Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: RnlKLCM0t9lfD5bmBWSVJWs40aOEcmg6XHAraahDzdQ=
Subject key identifier: E6:44:79:27:D0:02:41:D1:E8:96:F7:A9:DF:EC:3D:F8:8D:67:EA:15
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 01991688617FF6C807C1CE9CECE1A4CD0910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1667
Signing time: Thu 04 Sep 2025 21:01:00 +0000
Manifest this update: Thu 04 Sep 2025 21:01:00 +0000
Manifest next update: Fri 05 Sep 2025 21:01:00 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: ZPCiXQ0quqPDWzqpGTxVTiR1bvAvyQnCAv7CRskmmXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:61:7f:f6:c8:07:c1:ce:9c:ec:e1:a4:cd:09:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Sep 4 21:01:00 2025 GMT
Not After : Sep 5 21:01:00 2025 GMT
Subject: CN=e6447927d00241d1e896f7a9dfec3df88d67ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:d8:04:86:24:f1:0e:fe:1c:e5:66:7c:78:
21:26:e3:8e:99:2b:d6:c2:70:e7:49:95:81:ea:57:
52:3d:da:f0:d7:9c:93:4d:cd:38:d5:79:22:e7:20:
80:aa:07:23:07:05:16:b6:78:5b:e3:b3:64:84:28:
42:9d:11:83:d1:40:8c:14:5e:52:83:f5:75:d9:2b:
18:90:c4:60:02:5e:09:3e:13:5a:c0:37:43:92:6d:
f4:86:49:14:be:52:eb:27:ba:73:80:98:ff:24:79:
d3:30:c3:ed:b3:97:93:48:c7:df:1e:96:60:84:32:
eb:1a:7a:12:8b:35:94:78:6d:b7:57:dd:91:9e:b0:
a2:8c:2b:9a:41:02:57:d3:41:3a:d9:a2:f6:d4:c5:
ca:f1:eb:5a:80:2c:90:27:3a:0f:a3:6a:40:cc:fd:
7d:b1:b8:2a:d0:ec:08:f3:c7:c2:f8:37:9c:55:63:
50:22:ca:f4:1a:ff:5e:c8:2b:7e:f0:28:6e:e4:e3:
75:34:3b:67:99:67:20:6d:65:e0:2a:82:e2:4f:f4:
ca:0b:ff:9d:fb:7f:0a:aa:52:54:41:3d:de:0a:04:
92:68:e4:78:a2:4c:31:65:0f:69:a1:08:89:bb:5d:
f0:75:08:cb:ea:46:a4:e8:60:02:2b:8e:c2:9d:9d:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:79:27:D0:02:41:D1:E8:96:F7:A9:DF:EC:3D:F8:8D:67:EA:15
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:91:50:f9:d5:b5:88:5b:d9:38:32:b9:a6:cb:7a:aa:9a:
1f:ec:e1:da:67:81:6c:3d:01:cc:36:41:1e:ba:ee:1d:04:15:
8b:71:ec:69:05:0f:5b:76:c6:ff:55:ea:32:82:b5:aa:c5:e7:
17:9b:6b:6a:ac:fb:73:76:c6:6a:51:f5:0d:b9:d9:9f:74:96:
de:50:ba:b7:d5:2c:86:e0:80:45:14:fc:e6:7f:a5:32:49:ff:
3b:38:8e:70:80:5b:5f:cc:23:62:df:07:ce:50:90:b7:69:73:
fb:ab:d2:29:70:79:c9:88:7b:79:d8:e5:a8:e3:29:65:97:3a:
93:ea:86:e8:19:b5:5a:72:c0:a5:e6:13:27:f2:16:ad:7e:59:
8f:c8:2f:50:11:62:8d:6d:8b:de:7f:c6:1b:07:95:16:5d:fa:
fc:c2:b7:5d:a0:b3:f5:47:ad:14:12:6b:ff:55:ca:69:20:f6:
ca:be:10:6e:4a:59:e8:b7:06:3d:16:46:58:a9:9f:14:ad:a8:
dc:3c:89:39:27:e8:84:50:26:63:c9:00:96:83:c7:2b:42:ca:
5c:de:c9:e9:f6:cc:0b:95:19:58:3d:37:06:ee:6d:ac:1b:6b:
1b:d7:9f:5f:24:df:5c:b2:df:b7:24:18:2e:e7:d4:a9:cd:91:
12:4c:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:22 2025 by rpki-client