Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: pwkXvdDPbE7I/GlelbV4hc6SnicXEnA82EDvulbhkRE=
Subject key identifier: 71:86:87:EF:25:0D:78:F8:26:33:71:B7:6F:2F:C8:03:9F:77:B7:BC
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 01984AAEAE50470B5017BDB5DDEED68E0683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1568
Signing time: Sun 27 Jul 2025 07:00:18 +0000
Manifest this update: Sun 27 Jul 2025 07:00:18 +0000
Manifest next update: Mon 28 Jul 2025 07:00:18 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: X+SQh3KjFMKkjPL4IcVj6YkV9kacAa0Jj8zAcZDbQ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ae:50:47:0b:50:17:bd:b5:dd:ee:d6:8e:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jul 27 07:00:18 2025 GMT
Not After : Jul 28 07:00:18 2025 GMT
Subject: CN=718687ef250d78f8263371b76f2fc8039f77b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:b5:42:76:79:2a:2d:c1:68:e7:fa:64:ed:
bc:1a:72:44:69:a0:68:71:17:0a:46:b6:4e:58:90:
0e:6b:65:f8:7a:cc:a8:e2:29:16:e3:05:f6:c6:9b:
77:49:04:de:cf:8b:de:c1:09:43:e0:4d:f0:0e:2e:
ea:5a:f3:e7:65:57:da:45:8b:b1:08:56:35:33:d3:
f4:08:9d:79:8e:1c:ad:2c:bd:2e:a9:f0:af:ba:63:
4a:ca:15:5c:35:49:de:a3:0f:62:4e:f8:df:02:ce:
e6:1d:8a:2d:66:66:24:c5:fb:2e:d9:8b:18:3b:ec:
2f:43:57:45:4e:70:b4:62:10:ac:ae:1a:03:30:3d:
6f:10:15:0d:7f:ee:55:78:18:73:c4:b6:5b:ea:12:
32:90:fc:d8:41:04:71:61:91:99:72:e8:94:e3:74:
b9:c3:d1:4f:f4:be:df:26:76:ec:33:24:da:07:b5:
8a:28:01:39:44:a2:aa:89:c8:ba:9f:4c:b3:a4:13:
83:85:44:48:f7:71:06:1c:80:64:64:31:18:ec:a1:
97:95:2d:e0:1f:37:e9:77:8a:f2:97:d5:36:fe:f8:
20:6a:fe:f1:8c:dc:e1:00:36:5b:f9:28:cd:7d:28:
a6:b8:5b:0e:f1:fb:6c:0a:63:01:9b:e2:30:46:3b:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:87:EF:25:0D:78:F8:26:33:71:B7:6F:2F:C8:03:9F:77:B7:BC
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:47:f6:44:ec:cc:a1:d0:cc:bb:c0:ea:3d:4f:f4:65:87:
37:d6:92:f1:46:16:c6:c5:9e:7b:74:33:ec:a4:3b:50:4d:b3:
fe:c2:9a:83:84:28:66:de:76:82:c0:54:29:3e:1d:27:00:2f:
14:b9:0c:e1:30:c0:a2:85:0d:a9:0a:cf:9a:5b:07:af:12:80:
e4:b2:f1:88:95:f1:a4:4f:1b:cc:b3:4c:cc:c2:c0:7a:e7:7d:
eb:f3:f7:07:10:e1:ea:8a:bb:ca:b8:9f:fb:06:89:07:47:55:
79:09:2d:5f:16:1a:bf:69:43:1a:4a:43:9e:d3:a8:b3:4a:11:
d8:95:f6:d2:e9:43:2e:7e:96:80:88:79:6a:5e:97:76:99:66:
6e:df:87:7f:6e:e1:8c:9f:7e:1f:65:3d:f4:1b:ec:3a:20:81:
e9:12:0e:67:60:03:9d:f2:db:17:12:68:e1:fe:d2:f5:21:73:
e8:a9:3c:57:d2:a6:26:c6:d4:f5:d0:8b:ef:63:1c:ec:9f:38:
14:d3:25:57:97:ac:63:1d:5c:84:5a:c7:1d:c0:29:b0:c6:fd:
13:e5:84:9a:e0:dc:0c:cd:86:20:0d:13:db:42:e0:9d:af:e4:
d4:f2:e1:2f:0e:f0:cb:e7:43:5d:bb:19:9b:b0:a1:44:b1:3f:
93:b4:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:09:50 2025 by rpki-client