Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: n7XQKFEDjjTqAM00DnyURJgGxD7eL3udCsHar26URNA=
Subject key identifier: 17:B0:35:FD:D9:5E:02:CE:41:94:8E:86:C0:B6:3B:FB:1F:FD:F0:62
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 019922557ADE8ABF2A0C2704A502DCFE1122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 16AD
Signing time: Sun 07 Sep 2025 04:00:51 +0000
Manifest this update: Sun 07 Sep 2025 04:00:51 +0000
Manifest next update: Mon 08 Sep 2025 04:00:51 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: Dkdh1JmruK94nfBsg2SCM709g9jvvEm+AeeLHq8ISYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7a:de:8a:bf:2a:0c:27:04:a5:02:dc:fe:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Sep 7 04:00:51 2025 GMT
Not After : Sep 8 04:00:51 2025 GMT
Subject: CN=17b035fdd95e02ce41948e86c0b63bfb1ffdf062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:6e:ef:1f:0b:46:c5:0a:a7:96:f9:8f:d6:
ea:8a:4f:ee:7a:05:26:fd:6d:ce:61:86:57:5c:92:
d5:57:b5:9e:a3:fa:2a:46:c0:1e:7f:8b:37:6a:5c:
3d:3d:98:2b:3f:87:b2:40:01:02:7c:a4:11:35:92:
38:17:52:b7:58:5c:14:e6:7c:8b:11:44:bb:ea:55:
e2:32:4e:3e:d4:6a:bf:92:eb:0c:8f:48:2d:36:8c:
bf:44:a3:20:5d:01:a1:a6:3a:87:04:78:85:be:46:
84:65:fe:16:ab:dd:83:5a:f6:d1:84:4c:16:7a:e3:
74:eb:10:74:c5:9f:c2:3b:bd:d0:3f:52:b5:9c:bf:
8a:03:4a:b5:df:b3:73:14:b8:99:8d:47:a2:1a:17:
e6:72:8c:37:ee:29:a2:84:94:d9:53:73:92:c8:ee:
b1:65:28:79:2a:43:b5:2c:69:08:00:ae:44:1a:69:
80:ba:14:31:9a:fe:fe:d2:77:0e:1d:61:e1:83:29:
89:b0:bd:53:b6:ad:ae:3c:f6:a5:f5:0c:30:d4:65:
a4:2e:62:9e:75:35:cf:b5:ea:0a:26:9a:af:13:b2:
0f:de:3d:ac:75:44:0f:1d:d7:42:d9:65:b9:61:e0:
44:0f:77:4c:f7:42:e7:df:aa:b0:51:d7:d1:82:d1:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:35:FD:D9:5E:02:CE:41:94:8E:86:C0:B6:3B:FB:1F:FD:F0:62
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:99:8a:ba:d4:5a:66:b2:d4:4f:73:96:ed:80:78:78:71:bc:
76:0b:d8:ee:a9:34:5a:0f:70:26:35:01:72:a5:29:67:1f:53:
e0:69:20:cc:de:40:88:d7:db:7d:30:ed:2b:7a:c4:91:d3:63:
4b:b4:87:19:ee:93:96:61:e3:67:81:ee:99:85:18:07:76:b5:
ce:02:99:1a:a7:5f:db:65:cc:63:92:48:55:5e:ae:3c:6e:3a:
c8:4c:56:62:56:35:f0:8d:ba:3c:37:98:02:63:63:fe:7a:d8:
18:ae:8d:f5:d3:6d:42:3e:51:8b:b3:71:6c:1e:fd:bc:98:ab:
88:e9:ec:26:fb:bf:bf:a5:c1:6b:cd:56:16:3a:e9:a9:de:34:
e8:76:7c:70:81:d0:9b:40:12:8f:33:e9:59:7a:c8:4a:29:13:
f9:13:f6:36:1f:99:87:97:5d:45:7e:fb:af:24:0b:3e:88:c8:
bc:07:bb:d4:5e:cb:b1:de:40:0d:ad:da:a3:e6:ce:9d:28:0e:
75:32:88:8a:63:e2:60:12:a7:b0:6e:38:2e:09:90:d4:43:a8:
46:10:3c:22:ee:15:a4:9c:74:29:57:dc:c9:ef:4f:c9:f9:21:
5d:2e:fd:d7:2d:dc:b9:25:97:7d:67:04:fe:fa:7c:42:7c:d5:
b9:ec:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:52 2025 by rpki-client