Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier: eLtwPhrPsqzQd8w9NilESftxDprCl6o6K+qmArDT+Ww=
Subject key identifier: 77:9B:FB:19:05:B5:2B:A1:71:26:DE:6D:3A:95:F6:F0:C4:35:A1:F2
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial: 0198496728479FED0EA33BFC8CFA326EDE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number: 0665
Signing time: Sun 27 Jul 2025 01:02:33 +0000
Manifest this update: Sun 27 Jul 2025 01:02:33 +0000
Manifest next update: Mon 28 Jul 2025 01:02:33 +0000
Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: RPE3GUOUpebrQqvikXf5cvK3GEXzBuR5rFDTKu8/N5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:67:28:47:9f:ed:0e:a3:3b:fc:8c:fa:32:6e:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Validity
Not Before: Jul 27 01:02:33 2025 GMT
Not After : Jul 28 01:02:33 2025 GMT
Subject: CN=779bfb1905b52ba17126de6d3a95f6f0c435a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:e2:e5:f9:b0:4a:c0:83:aa:12:70:72:81:
a0:e7:a3:45:5f:e7:1c:35:56:97:17:4f:2d:28:9e:
f6:77:94:55:a9:ce:83:a2:5c:d9:ed:b9:70:f7:10:
fd:55:3a:ba:ca:e3:ee:32:11:a1:14:17:a3:45:67:
4e:16:44:07:59:de:35:38:47:70:1c:e8:10:80:23:
69:be:8f:a6:c2:00:a3:54:74:c3:67:17:59:fc:88:
a2:63:c3:c9:fc:9a:bd:d4:be:05:4e:ac:f8:ec:85:
2b:38:be:90:fe:f5:ec:90:c3:2f:af:ee:ed:27:5c:
7e:2a:d1:2f:3a:43:00:55:36:ae:fc:57:b8:27:52:
29:76:d6:4c:54:2a:c8:e9:00:34:f6:4c:30:1f:8d:
ea:d8:2b:22:5c:47:4d:ad:65:28:0f:80:e8:e3:29:
12:51:c0:80:f3:77:55:ad:25:56:b7:8d:0e:e0:ce:
52:41:a7:83:ab:a2:aa:6e:ef:36:c6:0c:f5:ed:00:
62:44:78:f1:4e:71:6c:64:b9:da:f3:40:d0:8d:2c:
96:18:f0:03:ae:da:0b:86:53:af:6b:94:39:35:86:
ba:e8:65:64:66:6d:fa:0e:cf:f1:08:dc:46:49:c6:
2f:0c:33:36:fe:65:49:95:73:80:da:c4:f6:ea:f3:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9B:FB:19:05:B5:2B:A1:71:26:DE:6D:3A:95:F6:F0:C4:35:A1:F2
X509v3 Authority Key Identifier:
keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:70:5d:35:43:13:4a:d0:31:bf:e2:f4:a7:bf:91:b1:f1:45:
4d:fc:13:c5:42:1d:a7:bd:ec:a2:e4:bf:bd:aa:6a:60:36:e4:
f5:19:91:ae:e0:f9:41:09:ec:6a:91:08:f9:9c:81:17:d2:29:
fe:fb:c8:b4:54:09:65:74:1b:4c:12:a7:70:71:60:0c:04:86:
5b:28:6c:e5:f1:10:5e:c7:95:5c:a7:15:1d:b9:38:27:2b:5e:
3d:fa:26:89:4b:e3:dd:fe:31:8b:97:4d:4b:35:b2:46:ab:e8:
5d:2b:0d:e9:d3:e8:8d:f9:6b:24:93:81:3e:a8:9e:c6:f9:c6:
e7:1e:34:9e:bb:e8:51:d4:ac:15:cb:6a:ab:d0:8e:87:c1:3b:
c5:d1:92:23:9f:a9:1a:2f:af:e3:59:b8:42:e8:4f:1b:06:6d:
7a:57:c8:68:a0:07:88:06:b7:76:9a:e5:2b:89:bd:ad:e9:78:
f0:0b:52:f7:ec:d0:87:6f:c0:f0:7d:17:a9:b8:11:b6:40:80:
2c:cb:ab:86:e1:31:c8:5c:3c:a0:8a:1a:3d:a7:98:45:be:07:
e5:4c:75:52:99:39:88:15:31:87:5c:5d:9b:8b:b6:78:36:af:
0f:c4:42:90:04:94:7e:1f:2e:fd:d7:c1:aa:79:45:84:56:78:
18:76:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:19 2025 by rpki-client