Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File: RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier: H9iD82BzNrMHPw8yXQSKLrrNePsauXJvjj9o66PaZWY=
Subject key identifier: 3B:1E:A3:77:28:51:66:DB:B9:52:9A:C3:54:DC:D8:07:F1:FC:6A:89
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer: /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial: 019895FFF063DEB3EC6E4D854476ECD07AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number: 0A52
Signing time: Sun 10 Aug 2025 22:00:35 +0000
Manifest this update: Sun 10 Aug 2025 22:00:35 +0000
Manifest next update: Mon 11 Aug 2025 22:00:35 +0000
Files and hashes: 1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: jPFJ6/PT5tDisrHAwUrWVlt3rzFHF6uIJ/oHjwhbXts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:f0:63:de:b3:ec:6e:4d:85:44:76:ec:d0:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Validity
Not Before: Aug 10 22:00:35 2025 GMT
Not After : Aug 11 22:00:35 2025 GMT
Subject: CN=3b1ea377285166dbb9529ac354dcd807f1fc6a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:fd:bb:42:b3:b9:d4:c2:49:7c:17:55:91:
c6:38:e9:18:13:89:b4:3e:ef:a2:a5:89:73:0f:b1:
04:10:1f:5f:68:f5:97:f1:48:23:eb:52:bb:0e:bf:
8a:75:2b:96:b2:b6:50:27:87:e4:ae:91:18:57:b3:
3c:cf:4b:9f:83:ba:ef:52:11:a3:e3:0d:24:23:eb:
c1:42:b0:22:90:d2:a9:eb:c5:4d:e2:b0:60:f8:96:
77:46:87:fc:55:8a:53:b2:b2:b1:83:d8:0a:39:49:
6c:a1:35:52:df:0c:01:c5:af:9d:c4:0d:fc:ac:08:
90:e7:a2:50:f0:4a:43:9f:73:82:f2:b0:c8:ea:51:
9d:a8:8e:7e:0b:5a:6d:da:74:bd:57:fc:f1:06:35:
c5:27:79:38:ce:6f:95:05:d4:b6:8a:f0:bb:89:75:
92:87:8e:7f:5b:26:b0:fc:72:74:0a:a8:2b:93:3f:
4f:87:88:ee:64:a8:e4:e5:e1:ff:d2:93:c2:67:34:
cb:da:6e:a6:21:59:4d:68:4c:87:26:5d:ab:5e:6f:
76:dd:51:01:1a:12:46:bf:db:33:06:c1:57:18:bb:
0b:d5:16:2c:31:e3:8f:e9:d3:39:ee:8d:d2:85:f1:
22:de:e4:71:6c:f4:d2:d8:4e:86:75:97:e8:2f:5d:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:A3:77:28:51:66:DB:B9:52:9A:C3:54:DC:D8:07:F1:FC:6A:89
X509v3 Authority Key Identifier:
keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:86:ea:d5:ce:e1:03:73:03:c0:61:cf:1e:cc:22:85:94:f0:
74:5f:49:3d:fb:e3:a8:57:11:4b:dc:db:11:a7:07:f1:ca:ac:
60:f0:54:e4:db:b3:96:8c:16:d0:65:0a:25:11:34:2b:37:dc:
4a:3d:10:6b:01:3c:3a:cc:b1:0a:cb:a9:68:5a:8d:fc:be:44:
c8:11:a6:c8:05:dc:6e:66:be:cf:fa:17:79:02:c8:e7:3d:b9:
93:24:ca:b9:11:92:48:8d:fe:1d:1d:eb:9a:59:b6:cd:4b:f0:
d4:9b:2e:06:eb:aa:7a:80:ba:47:b1:d3:a6:ec:42:a5:a8:2a:
ce:3a:0e:e2:b5:c2:6f:36:37:18:b8:2b:58:91:17:37:ef:42:
35:1b:fb:c3:14:1f:36:5e:e8:8f:4a:4f:8e:65:1e:b8:b6:c1:
84:85:8b:ae:b4:80:0b:a3:0f:71:da:07:a1:a0:24:e5:ea:b1:
f3:f5:f6:69:14:31:91:34:1f:78:de:55:9a:f6:15:d2:e8:e3:
7e:78:43:14:02:14:3c:89:8a:3c:3e:78:8a:d2:7c:fc:eb:b9:
18:ce:59:78:bd:fa:db:fd:cb:3a:2c:04:ac:22:a6:68:7f:83:
7d:a6:7a:9c:1f:02:2c:f9:8e:9f:4e:88:4c:0f:51:e2:b1:b4:
06:5f:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:07:05 2025 by rpki-client