Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: YgcXkM9+Ya9cOg4/disqPavE7mFXnrBhn4JkVew42BE=
Subject key identifier: 83:CD:21:B5:C6:53:66:E7:49:11:EB:8E:4E:EA:04:E7:EA:7F:41:E4
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019922557F5B34E6760AD4FE03B5422B8421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 052B
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: dLDrjJT5nrdq1mY9po5ZkbWRwobe/XyrHc4GyKrBMw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7f:5b:34:e6:76:0a:d4:fe:03:b5:42:2b:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=83cd21b5c65366e74911eb8e4eea04e7ea7f41e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:e5:2e:f0:f1:35:40:f3:90:be:ac:d0:85:
53:16:23:0b:bc:eb:b6:24:ce:54:25:6a:c7:8a:2f:
14:b4:b6:fb:5b:0e:ec:a2:99:31:db:52:98:aa:81:
77:f6:9d:df:36:37:3f:4d:f5:e4:75:8f:ff:af:d2:
03:b2:e2:2a:40:1d:69:bc:c1:2e:ee:7f:b8:97:22:
8a:73:0f:0e:12:54:7d:88:56:6c:6e:d5:55:89:0f:
55:c5:51:1c:87:9e:4b:27:8c:1a:09:32:a4:06:a0:
dc:90:25:26:f5:86:37:89:02:0d:8f:df:fb:ae:0a:
af:35:82:55:2b:e4:7b:f0:95:80:b3:f8:b9:b3:46:
c4:69:9f:cb:81:20:7c:82:a8:e3:d8:52:bc:2f:74:
ba:d3:69:43:14:b4:b7:ae:e1:5d:16:12:ff:91:e3:
95:ae:47:12:d7:2f:6f:75:dd:99:ac:bc:79:b0:ea:
ea:67:02:29:13:36:cf:66:2e:5c:3e:d3:70:b8:5d:
8c:c9:00:d1:18:c7:ff:d4:09:e5:88:86:45:4e:1c:
66:9e:57:0e:19:53:9e:4f:46:a1:9c:d0:b9:33:49:
78:0e:f9:a1:c3:d9:17:5d:f0:7b:18:b0:10:70:5b:
47:f9:49:d2:18:f3:80:09:6e:d3:13:bc:76:f5:f6:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CD:21:B5:C6:53:66:E7:49:11:EB:8E:4E:EA:04:E7:EA:7F:41:E4
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b7:4f:d1:8b:57:e2:6a:ba:7d:b6:bd:36:1c:a5:b3:04:37:
95:b6:2d:4a:64:d5:3c:31:33:71:82:d7:62:ff:36:8f:8e:1b:
74:10:49:7f:58:b4:27:83:a5:e4:3a:0b:9b:f0:cd:c2:d4:8c:
2f:f0:a1:a3:b4:9c:e3:40:88:82:47:73:0a:80:11:f7:30:e8:
1f:5f:54:8e:06:fb:64:84:e0:b9:65:04:c5:ce:1d:9c:87:2c:
ae:bc:e7:f2:d5:5a:08:b6:6c:67:c6:de:fb:e4:9d:33:05:a7:
97:82:29:95:df:2b:84:27:f7:59:eb:84:88:10:5a:4d:c8:87:
04:45:ef:fe:64:ac:23:ea:2f:09:f6:f2:18:07:59:5d:c7:de:
0c:55:19:aa:9f:4a:81:e3:49:21:d0:76:85:c6:b2:f8:4a:83:
16:29:02:81:1f:13:b6:0a:44:b5:4a:5a:2d:2a:b8:99:73:64:
45:21:77:1c:1d:7c:98:7e:83:63:1a:04:ed:47:8e:c1:b7:ba:
dd:43:cb:a0:9a:a2:9b:df:89:8e:b7:0c:ef:93:5d:bb:e6:d6:
82:2e:25:99:f8:31:77:50:2d:54:7a:48:61:8a:e9:f6:ae:3d:
05:ec:b7:75:ec:8e:cd:77:31:01:4c:f6:df:14:1c:59:88:48:
b2:9b:1b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:22 2025 by rpki-client