Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: r23eyBSYelKQwLv8BqR4yqmwObf0KHldDxOvEpiuuzw=
Subject key identifier: 68:E7:25:EC:94:14:F1:02:E4:57:E4:2C:E6:FD:20:2B:17:52:AD:B1
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 0199228CB50E5584BB9DE561B3810C0AC37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 0FED
Signing time: Sun 07 Sep 2025 05:01:10 +0000
Manifest this update: Sun 07 Sep 2025 05:01:10 +0000
Manifest next update: Mon 08 Sep 2025 05:01:10 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: Ha8DolmvbVfje8zD1SzVTSOnl0Sqt7IvnlgXmhNrNm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b5:0e:55:84:bb:9d:e5:61:b3:81:0c:0a:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Sep 7 05:01:10 2025 GMT
Not After : Sep 8 05:01:10 2025 GMT
Subject: CN=68e725ec9414f102e457e42ce6fd202b1752adb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:b4:11:f6:11:fc:cb:b2:b5:cf:95:bd:d3:
21:96:4e:c5:27:a8:4a:a3:c9:b1:71:de:b0:6b:7b:
11:89:62:d1:62:99:13:b8:43:65:f8:8a:79:44:8c:
04:68:3c:97:1f:7c:1c:ac:a5:6f:70:44:55:34:f8:
29:db:f0:00:04:7e:9b:15:c7:60:bd:73:18:3d:17:
23:7d:db:3f:52:b0:03:11:71:54:0e:4f:45:d5:55:
5d:be:c7:4a:07:42:18:28:6a:cb:12:e4:b1:9d:41:
65:b5:82:7f:df:c5:a9:e4:a7:bc:0c:91:ae:c2:3e:
07:c3:5c:11:48:c5:2c:44:4e:ac:b0:c4:63:63:52:
38:d8:34:85:20:d5:f6:50:d6:d2:03:4e:21:46:50:
13:ff:d5:07:43:51:d5:23:47:d7:0d:d6:f6:e7:5a:
54:ca:19:c2:3c:2b:84:a5:99:4a:a6:cb:eb:e8:91:
64:e9:46:e7:ec:38:fb:54:11:e1:b4:e0:21:ca:49:
a3:2f:10:f9:51:2e:fc:21:e6:d2:d5:47:e5:82:b1:
0f:bb:10:88:03:a0:ef:f1:6d:e2:ae:7e:00:cf:8a:
49:06:19:9e:0f:9e:bb:10:46:56:28:de:39:5e:5d:
63:8b:2f:01:e1:cb:c3:15:23:5b:5b:e4:a6:dc:15:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E7:25:EC:94:14:F1:02:E4:57:E4:2C:E6:FD:20:2B:17:52:AD:B1
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:5d:64:1b:48:8a:04:5c:6f:ce:99:0e:fd:95:59:5b:6a:
6a:e0:62:55:a9:7f:bb:0b:f5:d9:cf:b2:c6:8c:a3:d7:e2:03:
36:de:17:82:0a:5b:74:c2:5d:bc:d2:03:84:ee:67:62:1a:07:
f3:03:dc:da:a5:ae:29:c4:77:04:70:5b:0e:c5:0e:f8:7f:40:
5d:7e:36:93:76:ac:a2:95:67:37:d1:14:fe:77:54:03:ae:11:
91:65:6b:8c:c4:cd:1b:58:11:13:5d:9f:1d:a6:a6:58:27:c5:
be:c4:45:80:58:7f:63:3d:26:64:9c:bf:fa:00:d4:fe:5f:3a:
17:bc:b0:c9:77:3a:b6:f8:02:53:f7:9c:ee:18:6e:f6:be:2f:
68:ed:17:8b:95:2e:ee:10:01:33:20:bb:93:e5:9e:ff:5e:3b:
83:21:ec:e8:0e:e5:fe:79:05:cf:4e:37:79:56:9b:c8:d1:dc:
03:c1:9c:98:2e:31:c4:36:e7:1a:a3:55:cc:68:8b:b2:e9:c3:
9f:48:08:a8:ce:f5:41:a0:ce:51:18:cd:6a:20:2d:2d:d7:d6:
c0:39:ab:83:34:c4:30:ec:60:04:ad:4c:4e:9a:a5:d1:5f:07:
4d:63:5a:fe:1d:94:bd:01:4b:74:56:ff:fd:35:f9:f4:df:07:
5d:5c:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:14 2025 by rpki-client