Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: iilAxH5m06QH0An2p3Ms10RQSlyuwYGlg2W1CYUZuag=
Subject key identifier: BE:DB:EF:B6:DF:A3:D8:8E:D1:99:A1:70:13:81:B1:BF:FE:E1:96:A2
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 01984A40C3CD41156292FAFC1CFF007998FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0C80
Signing time: Sun 27 Jul 2025 05:00:15 +0000
Manifest this update: Sun 27 Jul 2025 05:00:15 +0000
Manifest next update: Mon 28 Jul 2025 05:00:15 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: cGER9msqFptmEiM4mNF7UthklhwWCLudOwSlCgpL+5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c3:cd:41:15:62:92:fa:fc:1c:ff:00:79:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Jul 27 05:00:15 2025 GMT
Not After : Jul 28 05:00:15 2025 GMT
Subject: CN=bedbefb6dfa3d88ed199a1701381b1bffee196a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:7d:4e:42:2a:2e:e0:4c:f4:62:0a:36:e3:
56:3c:8e:ad:7f:56:da:9d:df:d9:46:e9:18:dc:d2:
d1:26:3c:d7:9c:b5:66:2f:9c:40:2f:fd:21:f2:f6:
c8:e6:44:06:fd:c1:c6:0f:34:3b:78:21:76:66:64:
e4:89:fb:06:6e:bf:c9:0a:f5:6e:63:e3:1b:49:9a:
df:c5:32:2a:a9:36:f3:03:bc:f0:dc:80:58:36:b5:
0d:44:50:9a:84:e0:ff:5a:04:c8:58:4e:d6:1a:1b:
43:7d:89:fb:23:80:29:3f:d6:d6:6f:6a:01:14:12:
d2:05:ac:b9:ed:ef:24:f4:db:47:b9:93:20:57:d9:
a0:af:38:3d:71:69:36:11:b5:5b:c9:8f:7b:47:67:
1d:36:a3:e9:36:42:f0:d4:ab:75:99:1f:fa:dd:7b:
0f:fc:e9:ac:23:36:d2:f8:97:b2:7c:8d:f5:33:0e:
52:93:2c:37:36:84:77:2c:c4:d2:eb:1f:31:eb:53:
56:38:fb:8f:77:be:5d:4d:c7:30:07:0e:57:1d:2e:
df:70:88:31:2f:21:eb:0c:3e:6d:1a:31:c3:71:f0:
8c:7e:eb:ff:2e:51:d3:d1:2d:da:a2:63:04:52:11:
c2:7f:28:f4:87:24:55:26:15:12:8e:c8:5c:b2:50:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:EF:B6:DF:A3:D8:8E:D1:99:A1:70:13:81:B1:BF:FE:E1:96:A2
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:17:19:79:e5:5d:65:fc:7d:bc:7f:dd:74:e0:2b:b1:9c:
9a:87:3b:9b:17:35:d3:23:aa:96:c9:7b:94:7f:20:ab:ec:47:
17:9b:85:f9:52:24:51:c3:d7:a7:86:7a:f6:05:73:8a:aa:7d:
f6:1a:15:a0:d8:62:a3:69:af:be:67:69:6c:cf:a8:4a:0b:d7:
a2:2e:9c:d8:cf:9a:70:33:50:8c:bb:ec:15:73:bc:50:99:59:
66:09:49:91:ec:ac:c0:ad:76:5e:81:92:f2:90:14:37:b9:73:
2b:db:65:9a:73:e0:53:9f:32:a0:9a:ef:c3:5e:be:4e:a5:8c:
34:61:79:2b:fc:f2:2b:32:f9:f3:d0:7a:4a:2b:3d:04:7a:37:
a9:83:49:b1:28:b8:a5:82:e9:0d:59:8b:8f:a8:a5:53:32:52:
24:2f:66:f8:1e:3b:77:57:17:2b:51:15:b4:e9:4b:ed:d0:82:
91:41:74:da:1c:71:f6:28:2a:c1:e9:f1:ab:0e:c5:04:b9:77:
c8:b8:b7:ac:c2:75:3f:13:10:57:06:ea:47:a1:8b:56:60:bc:
94:a9:97:c4:fb:39:22:73:f7:bc:4e:2e:85:b4:9a:8e:56:f7:
88:2e:ab:15:e4:22:84:90:4e:5f:2e:f9:3c:84:29:33:b0:8b:
5c:9f:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:23 2025 by rpki-client