Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: BeNH8qhayIsYVyt1+a0flcDB4G4CH/rlXo2fpBRa488=
Subject key identifier: D3:F2:29:28:30:48:8E:2E:CE:91:03:B6:BE:56:AE:61:E1:8E:C6:F7
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 0198499C0B97E61CEB08B84D264D5F836E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0527
Signing time: Sun 27 Jul 2025 02:00:19 +0000
Manifest this update: Sun 27 Jul 2025 02:00:19 +0000
Manifest next update: Mon 28 Jul 2025 02:00:19 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: 9MP9l2UjBuXPvM4CdQL5RH/t/kchGkaLORGvsX02qls=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:0b:97:e6:1c:eb:08:b8:4d:26:4d:5f:83:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Jul 27 02:00:19 2025 GMT
Not After : Jul 28 02:00:19 2025 GMT
Subject: CN=d3f2292830488e2ece9103b6be56ae61e18ec6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:59:ef:19:10:bd:3f:19:9c:11:ce:3b:1b:
db:8f:db:e5:ca:79:6f:3e:2c:e0:4b:40:57:fc:86:
ab:f7:a9:39:13:e3:a7:32:e1:91:a3:5a:4b:74:64:
aa:f8:c2:f3:b4:85:03:12:e9:f5:d3:7b:a8:4c:5f:
e2:96:5a:bd:2f:ae:7e:84:04:cb:da:2d:1f:14:9c:
63:cb:e6:1f:15:9c:a1:6f:9b:94:fd:d5:9f:c6:7f:
c0:84:8e:47:c5:9b:a4:f6:eb:21:57:8c:ce:3d:a9:
e8:bb:a4:57:25:df:fb:fb:e9:8d:a8:2d:94:87:e8:
a4:a3:a3:fb:de:3d:3c:ea:11:70:b5:e4:83:b5:93:
83:fe:4f:4c:68:38:3c:b7:64:01:6b:a2:a7:2a:09:
c3:d1:c0:4f:5e:c3:05:25:eb:24:aa:d8:18:9f:bb:
c3:45:ab:7a:16:22:bf:3c:be:f7:f5:93:96:0f:0d:
63:88:5f:fb:67:d6:57:b0:93:84:3c:8a:e2:65:f2:
dd:db:ba:e2:a4:b5:17:34:15:8f:11:cf:24:91:3d:
8e:45:18:76:bc:25:7d:73:13:29:44:8a:fa:6a:55:
49:b9:35:9f:9c:36:90:8c:a2:b2:8e:c4:d3:af:b0:
50:ff:c4:ec:45:81:5a:cd:5f:c7:33:ae:88:70:2e:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:29:28:30:48:8E:2E:CE:91:03:B6:BE:56:AE:61:E1:8E:C6:F7
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b7:11:2a:8c:9a:59:20:75:84:02:a3:75:2a:2f:b8:8f:32:
a5:32:4d:32:b4:82:e3:2c:24:91:96:16:ad:d2:ac:05:2a:fd:
5a:ac:6f:be:40:21:11:9c:50:98:55:2b:2a:0d:55:c8:6c:2a:
a3:47:b3:ba:ce:d9:f4:4e:69:48:b7:81:9b:46:64:6a:b1:a4:
82:9e:04:d1:70:8a:6a:02:1c:c5:fc:cd:e0:e4:3c:d6:08:2b:
e5:3a:f5:aa:63:c6:b0:f5:e8:50:f5:2d:51:24:12:d6:a5:d9:
62:fc:ae:c2:2e:50:4f:c9:26:f1:e4:0c:0a:1a:17:0a:92:71:
3e:b9:93:16:cc:b8:cb:18:f6:66:3b:58:a8:43:63:ee:c1:58:
31:a3:ff:83:b8:52:df:74:4d:c6:d5:60:e7:db:71:e9:5f:f6:
cf:e9:7e:0d:36:8b:0c:35:27:fa:b0:0e:54:37:9f:48:e8:5c:
49:cb:d8:df:e4:fc:96:5e:d4:81:2b:2f:9f:b6:9d:9c:b0:e6:
2c:e3:ef:63:62:2e:d2:4c:80:e5:de:74:22:85:1c:58:f8:3c:
18:aa:97:38:95:c4:44:22:d3:67:51:e6:49:ed:63:6e:cf:25:
e2:45:5a:ea:a8:6d:3a:32:71:cb:d4:fe:87:be:44:95:be:07:
46:fe:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:21 2025 by rpki-client