Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: MsvZAU8m2BEIXZGt4JdodXEHl5ZAFk1sVWQM25xr33s=
Subject key identifier: 4A:BA:92:15:8B:FC:9C:3E:58:B1:DA:71:0D:49:56:88:3A:F9:BB:9A
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 01984966F957DE44DDD2FD76609B9A4DE5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: BC
Signing time: Sun 27 Jul 2025 01:02:21 +0000
Manifest this update: Sun 27 Jul 2025 01:02:21 +0000
Manifest next update: Mon 28 Jul 2025 01:02:21 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: R4E5IxRBDS6h+bPmAFL9jxTx1b/BkaMO7GeCtGsXiRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f9:57:de:44:dd:d2:fd:76:60:9b:9a:4d:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Jul 27 01:02:21 2025 GMT
Not After : Jul 28 01:02:21 2025 GMT
Subject: CN=4aba92158bfc9c3e58b1da710d4956883af9bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:91:53:34:d0:b5:69:85:84:f5:b4:7d:ba:
93:88:35:49:a2:08:9f:82:8d:c5:a8:ee:a7:7d:45:
79:2c:c5:1e:a9:e7:9e:8a:e7:c2:1e:57:00:d5:d3:
9e:a1:3d:25:51:c2:a3:85:fa:39:56:9e:5d:bb:96:
ec:bd:4b:66:a9:12:85:c8:1d:2f:c9:1b:64:ca:a9:
e2:38:8e:d6:0a:1a:70:59:0e:6d:30:8e:70:af:41:
ed:d2:c1:ff:f0:27:43:7c:ed:8c:4c:7d:18:a8:8a:
e6:00:16:5b:ce:42:74:e4:2c:03:02:2e:51:2a:16:
28:67:a4:4d:87:4d:2d:79:cf:26:ab:60:46:d3:2c:
94:b5:82:43:67:cc:fd:c2:a8:9d:b1:e2:3a:2b:23:
42:d3:c9:93:fe:9a:97:8b:ee:37:2a:af:17:45:9e:
b6:a2:f3:c3:4d:2c:02:cf:2c:98:67:ee:07:43:c2:
a6:d9:dc:c2:91:c3:23:71:c2:86:59:fb:65:10:0e:
7f:12:11:f0:c0:23:f8:d4:5a:25:6a:e5:45:2e:c6:
77:d4:8c:b9:da:67:ed:28:10:83:ba:67:fb:b2:35:
d2:96:29:e9:aa:41:40:83:52:41:30:68:ee:b7:03:
1c:a8:b0:06:63:2a:a4:dc:f8:15:fb:29:3f:dd:5c:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BA:92:15:8B:FC:9C:3E:58:B1:DA:71:0D:49:56:88:3A:F9:BB:9A
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:76:a5:21:b7:2b:d3:f2:5b:f4:25:9c:c0:e0:63:23:44:
23:36:d6:04:5c:79:a8:24:7b:53:a3:1e:cd:ee:49:e9:40:33:
e4:5f:1e:15:7c:86:52:b8:ea:81:e3:ab:c1:3e:79:2d:48:7b:
e6:de:67:73:c3:5d:1a:ab:88:92:00:1c:80:40:3d:26:e4:2e:
1b:5a:5c:47:12:d6:9e:da:51:d3:25:5d:ee:98:8d:19:8a:81:
94:bc:de:30:83:02:c5:43:e2:2f:59:ad:23:e6:46:79:bc:b8:
19:41:e7:5b:77:37:0f:da:42:0d:04:65:f1:b1:cb:8a:5a:2b:
b7:ab:bc:a9:ce:b5:ed:19:8f:59:ef:fb:93:fd:1e:f4:3d:b3:
94:43:83:23:2a:c4:9c:73:37:4c:7d:38:ea:99:e7:9a:58:1b:
a6:6f:f1:e2:a2:42:90:c1:7d:96:34:ec:02:a7:5e:3a:3a:44:
fa:09:8e:50:d4:ab:2f:e8:ad:93:e3:9b:15:51:e0:9b:da:42:
1d:9c:cc:bb:ec:fb:80:c1:d9:a4:ad:cb:ec:2a:0f:a2:33:50:
6b:25:5d:79:fd:d0:24:40:0a:44:37:e6:76:91:f8:0e:85:66:
6b:ff:0d:e0:61:87:06:5a:32:72:53:98:d2:17:6d:a7:9f:69:
a5:24:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:24 2025 by rpki-client