Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier: 18/lsGe2jKCtjpwJFnQuwyVvqf2v60DfbRW5M6GHs90=
Subject key identifier: 35:97:CA:F3:58:24:05:BB:00:C1:74:B3:57:2F:EE:FD:4E:8D:C0:00
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial: 019847770E87D8CAB63838C8926D2AEB57F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number: B4
Signing time: Sat 26 Jul 2025 16:00:41 +0000
Manifest this update: Sat 26 Jul 2025 16:00:41 +0000
Manifest next update: Sun 27 Jul 2025 16:00:41 +0000
Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: bqeSfWJf0n5BLb5Qhaz9j+IXUJNH0ClUHYrjNVkwWu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:0e:87:d8:ca:b6:38:38:c8:92:6d:2a:eb:57:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Validity
Not Before: Jul 26 16:00:41 2025 GMT
Not After : Jul 27 16:00:41 2025 GMT
Subject: CN=3597caf3582405bb00c174b3572feefd4e8dc000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:e9:00:07:85:2c:01:bc:9a:08:03:89:1b:
35:9d:a6:71:89:b5:ae:73:91:6d:c2:10:66:6c:57:
ad:8b:c8:cd:00:45:95:81:89:38:8b:34:e5:90:17:
ff:8a:7e:3b:c9:99:88:26:05:66:be:18:b9:79:9b:
ea:70:74:36:97:80:be:de:8e:12:52:d7:b9:43:ac:
b6:5b:63:47:7e:ba:d9:8c:32:58:4b:d2:5f:c5:20:
9c:6e:69:f9:47:a4:47:01:5d:80:c3:96:60:f6:ed:
3e:55:c6:b5:8f:2f:a4:80:1d:5c:ba:3d:b5:b8:d6:
20:5e:94:b1:8e:c4:30:27:5d:eb:49:fd:94:be:e2:
d2:e6:50:66:86:39:ad:14:11:91:db:9c:e9:70:6f:
20:01:5c:20:bf:5d:07:16:cc:c5:b4:81:5a:5f:30:
63:fd:b6:79:31:b0:ef:63:f2:1b:1a:55:17:59:bb:
e1:88:eb:95:61:11:e1:f3:a4:a9:79:26:67:ab:b7:
e3:c2:c4:6f:da:d1:44:96:9a:a2:52:9c:42:5c:56:
ab:d5:03:3c:91:02:bb:12:40:e0:2b:62:bd:2d:08:
c1:04:8d:01:06:eb:9e:0c:14:d3:4e:32:84:66:c4:
2e:76:6c:2b:0b:d7:4c:c4:af:c6:ff:31:b0:44:96:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:CA:F3:58:24:05:BB:00:C1:74:B3:57:2F:EE:FD:4E:8D:C0:00
X509v3 Authority Key Identifier:
keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:36:cb:17:7a:ab:c9:cf:99:c5:07:4e:3d:bb:e4:57:f3:cf:
a2:45:ca:51:89:57:f3:eb:3f:54:02:88:1d:7d:81:65:81:23:
95:71:e2:ed:81:7b:43:5f:f7:55:76:6e:f9:be:4d:df:05:5f:
66:b7:f4:ce:a4:25:c3:87:74:d1:cd:19:64:b1:ed:21:f9:f6:
cd:b1:2c:9e:7f:b0:c3:a7:ce:f2:56:69:7e:c0:b3:eb:88:0e:
37:9d:48:fd:ce:b2:5d:24:c5:2c:ae:ac:ae:c0:67:94:a2:36:
3c:40:4a:0c:40:6c:50:e7:18:44:fa:f2:b5:7b:d9:af:6a:71:
3f:ea:ee:09:79:cd:c9:72:33:0f:53:9f:2a:45:80:d0:25:b5:
54:4c:61:c9:1e:98:35:5c:27:46:53:62:5f:ed:3b:05:7c:96:
43:52:60:2f:34:f5:dd:97:af:ac:3a:97:27:21:12:49:93:29:
90:36:44:65:81:0f:9f:30:c5:bd:98:b3:bc:2e:90:13:d7:e7:
e5:0d:0b:c3:a3:ad:e1:68:8c:7c:fa:08:53:4e:a7:30:92:ce:
e1:07:d3:10:ef:6d:e4:8f:6b:5f:0c:71:84:3f:c2:cc:4f:db:
47:51:85:ae:44:c1:ff:72:6e:48:bb:cb:d1:4e:8f:27:d5:29:
dc:66:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:03 2025 by rpki-client