Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: 3XCy2sZq3vGIdnNKB3hl7Me2D5Uequ9nWUcUs/S+WMI=
Subject key identifier: 89:99:C0:F7:BB:CC:C5:46:AD:B9:29:82:59:5A:64:B3:75:08:B3:9C
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 0198481BB8595142F8F00242F50468F728F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 14FB
Signing time: Sat 26 Jul 2025 19:00:32 +0000
Manifest this update: Sat 26 Jul 2025 19:00:32 +0000
Manifest next update: Sun 27 Jul 2025 19:00:32 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: 3WaM00pAqcchAX2y2xVuO6AqitydyLwZ/3jK1go0+6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b8:59:51:42:f8:f0:02:42:f5:04:68:f7:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Jul 26 19:00:32 2025 GMT
Not After : Jul 27 19:00:32 2025 GMT
Subject: CN=8999c0f7bbccc546adb92982595a64b37508b39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:ae:0b:68:a9:95:68:80:2b:f6:f3:17:32:
2c:5d:0d:97:5f:fb:02:6b:3e:fe:f4:8e:ba:6d:f3:
76:1d:d7:73:45:bb:0f:11:80:5a:fd:d0:40:1a:c2:
07:39:28:09:51:78:ea:a8:17:e9:22:09:30:5b:95:
20:2e:3f:73:13:75:b5:45:9c:7e:11:c3:f5:1c:14:
dc:f2:81:ef:75:f1:42:a8:0d:6f:c9:e1:3c:17:d1:
c9:a0:30:9c:69:26:e6:4f:ab:13:56:94:da:42:2b:
a3:f9:19:65:0c:15:d6:65:63:67:23:8a:89:be:75:
59:9b:bd:04:81:e1:cd:94:6a:51:64:ea:fd:07:5f:
a3:a3:cc:d6:46:b3:cc:36:18:eb:2d:a8:15:82:28:
9e:a7:1d:ba:a0:c3:22:28:91:5a:b4:08:d3:09:0e:
72:05:bb:40:7a:07:68:8a:79:17:d9:16:f5:12:f5:
e1:e1:3c:70:1c:0c:91:70:3d:54:95:dc:c8:ea:dc:
23:e5:11:c8:4e:cd:6b:1e:ab:79:f7:8e:d2:8c:49:
5b:e0:96:af:54:da:7f:9d:78:22:22:5c:8c:b0:13:
9c:72:20:3e:7e:a7:35:de:be:c4:e9:cc:5e:ad:2e:
03:bd:49:de:13:13:75:d4:5c:96:62:9c:d6:9e:e9:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:C0:F7:BB:CC:C5:46:AD:B9:29:82:59:5A:64:B3:75:08:B3:9C
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7d:31:68:12:c3:af:f9:e6:e5:cb:ae:6d:45:a9:a6:ea:67:
70:06:f9:e2:ec:73:3d:e9:94:b1:77:ca:9f:6c:53:e9:6c:0e:
ca:7f:e2:67:53:ce:81:24:4c:63:1f:3d:3c:33:2d:22:b7:e8:
61:61:71:50:fb:e0:ef:41:60:04:ac:52:c8:9d:15:b0:fe:4f:
7b:71:fb:0f:60:d7:b4:e0:76:e6:30:f7:57:a7:15:a9:66:60:
b6:af:51:5a:29:83:d8:4f:9a:99:1e:eb:26:c9:6b:55:61:08:
66:ad:11:fd:ee:86:44:37:5c:60:9d:92:4d:ff:2d:24:d0:15:
24:db:b4:5b:84:cb:87:74:c8:b9:55:fa:0e:d1:d6:89:e8:be:
b2:0e:65:25:d0:96:42:dc:46:c0:7b:96:5a:61:ca:f4:26:7d:
29:3b:c2:66:f1:f6:a7:af:68:bf:f5:13:f5:15:f2:8b:96:2f:
e7:ac:ca:1e:d0:23:66:f8:8b:0b:12:3f:b1:b5:f6:0b:85:13:
26:b6:6d:65:2e:df:51:97:96:34:e7:08:9c:94:70:d3:9b:24:
b2:2a:be:80:8e:29:1a:1d:69:f3:4e:80:48:de:c3:2d:4b:be:
fb:e5:ba:5d:55:f6:ab:d9:9c:7a:31:69:22:45:09:4f:70:60:
f2:98:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:32 2025 by rpki-client