Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: 9qpmpAeOsz/WohxS3RunAMlZWltGR5beJ2UTYD/eSpk=
Subject key identifier: 19:00:5C:8F:44:16:6F:20:98:19:79:7F:FF:B7:82:E8:2A:20:C9:40
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019921B1918E83F4B9A086E23CA0E1833CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:49 +0000
Manifest this update: Sun 07 Sep 2025 01:01:49 +0000
Manifest next update: Mon 08 Sep 2025 01:01:49 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: ll/ONZNMQ/NwrCwHUMb6ypnOWL2zSqP1QnpY3LjwyO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:91:8e:83:f4:b9:a0:86:e2:3c:a0:e1:83:3c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Sep 7 01:01:49 2025 GMT
Not After : Sep 8 01:01:49 2025 GMT
Subject: CN=19005c8f44166f209819797fffb782e82a20c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:da:4e:d2:9e:08:30:14:f1:09:80:28:71:
0c:2f:c7:29:70:a2:d4:c9:bf:24:f8:ee:2e:39:3f:
3e:42:69:a9:fd:79:e9:52:98:4f:23:69:8f:70:5d:
a0:e2:ff:6f:2d:ed:da:db:41:dc:25:79:14:c1:e9:
96:5e:f4:42:2a:21:ea:e9:37:9b:53:ad:37:6e:ce:
ae:7a:79:ad:b1:43:d1:a7:8a:79:b7:ef:55:ae:55:
c2:37:f3:05:1c:07:61:54:aa:67:34:89:c6:fe:4c:
2b:4f:37:da:82:11:ff:a2:39:39:3d:2f:c5:4e:52:
2f:bc:74:11:83:4c:05:7b:5a:3e:54:87:af:35:a0:
7b:34:35:b0:a2:58:72:33:0a:9e:dc:91:5f:8a:f4:
f5:ab:c2:78:31:7c:81:1a:75:0b:5d:21:49:31:ea:
eb:56:c8:68:9a:17:24:d2:9f:0d:fd:d2:7f:a2:80:
a3:1f:94:cd:f1:ec:46:86:4b:8c:04:ab:78:ab:d5:
d7:25:44:58:d5:4c:18:84:1b:26:4c:c7:41:b8:11:
ce:1a:f9:50:84:01:00:de:22:7b:da:f0:4e:27:6a:
d0:31:c8:e8:7e:c6:df:35:b4:90:d6:93:a2:dd:4e:
15:ac:ab:65:e1:13:45:73:c1:a4:0c:dd:81:1f:95:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:5C:8F:44:16:6F:20:98:19:79:7F:FF:B7:82:E8:2A:20:C9:40
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:0b:cc:82:b4:92:a7:31:eb:dd:03:04:fd:a2:6e:c0:6a:
a1:1d:b8:26:3d:ac:0f:ac:c8:62:cf:c6:eb:a0:0b:46:bd:d7:
dd:21:77:fa:53:96:29:3a:b2:ae:83:7f:a7:8c:f9:3b:01:ae:
30:56:22:a6:57:c1:26:7e:ed:85:c9:bc:78:29:44:2d:34:b9:
56:45:49:84:09:68:c4:92:a1:d6:20:76:62:15:72:d6:ef:86:
08:b0:0f:b4:6e:19:04:8d:92:07:51:62:2a:11:c3:ac:83:fe:
eb:a8:97:62:b8:36:84:70:a4:6a:26:a2:ec:99:f5:0f:0f:4c:
45:28:26:5a:ac:0d:e4:3f:5f:8e:b7:56:f7:75:b1:49:3d:bf:
a9:6c:a7:fd:f3:bb:61:e9:a4:4e:da:d1:4c:b3:d3:58:9f:83:
c5:7d:f2:0b:cf:63:fe:d7:cc:63:a2:01:2c:af:15:7e:52:dc:
d8:e3:6e:53:7c:37:68:20:37:96:75:c9:49:a1:04:a8:a8:ed:
18:42:cf:7f:66:c0:39:eb:e5:c1:bb:28:9d:6a:7d:e1:72:80:
77:3f:25:8a:56:69:ad:d5:6f:62:18:9d:a2:ab:5d:a8:98:5b:
5d:26:01:f5:d3:63:0d:a3:c5:77:ab:d7:69:01:9c:59:bf:ae:
16:8c:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:24 2025 by rpki-client