Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: cCXH9kHmO2mt+kU622NjXNezpMF3TMu2Js0i+mCzNRo=
Subject key identifier: 37:23:7B:9B:23:D5:A7:51:31:BF:91:90:A0:51:22:06:60:18:B5:9E
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 01984DB0044B1585636308151C602F2A0C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 0D84
Signing time: Sun 27 Jul 2025 21:00:37 +0000
Manifest this update: Sun 27 Jul 2025 21:00:37 +0000
Manifest next update: Mon 28 Jul 2025 21:00:37 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: wsKY7F98aaQNYpV1kHMPCeJz4T60FO/+gvfulUFeEI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:04:4b:15:85:63:63:08:15:1c:60:2f:2a:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Jul 27 21:00:37 2025 GMT
Not After : Jul 28 21:00:37 2025 GMT
Subject: CN=37237b9b23d5a75131bf9190a05122066018b59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:77:15:4f:f7:72:a8:f4:9f:68:84:bf:4c:
0f:09:e0:4e:da:64:24:e2:72:ac:36:af:6a:63:d7:
a6:85:9b:92:3f:68:75:a2:87:ed:65:ec:93:a8:7d:
5a:ed:08:6d:f9:ce:8d:40:85:42:65:68:bc:fe:24:
a5:40:c5:4d:8c:17:0b:e1:ca:4f:fe:d9:46:15:0d:
36:10:ab:84:37:02:04:fa:57:2c:62:77:fd:e9:8a:
7b:8b:50:1f:3c:d5:dc:00:7e:1e:21:1f:2e:5b:87:
10:c8:f9:51:b2:11:f6:74:8e:b3:ce:5d:f0:11:80:
fd:cb:39:29:da:b8:92:4b:d1:8a:81:c8:b1:bd:d5:
8a:54:33:cd:f2:40:10:23:74:ab:c5:45:e3:39:20:
b7:c4:a6:b5:40:06:5f:58:a5:ef:82:52:59:c5:20:
96:79:76:6e:bd:6c:fa:f0:f9:c1:f3:cc:30:eb:c4:
5e:b1:b2:55:1f:ce:85:c3:9c:d3:0a:ce:4a:bd:cf:
dc:5e:b3:3e:bd:db:2b:07:99:92:b0:6f:2e:fd:56:
71:63:13:04:90:fe:e0:f7:4e:fc:42:13:d9:c6:da:
11:3e:fd:96:78:70:a3:38:67:ce:d6:7f:ca:62:7b:
28:ef:34:d4:2d:49:3e:ce:1c:58:0c:77:f3:8b:b4:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:7B:9B:23:D5:A7:51:31:BF:91:90:A0:51:22:06:60:18:B5:9E
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:a5:45:dd:4e:cf:7f:1f:29:e1:c3:69:0a:d6:84:b1:2b:
69:25:cd:1c:30:9f:40:6e:d3:62:d8:61:91:49:c1:18:7c:c1:
09:01:c8:1a:ce:4b:b6:20:57:d6:fc:83:66:ae:c7:1b:06:8b:
63:82:dd:3f:e9:48:0f:dc:39:a5:c8:83:bf:15:f3:2e:08:79:
0b:d8:b6:94:5a:82:95:76:ec:ef:0b:9a:ef:40:43:f8:6f:5b:
27:b0:b8:ef:f6:26:19:13:4a:1d:06:0e:88:94:c6:c8:83:9a:
d6:15:d4:e3:cb:f6:c1:69:2d:7e:f3:73:fb:db:3c:94:e1:e8:
0a:ad:9d:13:4c:c8:c8:77:62:46:bc:13:be:2f:1c:39:35:5a:
8f:72:61:05:d9:8c:c5:6c:08:e9:0d:8c:64:5c:9f:23:12:75:
60:f9:a5:02:8b:16:d5:b8:2e:22:9a:91:f1:0e:9f:7c:80:3b:
9e:04:80:16:ce:44:65:bf:09:d7:a3:77:58:0b:91:be:29:e0:
c2:a1:29:31:10:fa:f4:f3:20:dd:5a:9d:64:b8:37:e6:ed:14:
d5:a4:b3:6e:e7:de:44:9a:c5:82:f8:30:21:1b:0d:0d:ee:41:
7f:45:8d:8c:b1:cc:d9:6b:81:45:fe:e6:ac:22:ed:59:24:5c:
83:b8:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:15:58 2025 by rpki-client