Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier: uKOBdkJw0cAvYBQNTplh69/nM5OinBe8hYGlNf9Y33s=
Subject key identifier: CD:A2:38:D4:71:70:C2:0D:EE:95:97:F7:37:98:60:5A:DE:7D:26:45
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial: 019921B274F42AAA95A7D4BD1BE2B36B17E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number: FD
Signing time: Sun 07 Sep 2025 01:02:47 +0000
Manifest this update: Sun 07 Sep 2025 01:02:47 +0000
Manifest next update: Mon 08 Sep 2025 01:02:47 +0000
Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: OQbyXRUb6jhGzaBJJ2yavLHzyHcFAjkKiONC+LpSFR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:74:f4:2a:aa:95:a7:d4:bd:1b:e2:b3:6b:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Validity
Not Before: Sep 7 01:02:47 2025 GMT
Not After : Sep 8 01:02:47 2025 GMT
Subject: CN=cda238d47170c20dee9597f73798605ade7d2645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:ac:b6:95:e8:5a:3d:15:c9:50:00:6f:5b:
21:32:45:f8:42:a6:e5:3a:c0:94:d6:d3:7d:85:83:
c5:81:2e:af:15:f9:07:8d:79:4c:10:81:e1:99:24:
d7:ce:3b:0b:6f:b9:1b:5f:ee:39:d4:f5:7b:ff:bd:
a4:25:a1:8f:f0:7c:64:a5:89:02:80:b5:93:4f:61:
ab:06:c5:2a:55:c1:01:73:65:96:0c:b2:72:f4:81:
d2:b9:cf:19:1d:10:a4:4b:65:b8:70:30:21:aa:3e:
59:90:9e:25:a0:65:1a:c5:8e:c9:9c:e2:5f:65:4f:
4c:94:cb:09:88:e9:2b:3e:30:5e:fe:9b:d2:26:60:
68:26:bd:35:ba:1d:e9:34:50:ae:2a:f3:ef:8d:27:
70:a6:2d:8b:9e:8f:cd:9a:c8:7d:02:4e:de:4e:04:
7a:52:41:db:81:48:68:91:42:be:cb:57:de:0b:1d:
b0:e2:4b:57:18:43:17:a7:3f:b0:d4:1c:e8:4b:6f:
8b:3c:f9:e7:78:19:d6:83:70:3b:d4:87:1f:0b:a4:
1c:3e:e7:2f:12:85:d6:45:33:15:81:0d:34:ce:69:
cb:b1:fc:f7:59:24:85:9a:14:05:66:73:f2:18:a5:
86:17:95:6c:2c:e7:23:39:f6:79:79:d4:bb:49:c2:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:38:D4:71:70:C2:0D:EE:95:97:F7:37:98:60:5A:DE:7D:26:45
X509v3 Authority Key Identifier:
keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:54:d1:02:bd:6b:58:b3:f4:f7:4b:b6:c3:b3:4d:c2:b4:
1c:73:d3:19:d0:41:72:e4:a8:29:da:0b:d0:79:39:df:d8:49:
ff:11:02:32:92:78:8b:3d:fc:e9:6f:5d:9d:3f:96:e4:22:e1:
53:5a:f1:a1:b6:07:13:0c:8d:b1:46:3c:58:f3:ef:77:b4:ca:
57:16:b6:36:08:e8:b3:2b:b7:be:c9:81:f9:a0:18:b5:14:f5:
d1:fa:18:b7:02:5b:25:0f:1b:42:f3:38:fe:05:fe:7e:9c:d7:
ad:07:81:43:d4:8d:e5:5d:75:bf:4a:1c:07:29:79:af:14:3a:
c1:65:1b:3b:f3:57:9c:17:49:73:19:06:d2:02:67:82:a6:4d:
da:63:0c:3c:0a:a2:9b:35:28:72:05:c9:cb:b6:4e:20:17:9d:
2d:ce:f2:b8:d5:ff:94:9e:ba:4f:d0:55:0a:15:7f:87:f3:d7:
3b:12:76:39:fc:40:7d:85:33:43:82:e0:ee:ea:fa:f7:02:79:
99:09:5e:96:3a:48:c9:fa:36:b4:1c:b5:68:d7:a4:71:66:16:
3e:3b:c9:ed:03:70:b6:78:25:ba:00:51:5c:f5:52:50:d6:58:
e7:c7:eb:d9:6d:52:c9:3c:3a:52:72:ff:a8:f4:0c:fc:88:55:
ef:92:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:51 2025 by rpki-client