Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: s2C1cc2eb8p1O9VCd6Z/Qupc10QX7nujEYNYnZTrq8g=
Subject key identifier: B7:A7:AB:06:A1:6C:F1:16:67:A9:95:23:53:09:2F:93:30:72:19:8F
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 01989CDEAEB3397DDC6DD1EAA4CAF85CB1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 15BB
Signing time: Tue 12 Aug 2025 06:01:36 +0000
Manifest this update: Tue 12 Aug 2025 06:01:36 +0000
Manifest next update: Wed 13 Aug 2025 06:01:36 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: QFAIUCF/sNZX2YXTWRDalcaWU7ePrdJE8ICNO2CvFFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:de:ae:b3:39:7d:dc:6d:d1:ea:a4:ca:f8:5c:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Aug 12 06:01:36 2025 GMT
Not After : Aug 13 06:01:36 2025 GMT
Subject: CN=b7a7ab06a16cf11667a9952353092f933072198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:90:fa:2a:69:0c:8a:05:2b:6a:a8:a0:ec:
b6:e2:4c:7a:05:14:d3:d7:ea:fd:e9:9b:76:81:a2:
4e:dc:9b:60:d9:a7:4e:67:70:62:e1:71:18:7d:7d:
c4:b1:9f:32:95:5a:50:23:5a:82:70:83:95:17:ad:
53:86:66:ed:34:45:fa:d9:d7:cd:2a:45:64:a8:91:
8c:8d:8a:a8:82:13:79:9f:e4:fb:06:fe:80:6d:58:
42:62:d7:f5:5b:8b:91:a3:92:56:5c:b1:49:6c:61:
3f:88:fa:17:c4:1c:70:a7:36:e9:95:e3:b0:14:4e:
8e:50:ec:56:96:ff:02:d7:9c:33:75:b5:c6:a8:65:
df:1d:18:de:d1:7f:3f:e0:e1:90:4a:dc:95:90:64:
31:23:3e:e2:12:d8:05:74:9d:15:26:9a:e1:7c:33:
c0:87:53:dd:34:76:97:7c:e6:9e:74:a1:5a:cf:ce:
7f:e5:23:89:d8:0f:ec:f1:46:dc:c2:57:25:29:37:
cd:34:ff:37:fb:94:64:57:e2:11:6d:c2:d5:fc:b5:
86:70:9f:6c:3f:8f:56:3f:c3:c3:93:f2:ca:0d:ba:
a2:30:45:e5:5e:f5:51:40:1e:75:02:1f:d5:bf:4d:
ed:8b:07:90:e5:79:75:f0:70:7d:33:1f:1f:81:3d:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:AB:06:A1:6C:F1:16:67:A9:95:23:53:09:2F:93:30:72:19:8F
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:18:d6:d8:a4:0d:04:5c:0d:5e:d5:58:17:2f:eb:16:de:a0:
f9:70:11:19:54:7e:c5:be:60:45:38:49:04:9f:6e:bc:cc:fa:
03:87:37:3c:78:8f:0a:e7:22:07:4f:41:ff:59:00:d7:85:c7:
f3:a3:93:c3:d0:34:5c:3a:4a:28:b3:31:39:37:b0:a1:ce:31:
45:2b:34:aa:4b:cb:ad:a7:58:7b:b3:ae:99:21:7e:0e:ab:77:
4d:46:48:2c:22:7e:eb:ea:8a:80:73:5c:da:eb:95:7a:1e:65:
73:af:c2:1b:64:88:b0:e6:c0:60:1c:df:84:13:ff:bb:59:8d:
b5:8e:f0:ff:cf:43:9f:9e:2c:dc:f7:35:37:f8:5a:77:17:8a:
f2:f6:d5:26:dd:c8:d7:ce:a8:a3:b3:3d:c5:a1:65:b8:99:26:
4e:6b:60:d4:2a:fd:bb:1c:0d:7e:53:b3:94:3a:10:80:8c:38:
c1:df:cb:93:0d:fd:57:88:22:f6:26:75:23:3c:dc:33:cb:c4:
c3:91:8e:76:8c:1f:7a:d0:d2:a1:ea:b4:83:3e:73:b8:37:1f:
9d:e6:05:3c:72:ce:57:0f:0a:99:2a:eb:38:d7:6c:fe:4f:3f:
bc:86:e7:ee:41:ea:5d:d5:38:be:70:47:a6:cf:51:c5:cf:67:
e9:4b:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:31 2025 by rpki-client