Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: JMix0o8B0IbyowO6rA4DAeObM4IkYRRz9Rad5r+Bx90=
Subject key identifier: C6:28:EB:8E:06:24:51:C4:D6:8E:FF:C9:4C:A7:97:A1:DE:5E:8D:BA
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019921E7CAC6996866B339A4E894C8A62325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 048D
Signing time: Sun 07 Sep 2025 02:01:02 +0000
Manifest this update: Sun 07 Sep 2025 02:01:02 +0000
Manifest next update: Mon 08 Sep 2025 02:01:02 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: nrRm6rd4R80qVv7CX3QVplzHmAWVa7+uaK0oHkzmaQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ca:c6:99:68:66:b3:39:a4:e8:94:c8:a6:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Sep 7 02:01:02 2025 GMT
Not After : Sep 8 02:01:02 2025 GMT
Subject: CN=c628eb8e062451c4d68effc94ca797a1de5e8dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:c2:dc:8e:74:b9:5c:5f:d0:e5:a6:b0:63:
84:00:cd:b9:d4:68:86:4f:04:b1:d9:b2:52:f5:72:
1f:b6:d5:43:74:72:0e:04:8f:93:83:02:80:4c:18:
a7:f4:c4:71:0e:44:31:18:00:35:83:5e:10:95:bd:
c0:48:40:37:4b:b1:2e:51:4e:5d:51:99:59:f1:bb:
46:53:db:b1:6f:f2:f3:7c:9d:13:89:da:b8:e7:9b:
dc:66:42:6c:0b:15:40:d1:6b:28:1f:a9:c2:78:a0:
22:3e:11:cc:7e:f4:ae:9c:11:5e:b6:4f:30:90:81:
bb:eb:3f:9d:1b:38:0a:37:64:70:4e:2d:bd:e1:03:
dc:b4:c4:f6:86:c7:72:a1:62:45:7b:0a:64:51:48:
d5:15:06:8c:ea:ce:f8:69:c4:ea:b3:f5:d7:e6:bf:
48:40:db:1b:ee:46:d1:85:41:d7:29:24:ae:8d:28:
8b:b2:c6:a7:62:7b:f1:be:6b:79:51:74:ac:9f:6d:
33:63:f6:8b:80:15:dd:88:23:f5:d4:1f:b0:7c:af:
7e:a5:0e:d9:b7:80:64:f1:1d:97:56:80:b1:49:e5:
d4:9b:1b:92:46:a5:0d:50:97:10:ad:4c:3b:91:e9:
ed:37:09:76:ca:d7:07:e8:d5:97:75:d7:e4:01:87:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:EB:8E:06:24:51:C4:D6:8E:FF:C9:4C:A7:97:A1:DE:5E:8D:BA
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ae:fe:ef:68:94:bb:cb:88:7b:1f:b1:f1:cb:5d:2c:92:6b:
d3:3a:a7:cd:7a:82:0c:05:3d:b1:26:bf:71:00:23:b3:63:a1:
01:dc:05:ef:8e:49:f1:55:78:a3:79:8e:8d:9e:35:cc:92:eb:
49:4c:36:79:01:37:10:37:2a:b7:1e:3c:70:94:c0:19:b2:af:
78:ca:e8:24:2c:bf:82:09:68:a7:f4:aa:d9:84:9d:16:07:e8:
99:e9:2f:2f:ba:7b:03:57:14:1a:9c:89:d7:49:b4:85:88:78:
3a:36:b4:d4:e7:4c:82:a1:5b:72:2a:17:45:37:b3:77:aa:8b:
8b:22:ec:f6:e0:7d:1c:b1:fe:75:71:86:d7:9b:d5:68:98:43:
5c:7d:ba:f8:ab:86:ff:91:94:f6:19:2e:d5:8f:64:22:09:a9:
b9:8d:e5:a1:64:79:77:6d:a6:24:ca:58:34:b8:6c:32:bb:e9:
cf:0e:89:a7:43:d7:f3:ed:9e:f7:94:d7:e0:ce:33:da:11:7b:
d6:da:cc:e0:0d:49:93:12:b1:21:2e:8d:9d:7a:05:21:f9:80:
6a:5b:c4:f5:31:5f:9c:3f:62:c2:c3:09:19:c2:cd:e6:94:ca:
f4:e3:ef:06:c9:8d:7b:04:c9:4a:dd:e6:16:17:dd:28:d0:82:
1b:eb:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:09 2025 by rpki-client