Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: sljgx7lxYv4HNWqTrBvlWM8A1Pueh1F2oTu3nfOBSZA=
Subject key identifier: 61:7B:F7:5D:3D:B9:22:17:2C:63:28:49:1E:93:5F:73:31:78:9A:82
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019921B21B2428B826789421A1212F8EFADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 13A1
Signing time: Sun 07 Sep 2025 01:02:24 +0000
Manifest this update: Sun 07 Sep 2025 01:02:24 +0000
Manifest next update: Mon 08 Sep 2025 01:02:24 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: YUQorOOn26bTgM94gpJkwmGhJimoB9Sf+JmX5k/Zp+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1b:24:28:b8:26:78:94:21:a1:21:2f:8e:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Sep 7 01:02:24 2025 GMT
Not After : Sep 8 01:02:24 2025 GMT
Subject: CN=617bf75d3db922172c6328491e935f7331789a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:34:91:3a:6f:d5:a5:66:69:68:9f:ee:30:e1:
09:56:d4:f2:bb:ff:44:c0:ac:44:f4:d8:a9:86:7e:
b4:f5:a0:7a:c2:0c:23:76:32:b9:8d:12:c3:7f:2c:
e4:9f:34:eb:d1:08:94:a2:0e:f2:2f:fa:8d:9e:27:
54:5f:d5:42:a2:c9:7c:af:9c:67:24:df:eb:c7:81:
9e:98:38:12:4c:eb:f4:90:7c:36:fb:41:3e:58:58:
11:14:b6:22:ef:5a:74:22:c9:5a:af:4e:30:f6:e4:
3d:3e:db:dd:59:1c:2d:7a:7a:b3:10:06:54:5f:cd:
1c:96:87:b3:36:e6:a9:da:94:34:7d:e4:98:6b:1b:
d7:b5:87:6f:0a:b9:64:4f:e1:61:41:59:36:62:28:
d9:13:8a:c4:f3:68:36:93:41:c0:6a:b6:28:32:7c:
b8:c9:66:41:55:31:8e:d1:02:b3:0e:14:2a:c3:5c:
4a:a7:e6:53:96:36:1b:d7:d6:ed:a1:55:6d:4d:21:
8e:62:44:17:76:1a:14:9b:a5:f6:97:0a:2e:9b:b6:
b9:ff:a4:5c:ad:ff:af:0c:6f:6b:8b:d4:34:31:a8:
73:47:24:de:bb:11:fb:bf:b2:0f:de:0c:6f:ac:1e:
32:6e:6f:b6:be:0f:40:16:d0:8b:06:fb:07:59:1e:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7B:F7:5D:3D:B9:22:17:2C:63:28:49:1E:93:5F:73:31:78:9A:82
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:11:a7:f6:81:30:8e:f4:06:37:bb:dd:f1:38:f9:de:18:
f9:56:1b:73:a9:36:cc:62:59:02:11:f2:47:62:24:f0:45:f0:
45:8c:43:48:0e:87:37:fa:8c:31:1c:37:e3:e6:7c:38:a8:28:
4b:6f:e3:e7:00:04:0c:99:c3:33:ca:e2:a6:76:ee:be:c3:8f:
74:68:f4:d9:9a:8a:64:d4:6f:57:ae:49:3f:d4:3d:22:a1:b9:
ba:6e:96:90:0b:5d:03:8a:5b:98:2c:3f:cc:38:6e:02:52:66:
84:e8:c5:3a:5f:b9:a7:1f:d2:f0:92:36:f5:c1:ef:9b:fb:6e:
c4:47:1e:6c:23:f8:b1:e9:95:4b:7e:79:cd:ee:90:cd:df:28:
f5:8b:53:90:fa:27:5d:6c:1d:e7:d1:63:da:91:12:68:9c:4f:
53:bb:9e:53:a9:77:a9:94:29:dc:96:55:b9:f3:3e:13:d9:98:
e0:95:27:30:3e:69:78:45:73:40:ef:7a:e2:8d:08:44:08:fe:
5e:61:5a:79:6c:42:fe:96:fe:31:eb:be:6d:af:68:d5:96:70:
8e:3d:e9:ef:ee:3e:71:5c:2c:0b:6c:86:83:41:6e:4f:50:87:
2a:71:59:41:8f:c7:d5:2f:24:60:36:ab:a7:2b:d8:d2:8d:42:
6b:f7:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:07 2025 by rpki-client