Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: WJMus26DVYVxxHKXE/Vig+dtuX1PRh351iQHK1rFE/I=
Subject key identifier: 65:CC:4A:74:59:76:B2:02:AA:7C:F5:A1:20:1C:4B:52:E8:5C:33:C2
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 019846D20AE338A3C241EDF9A12A6CF7D31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 0F31
Signing time: Sat 26 Jul 2025 13:00:27 +0000
Manifest this update: Sat 26 Jul 2025 13:00:27 +0000
Manifest next update: Sun 27 Jul 2025 13:00:27 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: 8lg5fdVhlmauvh+O11rqIvzp0ii89kOCHK69fRleiQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:0a:e3:38:a3:c2:41:ed:f9:a1:2a:6c:f7:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Jul 26 13:00:27 2025 GMT
Not After : Jul 27 13:00:27 2025 GMT
Subject: CN=65cc4a745976b202aa7cf5a1201c4b52e85c33c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:a9:7e:26:8c:cc:51:a8:92:c8:a1:f6:50:
70:a4:12:b9:a9:84:4d:60:0c:70:10:13:76:05:06:
a7:a1:3f:36:5f:91:75:ad:7c:38:5b:db:a6:17:01:
b7:5f:a3:a5:55:a3:75:ac:fa:db:c4:26:62:b5:76:
72:cc:fa:b3:00:74:49:63:b0:53:bf:e1:6a:bd:96:
b0:41:1b:8b:5e:44:84:00:36:53:7b:4e:52:7e:3d:
3d:63:ce:fa:19:ce:6c:bd:62:fe:af:71:21:04:94:
42:af:81:ac:69:aa:bc:ff:46:e2:fb:c1:6e:78:62:
ad:39:9d:27:43:dc:40:55:4f:b5:a5:a7:5f:52:7d:
50:ad:e4:af:05:84:f8:c0:d8:bb:23:3c:56:ed:96:
d0:f3:f8:a4:74:d9:d0:0f:41:29:4c:01:b9:14:48:
4e:d1:1a:e3:6f:29:18:d4:8a:bf:e1:0f:d6:6a:c5:
bd:f5:b7:47:9d:9d:83:1a:46:6b:09:c3:75:1e:d7:
d3:8f:93:a0:c6:3b:64:dd:c9:15:7e:41:6d:3d:a9:
c2:bb:fc:03:3f:83:0f:3d:54:af:fa:e0:70:ee:27:
af:f8:17:0b:4c:bc:54:2b:2b:cc:cc:bc:97:26:93:
e6:2a:2c:33:27:ed:61:20:e7:79:12:77:32:ed:60:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:4A:74:59:76:B2:02:AA:7C:F5:A1:20:1C:4B:52:E8:5C:33:C2
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3c:4f:f1:43:dd:5e:0d:d5:f4:b3:54:88:78:57:48:da:95:
d9:39:20:2a:5a:bf:df:2e:0f:ae:bb:f6:4b:f2:e7:52:13:87:
88:74:a8:f6:56:df:03:4e:b8:a5:b9:3d:dd:91:75:36:b4:41:
0c:6e:13:3e:60:0f:fe:ab:75:a2:b9:ba:e0:0a:dc:9d:c1:7c:
5d:e3:42:21:4e:e7:1a:61:d6:e1:ad:fe:c2:f8:6f:11:e5:9c:
c4:4b:0d:99:b9:f4:a5:cd:48:0f:15:b7:98:3a:b7:14:0c:38:
b3:7d:71:40:2f:e6:5f:da:f5:d0:1d:ec:9e:0e:a5:2c:ea:4b:
6d:b1:dc:65:36:e1:11:78:2d:d3:b6:1c:e1:4d:d9:60:02:f8:
8d:e9:39:48:c3:58:7c:d0:2e:b9:06:e0:00:21:a4:a0:ab:be:
d8:5d:b8:83:09:65:22:a2:03:bf:16:f7:b6:43:52:37:3d:20:
90:bf:bd:48:15:e8:d3:c2:36:71:8d:65:4c:3b:34:f0:28:b2:
86:a7:91:7f:13:a8:3f:a3:db:b2:20:b1:1f:9a:ac:f2:46:5f:
89:73:75:3f:a3:60:52:f1:80:88:a2:27:82:dd:8b:09:dc:de:
33:03:eb:81:ba:90:3f:d5:15:0f:86:ad:56:a1:c8:9b:82:51:
13:22:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:44:28 2025 by rpki-client