Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: KOdcMEpRPEPDyiW9AxnJef2+raOFScAp4FHv3aRbX24=
Subject key identifier: F7:82:1F:20:0C:E0:ED:98:3B:A9:FB:31:C6:65:00:D0:11:B2:1E:4F
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019896A5EE3CB6A904B3BC57B68C28C6521A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:01:53 +0000
Manifest this update: Mon 11 Aug 2025 01:01:53 +0000
Manifest next update: Tue 12 Aug 2025 01:01:53 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: 80cYX/17vielORTWe+3YEwMIWUmX5k9S9z8siT2fzLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:ee:3c:b6:a9:04:b3:bc:57:b6:8c:28:c6:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Aug 11 01:01:53 2025 GMT
Not After : Aug 12 01:01:53 2025 GMT
Subject: CN=f7821f200ce0ed983ba9fb31c66500d011b21e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:a3:04:98:37:ab:51:e5:ca:e9:18:46:0d:
ab:40:64:d0:27:a3:b8:93:24:fa:be:aa:ce:cd:fb:
0f:27:45:be:c7:59:e6:b4:94:e3:75:af:b7:2c:60:
6b:8a:9a:ed:35:8a:45:25:83:b5:d5:bf:73:98:05:
77:90:3b:32:a0:ac:7c:d7:d1:5c:80:fe:9c:dc:ea:
85:5e:1d:f2:23:cd:6c:da:0f:c5:1b:33:d3:d7:8f:
bc:e1:11:e4:a3:05:91:1a:ec:9f:74:cc:ed:4f:63:
8e:f7:1c:c0:54:35:c9:8b:fc:57:a9:8c:55:3b:39:
2f:da:8f:16:c0:27:47:7d:29:c5:7a:e8:a5:01:a4:
76:15:3f:ff:97:e9:0e:2e:47:d1:19:c2:23:f3:d1:
3c:c7:fe:db:ef:da:5d:d7:3e:73:76:52:47:2f:80:
7e:be:0e:ac:a4:e9:dc:2f:9e:a9:84:13:93:de:1e:
d7:a7:60:0a:2f:7b:da:34:93:29:6e:53:df:c0:cd:
89:95:d6:aa:67:72:e4:5c:f4:17:cb:28:13:99:41:
47:d1:be:ed:fa:06:24:a0:42:e9:ac:f5:11:34:29:
88:24:de:3f:08:0c:e9:d9:ba:8d:7d:34:b7:20:9e:
8b:34:dd:74:9e:52:31:ff:98:d7:15:cc:05:2c:4d:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:1F:20:0C:E0:ED:98:3B:A9:FB:31:C6:65:00:D0:11:B2:1E:4F
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:c4:4c:a9:82:f3:31:28:16:2a:ea:b4:35:52:f6:b9:46:
1a:1f:59:e4:23:52:04:87:f4:c0:7b:e1:36:9a:96:9a:1f:63:
bd:fc:6d:46:b5:a7:44:0b:a0:64:7c:a6:e1:bb:ff:11:7a:0d:
40:71:ea:e8:90:a5:37:9a:30:84:b5:9f:4b:6a:c0:69:97:d8:
68:ab:9a:74:07:1c:eb:c1:0a:b6:83:d2:d7:16:27:f6:82:f1:
2c:c1:f3:f2:1e:e7:66:23:66:db:03:d5:c8:0a:ea:42:5e:55:
43:a9:b8:d4:f5:b8:31:67:02:f1:a9:55:08:cb:ae:ec:23:cc:
ae:24:78:1a:a1:14:51:52:88:a6:ef:15:06:f3:22:a8:31:ea:
1b:cd:f8:8d:df:5c:bf:e2:47:71:46:15:fb:2c:18:84:28:35:
4c:36:dd:c9:4d:34:f9:cb:51:a5:ce:a0:9c:20:c4:a5:8e:03:
39:55:e8:d0:8b:b6:3c:1c:fc:b0:e9:84:29:95:9a:82:dc:6c:
fe:8c:d6:21:9e:36:2e:dc:05:73:97:37:7c:7b:fd:ab:f6:96:
58:0e:0c:aa:56:e6:20:d1:2b:6d:ed:f7:51:9d:de:79:e2:e9:
9a:64:4e:8d:69:d4:38:08:4a:3e:0f:f4:21:9b:68:91:f9:a1:
d0:a9:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:52 2025 by rpki-client