Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: vqt6+QbNh8ht5uPmUNFCsWjVXGHTCXU16HLXMyEsOrc=
Subject key identifier: D4:1B:6B:E5:26:5F:3D:25:4C:42:F1:9F:50:77:51:72:2A:1A:D0:21
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 0199239FBC9CCB39E50A8B85E96CBBBF1E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:34 +0000
Manifest this update: Sun 07 Sep 2025 10:01:34 +0000
Manifest next update: Mon 08 Sep 2025 10:01:34 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: BIoCe1jLfQSsIBaKSls4zuyAHgyzn0BpbWGnzUtrPcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bc:9c:cb:39:e5:0a:8b:85:e9:6c:bb:bf:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Sep 7 10:01:34 2025 GMT
Not After : Sep 8 10:01:34 2025 GMT
Subject: CN=d41b6be5265f3d254c42f19f507751722a1ad021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:01:ba:c3:53:f1:af:04:69:3b:92:20:c0:
df:18:e4:0f:59:8b:63:0b:fb:8b:ab:00:5f:69:b8:
41:a5:8f:aa:56:f7:66:d9:90:c6:96:50:db:f3:96:
a0:7d:01:df:fe:e6:1d:dd:d9:74:f9:67:91:b2:f0:
d9:e9:28:d7:03:3c:97:e5:53:03:4d:55:7b:06:e4:
f5:ac:c8:9e:ea:b8:b6:47:44:d3:fa:21:36:0d:56:
b3:75:19:42:dd:33:2a:70:d8:3c:ad:50:37:58:2e:
24:5e:48:10:ab:1c:d9:72:68:37:5f:3d:a8:80:3b:
96:ea:07:7b:79:10:d5:25:ad:f4:4f:31:ff:06:a7:
95:0e:f2:5c:ed:bb:42:3d:ca:18:92:39:77:67:c2:
f6:c9:db:ec:de:37:db:01:44:90:85:f1:d6:f2:d9:
36:73:97:87:ab:8d:69:c9:ee:4e:a1:cd:d1:b1:d4:
d4:23:ec:77:89:b6:a9:63:4f:e2:e6:dc:6b:7b:54:
04:59:88:de:4e:32:d2:84:d9:69:80:77:8d:6a:84:
f7:e5:5f:1f:c8:46:dc:19:76:4d:dd:b1:98:6a:4e:
e4:1f:6a:f6:de:0a:73:b4:aa:fa:30:d5:0f:f1:0a:
7a:a0:1c:dc:1e:c4:5a:c8:1e:ff:e1:ec:2f:8a:31:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:6B:E5:26:5F:3D:25:4C:42:F1:9F:50:77:51:72:2A:1A:D0:21
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:db:e5:f8:a3:7b:a4:31:6f:2e:5c:bc:06:c0:ac:b9:a0:e6:
c6:88:51:78:70:00:47:e7:0b:86:b4:ae:5f:5b:c5:c5:76:b6:
ab:d2:a0:84:1e:ad:2b:ff:a6:f4:6c:6b:84:cd:5a:27:c7:e9:
58:03:46:b8:9c:97:99:4f:35:dd:1c:b0:09:8c:d9:13:76:59:
9e:74:ea:fd:34:bc:c3:1f:8c:b5:d4:34:f1:e4:ea:74:ab:15:
e7:04:68:e5:56:c6:bd:b3:c7:3c:3b:1f:e8:ae:7f:d5:87:fc:
ef:87:3a:f8:8a:e7:13:7d:38:14:83:fe:95:f9:16:69:9f:05:
aa:43:cc:80:d4:c7:3a:ca:2a:64:2f:10:24:6b:71:33:94:12:
7b:15:0e:77:92:32:44:6d:fa:ac:5e:23:96:25:29:1c:c3:e4:
02:88:7e:54:61:76:11:0d:9b:40:34:e7:f0:a9:6d:a0:24:53:
cb:c1:14:86:d9:a2:6e:aa:90:4d:fe:40:2a:d7:9b:29:80:bc:
4f:26:05:43:0f:b3:39:cb:30:4c:c7:85:0e:bb:6d:87:81:60:
74:90:70:6f:b6:41:45:4a:00:63:4e:d3:9c:6d:96:9b:67:a3:
5f:e5:94:b1:84:d2:78:49:70:b4:fc:92:19:26:8e:5e:a1:77:
8f:8c:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:22 2025 by rpki-client