Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: xcdn06Dl6u7Mqg6R1SZasi3wqJmwfKeitPvgvRP1B1Y=
Subject key identifier: 33:7A:70:89:A2:EF:AE:B7:0F:91:24:7E:26:3B:DA:40:E6:0E:EE:03
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 01984965CEB9440A6FB7745B74399A6CE98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 1078
Signing time: Sun 27 Jul 2025 01:01:05 +0000
Manifest this update: Sun 27 Jul 2025 01:01:05 +0000
Manifest next update: Mon 28 Jul 2025 01:01:05 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: 2w/BcA7khkeuNbFjJjjk3L4F5NzTD+4tdXVUN6IEHnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ce:b9:44:0a:6f:b7:74:5b:74:39:9a:6c:e9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Jul 27 01:01:05 2025 GMT
Not After : Jul 28 01:01:05 2025 GMT
Subject: CN=337a7089a2efaeb70f91247e263bda40e60eee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:67:78:07:26:25:6a:80:e4:64:02:b1:48:
a2:29:19:07:cf:7e:a8:60:b5:36:9c:98:dc:4d:02:
ef:15:6f:ff:cb:84:3d:18:47:8c:ae:83:44:58:28:
1f:3f:a2:68:d4:e4:d3:48:7f:cc:c2:fb:f6:b0:29:
ea:08:05:26:f2:a3:13:a7:99:25:80:66:dc:10:23:
03:35:20:23:f0:b0:5e:87:9a:ae:a5:86:20:3e:60:
f2:cc:2c:44:71:4b:e1:36:2b:cc:bc:67:d3:4a:6a:
1c:4f:eb:fa:00:e0:93:7d:20:1a:ea:65:bd:e6:2a:
f4:b1:97:9a:3d:c8:48:96:70:23:a5:c1:b6:c4:23:
e4:8d:a2:44:b1:7b:0e:58:2a:5e:c4:75:9c:15:cc:
80:0d:53:5a:b7:48:09:eb:67:3e:b5:67:18:dc:e9:
7b:cb:14:07:55:87:58:58:ce:23:05:7f:c9:c9:10:
62:a9:31:31:3a:85:af:4a:d2:98:9b:b5:4b:ea:97:
78:23:35:82:18:52:27:4e:7d:2b:9f:96:46:91:b7:
1d:f8:17:13:4b:84:65:76:fd:f9:cf:aa:7d:06:9a:
49:c8:fb:40:0f:bb:d7:81:c3:b0:c1:8e:e9:d6:4b:
93:fb:71:39:83:02:18:b4:26:fb:52:a8:35:65:ee:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:70:89:A2:EF:AE:B7:0F:91:24:7E:26:3B:DA:40:E6:0E:EE:03
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e6:7d:a3:54:45:76:b0:f4:41:e0:32:d8:61:7d:8b:74:e2:
49:ef:66:4a:09:bc:0a:4d:c3:e2:8d:6d:d8:60:6f:fc:f4:ab:
37:c3:d5:c2:48:74:0f:ae:09:e8:f7:95:b4:14:31:5f:1a:ba:
b4:46:05:d2:e0:5a:97:8e:3c:ca:70:f1:14:76:bd:16:c2:e3:
9e:d8:11:33:a0:29:bd:3f:db:23:0d:e6:12:0a:0c:1d:ae:a5:
c6:51:54:66:4f:f5:a5:7b:1a:44:fc:de:ad:ef:e3:bc:85:57:
09:2e:41:72:bc:91:76:bd:24:ff:54:62:04:aa:19:b4:15:1a:
7e:f9:f1:2d:20:20:d2:39:52:98:f9:5c:ef:81:11:43:dd:b7:
75:e5:9b:de:53:e6:97:1a:d0:15:04:32:55:de:b7:c9:d7:76:
bc:04:bf:e3:5c:2c:80:e4:b8:f3:f8:f0:05:96:38:e1:be:7a:
b0:d4:d8:3c:4d:2b:dc:55:cf:22:4b:63:3f:0d:b4:0c:30:78:
7a:ee:93:1a:4d:65:38:f8:c3:bc:52:af:82:45:58:1f:5b:69:
bf:59:e9:71:44:19:4c:47:30:f8:4e:96:6e:ba:54:d0:0f:e7:
f7:f3:94:44:7b:77:fc:95:94:78:82:75:fc:fb:54:80:61:74:
5e:1e:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:53:27 2025 by rpki-client