Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: PNIP1ptJlZzFwTIfuCV6dGsIsDr/MLgKb/lXWoYZD7k=
Subject key identifier: 9B:64:5B:90:4A:D9:2C:18:E9:5E:33:87:9F:44:EC:3F:91:45:0B:C0
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 0199221EE742F1CAC0BDAE4668AE7CA3522B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 093D
Signing time: Sun 07 Sep 2025 03:01:14 +0000
Manifest this update: Sun 07 Sep 2025 03:01:14 +0000
Manifest next update: Mon 08 Sep 2025 03:01:14 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: f2IIvmQIrsZP5va1XH1Oy00eXJ+q/6hTPz983tQlEt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e7:42:f1:ca:c0:bd:ae:46:68:ae:7c:a3:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Sep 7 03:01:14 2025 GMT
Not After : Sep 8 03:01:14 2025 GMT
Subject: CN=9b645b904ad92c18e95e33879f44ec3f91450bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:f1:9c:c2:4c:b0:5a:1f:48:21:87:1e:f1:
80:61:3b:0d:de:f7:53:82:c1:ee:e9:c2:8c:65:b0:
af:7f:90:b3:00:a2:d5:68:1a:da:32:91:a8:19:27:
96:5e:5e:9d:3e:21:71:c4:ea:31:9d:36:e1:0e:5c:
e8:a5:4a:65:8e:a0:bb:c5:07:3d:f5:1a:68:23:d4:
6a:dc:9d:7c:f1:61:60:cc:d2:5f:60:ff:22:4c:47:
c0:ba:16:6c:ed:4b:45:7d:ea:93:8d:c4:88:a5:27:
04:b4:ba:66:ae:40:69:43:ca:41:17:d7:0b:f0:d0:
fe:5b:42:de:4a:6a:4d:6a:1d:84:9e:bf:91:90:b9:
c5:bc:d8:d1:93:c5:5e:65:e9:c4:56:37:d8:e5:f6:
11:4d:73:12:43:23:99:97:ba:34:e3:7d:f2:f5:0f:
36:7a:d1:83:15:5e:51:93:a1:50:ee:5f:5d:15:1f:
5d:a7:b8:e7:f5:7d:cc:b2:72:95:a4:ff:02:e0:0d:
74:14:f4:15:1c:bb:1d:69:a2:3d:d9:34:9d:d9:b3:
b0:89:12:a5:8c:7b:8b:17:df:cc:d1:7a:1b:92:58:
ee:d7:d4:b4:9b:2f:bf:15:3c:d8:b5:e4:52:31:99:
78:61:00:83:2d:c2:5e:0c:95:ee:49:c8:e9:d1:29:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:5B:90:4A:D9:2C:18:E9:5E:33:87:9F:44:EC:3F:91:45:0B:C0
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:09:ea:56:b6:75:fc:2f:c4:06:e8:4a:29:6f:d5:30:ca:
21:4e:10:35:7f:ef:0b:9d:be:b3:8b:f7:db:98:b7:d1:92:05:
6d:18:46:44:12:b4:e6:ed:67:a2:53:1f:ce:53:00:19:c3:e4:
3f:9f:49:55:bb:49:11:09:96:08:a7:10:ff:f1:95:74:7f:ae:
c2:45:6d:88:5c:e5:88:f0:99:e9:71:52:8d:42:3f:e4:11:4a:
39:8d:8a:cf:76:03:b9:8e:e2:43:d1:8e:32:97:ef:e6:b3:cf:
6e:10:da:c9:ed:dc:6b:8d:f6:51:a9:13:6a:7d:55:6c:79:d2:
59:33:c2:e4:9f:55:4b:f7:dc:4e:7b:a9:d2:58:33:51:7c:83:
34:94:11:a3:c2:60:8b:12:76:03:8a:41:46:33:22:bd:f9:34:
56:92:97:9b:0f:92:83:3a:9d:2a:ff:1f:4a:2c:91:2a:9b:77:
e4:2a:41:8e:18:cc:d0:93:cc:a9:cb:02:10:09:0c:a5:22:06:
6e:42:fc:a7:31:02:54:fc:0c:a9:07:c0:86:42:ef:01:4a:20:
c3:a0:bc:64:8b:8f:de:c9:81:d4:b0:e7:ac:f3:50:e0:82:8b:
44:76:40:af:e8:45:2e:8d:c8:a8:dd:fe:ce:c3:7f:04:d8:aa:
60:38:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:17 2025 by rpki-client