Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: WJf4cKLDmn/X+zAGsLQufw+GkowRmEZrsfyc/loB1mc=
Subject key identifier: 7A:6F:9A:A7:23:9A:52:7E:FA:0D:BB:1D:74:5B:1F:F8:10:43:22:0C
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 01984966F7716575BF897A51CA2D9BC02479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:02:21 +0000
Manifest this update: Sun 27 Jul 2025 01:02:21 +0000
Manifest next update: Mon 28 Jul 2025 01:02:21 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: 621G9wwW7P2wvcaZ18Lm0wDg2EtNCbkfcSwQSkNxZxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:f7:71:65:75:bf:89:7a:51:ca:2d:9b:c0:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jul 27 01:02:21 2025 GMT
Not After : Jul 28 01:02:21 2025 GMT
Subject: CN=7a6f9aa7239a527efa0dbb1d745b1ff81043220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:41:e6:37:10:06:01:68:fe:9b:a0:89:27:50:
a1:fe:e5:a4:98:a5:71:27:8d:c3:8e:4f:4d:7d:0c:
23:40:e8:a0:6f:bb:8a:2c:9e:40:65:28:c7:fd:56:
bb:2d:91:33:75:df:2f:8d:dd:48:5b:a1:03:40:b5:
ae:43:55:b5:e1:51:cd:78:ab:e2:19:f4:d8:d6:87:
36:5a:e1:3c:ea:b9:41:9d:ae:d7:bc:b3:d8:ba:c8:
f9:2b:2f:04:04:e7:5d:9c:ab:39:e2:bf:6b:ea:d8:
e9:ad:02:3e:be:fd:21:7a:b3:c8:77:bd:45:2d:53:
52:28:8e:c9:18:ad:b9:be:1a:90:49:6a:08:29:f6:
de:4b:07:b5:aa:f2:4f:e8:20:ab:82:97:75:da:16:
04:fb:e6:6b:6e:c9:e0:cd:30:79:4d:44:db:d6:53:
38:5e:23:99:ee:f3:76:08:05:bb:37:84:3c:47:d0:
8f:21:7e:a8:cb:06:d3:ba:45:06:41:b3:d9:54:c2:
1e:fa:22:73:fd:b4:c7:d3:70:61:d5:97:75:f6:de:
79:06:0d:b1:01:4e:d1:7b:a8:44:1f:3e:9b:7e:ed:
33:b8:fd:de:10:91:55:bb:f2:9c:5f:dc:f7:31:22:
df:b0:8c:91:c9:98:25:ce:31:7b:b2:fe:ef:e3:36:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:9A:A7:23:9A:52:7E:FA:0D:BB:1D:74:5B:1F:F8:10:43:22:0C
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:a4:2e:4e:07:0c:b3:d5:c6:92:ce:d6:4b:5f:1e:93:36:
1a:a2:03:63:dc:c5:9e:2f:3d:fd:c2:9f:fb:e8:d2:c0:9f:47:
cc:8e:d4:ec:33:dc:46:76:39:24:cf:a8:9b:e1:3b:b2:f3:4d:
37:a8:33:56:58:fb:fd:84:46:16:6e:9a:7f:19:bd:fa:e4:38:
0e:c8:46:79:17:07:19:3c:7a:40:06:27:5b:ce:ed:5f:f1:1f:
92:27:dd:0c:53:c4:e7:76:1b:0c:ce:15:71:07:26:a2:f8:a1:
09:b9:62:09:04:5b:16:20:5e:4a:b2:0e:2a:09:58:73:6e:20:
75:78:9d:7a:51:58:82:16:34:6f:32:ef:5e:74:44:c1:12:73:
e7:c4:69:1a:f5:9c:c4:4d:1f:94:14:b3:bd:9c:cd:72:fe:29:
bc:23:44:79:19:a8:f8:ff:98:8e:8f:29:d7:ef:7d:1b:55:d4:
d3:ac:e6:db:35:10:4b:ca:f8:64:ee:e3:ec:6f:7b:45:9f:17:
d5:35:a1:1c:e1:82:4f:2f:f4:eb:0a:e5:9a:1f:90:19:fa:f2:
07:e0:8d:21:32:9b:a9:9c:70:1d:a7:07:3a:a6:d8:8e:8d:c5:
2c:c3:96:f2:a9:39:03:8b:dd:11:8d:2f:99:36:18:81:69:be:
b3:21:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:41 2025 by rpki-client