Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: oVCuOkSnxCARxzsfNwmpTiTVhzx+vWL2vOsYDnrv9p0=
Subject key identifier: DC:FD:11:C7:5C:A5:23:7B:46:35:1D:AD:57:A2:EF:6B:D9:42:B2:B7
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 0199221E4071F924C5E7E8DF7E4E02A1FD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: nAcZ5BsQqKbx7VvayR3xoGoLD93bBvZhUut7u8TsXIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:40:71:f9:24:c5:e7:e8:df:7e:4e:02:a1:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=dcfd11c75ca5237b46351dad57a2ef6bd942b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:b3:c9:03:4f:26:99:59:7d:16:a5:9f:b4:
f1:65:6f:6e:21:5a:e9:6d:52:91:33:75:3f:46:35:
ed:a6:7e:bc:c3:a7:5a:c3:9a:93:c4:f7:02:8e:08:
88:2b:8d:53:89:68:01:1d:64:74:50:b7:f4:2b:f2:
8e:26:d6:1b:9f:50:85:28:0d:1c:63:90:d6:12:96:
88:61:dd:ec:58:98:b1:80:42:fe:d4:c9:c7:9d:f1:
cb:e0:98:24:e7:c6:39:f0:f7:2e:5e:f2:ac:00:6b:
1b:8d:22:92:1c:ff:4b:06:97:f8:05:3c:99:7b:4f:
fd:2b:df:4a:1e:bc:8c:cf:34:a3:e8:e6:be:e5:9e:
50:a6:59:5e:52:fd:3a:40:32:ae:73:24:55:9b:e9:
18:29:a8:8c:43:07:08:0c:97:c7:75:e4:92:af:a7:
da:da:7e:2c:90:f4:b2:75:41:db:5f:72:5c:fa:37:
39:44:df:fb:38:34:2a:3a:d6:91:29:ce:5c:6c:71:
71:ec:4f:cb:7e:2f:07:69:52:87:50:1e:4e:56:00:
82:c1:d4:aa:9c:1f:36:f1:20:12:ba:59:34:54:25:
e6:3b:56:8a:50:22:ab:34:de:24:d0:53:c8:7a:73:
29:ce:cf:b0:7c:51:93:11:f6:6f:49:ee:5d:c9:44:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:11:C7:5C:A5:23:7B:46:35:1D:AD:57:A2:EF:6B:D9:42:B2:B7
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:61:a0:c2:bc:a5:5e:9d:9f:9f:21:1e:f4:cc:ad:e7:97:
88:79:f7:7e:74:61:08:61:41:7c:5f:76:fd:bb:da:d1:b7:bd:
84:67:26:9f:56:04:35:88:73:8c:96:58:57:08:91:46:62:95:
8f:05:d9:c2:09:c7:3a:7a:bd:33:b7:95:d9:50:5d:ac:24:71:
2e:6d:df:bd:88:58:70:34:ee:f0:22:c6:8c:9f:8a:3c:50:0e:
f2:4c:50:f0:f1:a0:f7:b2:f5:e8:ca:51:b7:3d:37:83:7d:b5:
1c:a0:78:ce:9e:ad:21:20:80:99:d9:e8:22:8d:79:62:8d:69:
b0:3c:35:69:bf:24:9e:c7:70:0c:aa:5d:3b:5d:18:51:44:2e:
dc:71:8e:7a:7f:62:ea:24:d7:cb:24:f8:fb:00:20:89:ab:d8:
97:04:64:44:f0:8b:e7:8d:7d:4f:f8:e0:e1:4b:07:8d:46:bc:
97:c9:da:8f:b1:67:ac:56:21:54:89:6c:f9:ea:d2:0b:e6:34:
b9:04:7d:02:4a:c6:7d:b4:4e:9d:b2:01:08:f9:02:fb:2f:69:
f2:48:5b:b4:10:27:2e:0e:0d:d7:cc:4b:c4:49:0c:6c:ac:f0:
e1:cc:3a:cd:76:b1:22:6b:b2:00:5b:ed:2c:77:40:dd:d6:4b:
b9:c0:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:15 2025 by rpki-client