Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: V7Oh+02LUIvA2DvpaO1lQ6g3v5KZG4/s/TsYMD85HYA=
Subject key identifier: 06:F9:96:D2:D7:D8:CF:0A:F7:64:8B:A4:65:3C:13:0E:6C:0C:D3:C3
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 019848C028118CA9184C9F6221953673DABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 047A
Signing time: Sat 26 Jul 2025 22:00:09 +0000
Manifest this update: Sat 26 Jul 2025 22:00:09 +0000
Manifest next update: Sun 27 Jul 2025 22:00:09 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: AacYtn1roghLxuD+egBWNjXRquZSKqBRxX0HiFBCZaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:28:11:8c:a9:18:4c:9f:62:21:95:36:73:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Jul 26 22:00:09 2025 GMT
Not After : Jul 27 22:00:09 2025 GMT
Subject: CN=06f996d2d7d8cf0af7648ba4653c130e6c0cd3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:8c:bc:14:68:e0:36:e0:68:aa:52:4c:1e:
fc:57:f1:24:74:f9:56:6e:4e:5c:fb:00:98:c6:ff:
76:33:d0:c7:7b:5f:cc:8b:41:f6:ed:22:0f:95:b7:
ea:62:76:43:6a:15:32:1a:19:70:ed:c8:76:20:b5:
46:e9:db:49:60:b5:b4:db:fd:79:66:16:0c:43:2c:
bf:60:74:68:2d:ae:f7:fc:c0:83:6b:9b:7d:e1:06:
d3:5d:06:9f:bd:51:d0:74:79:11:5b:24:87:38:f2:
34:72:3d:17:d4:81:9d:12:e3:8b:e3:0c:b0:e2:07:
56:c0:3d:b9:91:9e:ef:85:1e:c5:c6:a7:38:7d:6b:
6a:dc:85:bc:96:6f:ee:89:ad:31:6a:7e:30:59:e2:
07:77:ad:df:75:d0:e8:4a:2e:97:32:cb:90:35:4c:
0f:5a:cd:fd:41:dd:32:26:80:02:b1:7d:c5:79:40:
b8:15:61:43:5e:82:cb:ba:2e:24:5d:2a:33:75:a6:
f9:a6:c3:40:6e:ac:6a:4d:4b:b0:70:46:ad:88:6c:
55:32:d8:04:ad:e0:9b:74:f6:f5:fd:b7:eb:1c:7d:
75:4f:9f:45:40:7d:3c:59:c8:94:f7:3c:d7:81:ea:
b9:d7:ce:29:a7:8e:da:c1:51:61:88:46:83:e1:24:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:96:D2:D7:D8:CF:0A:F7:64:8B:A4:65:3C:13:0E:6C:0C:D3:C3
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b9:72:cf:32:d9:5f:a8:9a:22:78:d3:e5:5f:24:9b:24:fe:
bc:87:5e:6b:c8:da:81:19:db:7e:ce:c2:25:44:e4:91:4e:4c:
3e:c1:cc:e7:63:15:93:03:9f:5e:c3:f7:c7:cb:91:2a:3d:0d:
9e:d9:91:ed:cd:1a:84:76:30:7b:39:d3:c7:d0:dd:42:29:f1:
3c:f4:37:0c:3e:4b:92:7c:42:68:e7:6d:f2:f2:33:30:9b:95:
db:d2:b8:2c:d0:0b:5c:83:cf:ba:9e:d3:aa:18:00:52:57:f0:
d9:c4:65:50:09:0d:52:c6:70:f6:42:73:59:c0:42:5a:16:dd:
5f:db:49:0f:3b:e0:12:64:dc:d5:21:4b:3f:24:45:08:a9:cc:
60:ef:d3:b1:c6:35:a7:f8:85:de:4f:3b:f4:cd:d7:42:fb:61:
47:5c:8e:03:c5:19:fd:8c:5e:77:3d:07:81:e4:66:c9:99:4e:
c4:86:ef:ed:fa:12:ff:47:79:1b:b0:41:c2:c7:29:dd:fc:a0:
57:62:d9:f2:ec:4d:49:bc:3f:d2:8f:de:a7:25:12:55:a1:c7:
86:36:34:e8:5f:c6:75:5e:36:ea:24:e3:6e:56:64:7d:d7:b0:
18:5f:d0:64:6f:df:eb:35:30:dd:f3:22:83:47:20:e5:27:ed:
62:c4:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:51 2025 by rpki-client