Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: +jgZ0+x6P7H8V6xq/O9+hvQapwH9kbQriZ3ymHyRCp4=
Subject key identifier: FC:C2:70:82:E9:01:FB:9D:C8:1D:E5:4B:A7:87:38:1F:9D:5B:2D:F3
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 01989FA7D5E25C1F568CC1343C8E0B15A84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0269
Signing time: Tue 12 Aug 2025 19:00:33 +0000
Manifest this update: Tue 12 Aug 2025 19:00:33 +0000
Manifest next update: Wed 13 Aug 2025 19:00:33 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: Q1z4AMOaaWEcGv/t1RAhxp4F8BVDYBDOA2fI0MhN3y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a7:d5:e2:5c:1f:56:8c:c1:34:3c:8e:0b:15:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Aug 12 19:00:33 2025 GMT
Not After : Aug 13 19:00:33 2025 GMT
Subject: CN=fcc27082e901fb9dc81de54ba787381f9d5b2df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:ba:59:4d:1d:ca:9b:2e:5a:4b:9a:c0:13:
08:2f:06:10:82:8b:97:3b:51:10:06:9d:d2:40:d7:
d1:68:ec:78:ba:67:c9:4c:04:fe:05:b4:f5:a4:19:
82:c1:aa:37:f2:3c:8b:ee:88:a6:b3:c0:45:58:68:
1e:cc:11:51:59:86:3b:0b:e5:0f:90:bd:ef:49:5d:
30:c1:26:ca:92:ea:6d:5e:a5:04:11:39:f1:ee:99:
fc:bf:e0:5b:96:c6:b0:62:ac:9d:ac:2c:89:9b:8c:
54:61:dd:6a:b4:82:f4:25:ef:63:66:03:cf:65:5f:
fe:fb:21:af:0d:b5:d6:d4:3b:7a:4d:3a:11:bf:5a:
4b:32:aa:e6:9a:02:b3:2a:30:0a:da:9e:ac:f9:2b:
11:f7:5b:db:e2:64:fd:d8:eb:9e:72:54:1c:24:b3:
a2:52:6b:e4:bb:08:d5:04:08:c3:d5:a4:7b:0a:46:
1c:d9:71:73:78:58:57:06:85:ac:a3:f6:88:6a:2d:
6b:48:af:c3:20:f3:b3:75:91:e0:45:87:37:d8:dd:
28:46:cd:72:6e:5b:8b:b5:8e:68:ad:9a:ce:ec:b7:
8f:48:fb:b3:f0:7f:ca:d4:46:63:9f:c5:9a:41:b1:
cf:07:6b:7e:ac:c4:80:aa:43:ae:05:3c:3b:d4:bb:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:70:82:E9:01:FB:9D:C8:1D:E5:4B:A7:87:38:1F:9D:5B:2D:F3
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:97:4e:57:e3:15:9b:9e:1a:75:4f:b7:92:66:cc:14:b7:
56:7c:6b:ed:44:af:79:35:73:36:c7:a0:d7:60:01:9b:f9:c8:
6e:dc:b7:37:b7:0e:f5:97:23:49:79:4e:6e:f1:46:70:21:25:
65:23:91:c5:c4:61:46:54:e7:06:0f:9f:35:fc:23:a4:79:60:
dc:d7:2f:6c:ce:60:2e:a1:25:c4:f8:73:f0:ae:67:d8:4a:3a:
fc:86:c6:a4:9e:53:65:82:90:4c:94:e6:5f:c3:cc:ab:28:54:
5a:a9:9b:9d:88:ec:a6:0a:71:aa:0f:d7:49:31:05:85:e7:92:
39:3a:f5:4c:f6:f4:10:31:c7:b9:20:82:07:34:79:7d:81:bd:
87:9c:9e:84:43:17:4c:39:be:4b:11:66:79:7b:07:58:78:70:
fc:cb:c9:1b:ea:b5:60:bb:6f:3f:2e:e5:b4:95:1a:24:b6:d0:
fe:44:42:13:18:45:a5:f8:dd:51:c0:40:48:e2:fa:59:60:5c:
f4:a3:42:1b:b8:22:81:30:bc:28:23:94:74:22:1e:25:bc:f1:
5d:92:4f:1b:85:60:de:76:49:e1:3b:c9:69:0b:6f:d3:10:6a:
d8:ab:37:a0:75:4e:d5:bb:1c:91:c1:ab:2e:18:bd:65:99:aa:
2d:cc:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:16 2025 by rpki-client