dd:c6:91:36:b5:81:a6:40:d2:06:d1:f1:
14:67:c2:ed:49:a3:c2:66:6b:d7:14:99:bf:41:ec:dd:93:25:
e4:5b:b1:6c:27:8c:bb:55:e1:8f:76:71:b0:7c:fe:e7:4f:2c:
ef:d4:20:e4:99:50:85:a2:cc:a1:50:44:d4:4a:0c:41:90:03:
61:30:de:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:26 2025 by rpki-client