Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: S4OWUKomFZneEbVcS4anXdql2UjNLsF++U83HuvIFeY=
Subject key identifier: D1:7A:18:80:69:29:0C:EA:34:DF:77:C6:41:2B:94:89:0C:AC:70:EC
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 0198537B3690D0B5A5B6008533AC4B66FC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0862
Signing time: Tue 29 Jul 2025 00:00:40 +0000
Manifest this update: Tue 29 Jul 2025 00:00:40 +0000
Manifest next update: Wed 30 Jul 2025 00:00:40 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: fzzOnYGqnBwBG5NcZ3SzqaIlqnYWhZci3ugP3zNdka8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:36:90:d0:b5:a5:b6:00:85:33:ac:4b:66:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Jul 29 00:00:40 2025 GMT
Not After : Jul 30 00:00:40 2025 GMT
Subject: CN=d17a188069290cea34df77c6412b94890cac70ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:4c:be:af:a8:5a:b4:0e:63:f5:da:1b:7f:
0e:23:23:c7:1e:a2:21:c3:21:6d:a3:80:f2:30:17:
4a:44:33:c7:92:b1:b8:6a:94:57:02:ab:ae:0f:a0:
67:aa:bf:d7:87:db:e8:8e:c9:51:fb:e9:83:a2:6a:
c9:21:c2:92:1d:b4:44:9f:f1:5c:42:33:e8:3a:b0:
2c:ca:ee:b7:e9:6e:ca:93:b5:56:4d:cb:d1:7f:db:
c2:15:33:71:53:c5:a5:a6:56:f6:a1:34:12:01:90:
5e:b7:3b:78:c9:44:5f:ac:58:d9:25:ac:81:5b:f7:
80:8c:9d:f9:99:08:ca:56:c1:80:89:06:0d:a3:3e:
8d:b0:b0:c9:68:21:3f:35:5c:45:42:95:b0:77:30:
32:08:fa:72:0a:d3:7d:b5:de:aa:a5:f5:61:5d:ea:
98:6c:40:68:49:8a:31:ee:30:ae:fe:71:9f:30:48:
5a:b5:4d:87:05:80:53:66:fe:31:bf:b8:43:61:18:
2f:29:04:e9:9f:b7:91:1b:57:1e:f5:24:97:43:61:
19:09:56:d2:c8:58:30:87:1f:3b:08:94:d6:21:8b:
32:f5:a8:21:63:ac:94:b6:bd:58:b6:7b:72:7a:56:
0a:41:69:cd:bb:6b:78:2e:64:2b:9d:17:dc:d1:d6:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:18:80:69:29:0C:EA:34:DF:77:C6:41:2B:94:89:0C:AC:70:EC
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b4:d3:20:6c:13:78:9f:48:c3:27:3d:2f:6e:e6:75:41:c9:
8b:a6:3f:13:5f:ad:80:91:1a:31:a7:99:a5:e4:58:75:5d:53:
1d:7d:8e:11:e0:7d:d1:70:22:b8:6d:56:66:f3:23:cd:52:0d:
56:bf:d4:b8:fd:05:0c:b5:e2:8b:bc:df:b0:68:50:29:00:db:
ca:e5:41:1c:cf:2f:3c:f3:24:66:42:71:db:4b:ff:8e:00:5b:
8f:8d:e2:cb:e6:11:f5:ec:b5:b1:e7:f1:f0:f2:96:68:52:d0:
47:55:02:aa:d3:f8:d0:53:47:ba:b3:8c:1c:a7:b6:d3:65:35:
84:50:8c:d3:c7:6a:04:20:50:4b:88:4a:e8:b5:c0:b4:6f:11:
98:68:0e:97:f1:5f:2d:36:b9:d7:df:85:9d:b2:67:cb:a9:02:
e3:25:86:02:f8:af:76:13:47:e7:d2:a9:82:0a:e4:62:19:bd:
dd:3b:7a:b5:56:65:c0:8b:3b:0e:fa:a7:c4:41:65:ae:21:0b:
53:6a:16:18:0a:03:14:68:e7:c3:e6:de:90:25:63:2d:af:5e:
b7:37:89:d6:06:db:66:fc:f1:41:7c:08:b5:23:95:9e:03:67:
f8:94:62:b6:7c:ef:23:5e:19:73:27:2d:ff:38:72:0b:26:48:
27:9e:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:51 2025 by rpki-client