Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: XoitZLlQRo/bbgRIfgSkDsW3Oj8eaATtgf/O+rCV9tI=
Subject key identifier: 19:77:29:4A:18:57:7E:CD:52:C7:5F:6F:11:42:8C:C5:83:D9:94:14
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019895253D33842185CE42E0400C471B4491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0D0D
Signing time: Sun 10 Aug 2025 18:01:42 +0000
Manifest this update: Sun 10 Aug 2025 18:01:42 +0000
Manifest next update: Mon 11 Aug 2025 18:01:42 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: z3YI24jiqrQEdYpyOma+zCZn77YOIEea3VomKVdggWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:3d:33:84:21:85:ce:42:e0:40:0c:47:1b:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Aug 10 18:01:42 2025 GMT
Not After : Aug 11 18:01:42 2025 GMT
Subject: CN=1977294a18577ecd52c75f6f11428cc583d99414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:aa:43:5a:05:71:7b:11:30:a4:a6:6d:5c:
63:31:3d:ae:04:2e:13:6b:16:f0:75:08:07:17:14:
d9:46:4d:51:ec:78:45:da:54:ca:a0:90:1d:d3:67:
38:80:26:23:9c:63:4f:e5:ee:86:2d:e5:37:6e:bb:
82:d7:a9:30:5c:26:75:19:ba:a1:5a:6b:fa:17:5d:
b8:5f:10:b9:3b:bb:6f:43:03:1f:62:1a:ab:ca:d7:
ce:34:79:6f:25:f3:31:f4:f9:d8:f9:d2:78:6e:7e:
7a:4e:a2:26:20:45:b4:0b:34:3f:00:21:44:24:37:
b8:2d:f1:28:fd:d3:62:4a:8f:78:50:02:b5:71:2a:
9a:d3:96:8b:77:66:76:94:2d:10:f1:8b:b4:16:75:
74:0d:c2:7a:d1:7b:88:d3:2c:0b:fb:84:71:ea:2e:
28:e4:46:02:3c:54:93:59:a1:46:ba:ef:f5:b8:86:
0d:4d:2a:b4:49:56:a0:8a:80:ef:73:30:6a:3c:5c:
97:c1:d3:ff:4c:b6:c0:e1:78:ba:22:8a:ca:4a:27:
74:c6:39:67:2f:f3:42:da:2e:5b:84:89:1c:c8:90:
3b:17:bd:13:b6:be:e0:aa:4f:81:c0:d2:c5:93:d2:
7b:5c:6d:41:da:6b:9a:43:bc:0e:92:f5:d3:7c:52:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:77:29:4A:18:57:7E:CD:52:C7:5F:6F:11:42:8C:C5:83:D9:94:14
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:02:ca:17:e1:37:6d:b7:78:24:8f:38:5b:70:bf:78:cf:
ee:ec:3d:3e:92:59:68:d2:b4:62:d7:5c:46:49:db:43:bb:a9:
4d:e4:69:06:4b:4a:91:0e:08:fa:5d:df:92:2a:16:08:d4:83:
d6:ab:11:01:0a:94:08:aa:96:e4:d9:0d:68:0a:a9:2b:8b:61:
4e:67:2a:27:1c:49:41:a0:52:26:b5:f0:be:b5:81:c5:07:a8:
a5:09:1a:b8:8a:6f:d3:8a:00:64:1f:27:72:af:25:6e:6b:4a:
99:ce:9e:7c:73:55:d4:2c:23:6d:fc:58:3f:fe:38:f0:6b:f7:
02:81:52:26:20:21:dd:d2:85:83:08:70:8f:e9:88:00:9d:91:
88:42:fa:3a:0b:a3:d2:e5:85:e9:04:8f:72:4e:fd:11:13:4e:
c2:79:87:6f:80:9a:84:fe:f8:c0:4a:f1:5a:11:5b:11:d1:66:
56:27:55:de:72:5e:1b:03:db:da:bc:85:3e:87:58:65:78:3f:
dc:3f:fe:6f:fe:55:69:46:c1:de:1f:b0:67:73:8e:74:3b:45:
ad:b8:46:f6:d9:6d:09:50:9b:84:70:d2:53:0f:dd:e2:29:72:
44:69:3a:c3:f1:6b:19:60:ca:80:1a:89:7e:3c:a8:55:0e:b6:
cf:60:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:48 2025 by rpki-client