Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: nzrnVe8eDWyc2Lua1w7cOHtB/NQAZA9Aljds3Et0cAs=
Subject key identifier: D2:C4:F8:F3:59:97:50:0E:18:84:47:57:D4:2B:1F:75:C9:FD:61:C8
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 0198D65FD08685209FAB9DF06F393B687E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 077E
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: Bl+ez5pmVw8Z56uesBBJjw4AvcvGmlsB8NYRXoR06Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d0:86:85:20:9f:ab:9d:f0:6f:39:3b:68:7e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=d2c4f8f35997500e18844757d42b1f75c9fd61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:69:2c:72:7c:fc:57:fd:03:68:bd:0a:ce:
a9:db:08:5a:d4:e1:df:17:f5:fa:9d:6c:e2:b0:cb:
1f:db:f6:99:a4:85:57:3b:05:b8:ca:4b:84:6e:f8:
7b:3b:71:6e:7a:78:07:70:d4:99:47:92:a7:57:3f:
ee:2b:2a:16:0f:40:76:bb:0c:9e:a9:ea:ee:db:85:
34:7b:60:50:2e:cd:96:e9:b8:41:e9:53:95:42:2c:
8d:68:8e:46:9b:7f:78:06:dc:47:de:c0:f2:37:ad:
f9:a1:c8:13:6d:dc:67:3e:ad:4a:b4:0a:e3:63:57:
6b:2e:e5:8b:c3:04:8b:6e:89:c2:eb:be:92:93:ad:
73:50:98:40:36:75:7a:da:3c:7e:7b:ff:ae:b5:69:
99:cb:f2:05:42:ce:2c:78:a7:f8:63:a9:b5:54:c8:
4e:fe:66:c3:06:76:b2:fc:10:3d:c7:a9:73:8d:d8:
57:a3:9f:58:bc:3e:21:25:93:4e:f6:a7:b6:67:10:
fd:36:bf:76:89:0c:36:cc:64:44:6e:67:09:3e:78:
5b:5c:4c:ba:1a:e1:80:21:15:88:d4:83:ce:52:d2:
7b:d6:1c:6c:3c:b8:c8:11:02:17:32:3d:74:9f:2b:
a2:46:d4:60:aa:d9:18:63:94:a3:30:c6:a2:7a:87:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C4:F8:F3:59:97:50:0E:18:84:47:57:D4:2B:1F:75:C9:FD:61:C8
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:fa:5f:19:dc:29:e7:b4:7e:88:4b:b4:b5:da:79:5a:cc:
4b:60:b9:fd:bc:d2:d7:51:f9:4f:1b:85:6d:0f:41:1b:82:8f:
a6:0e:ff:21:84:af:67:0a:73:9e:d8:5f:20:1d:cc:24:72:55:
8b:e8:65:a5:be:8f:5c:27:7e:7e:00:dc:9b:5e:f0:28:ac:7c:
25:cb:0a:bd:20:16:cb:b9:81:c7:3f:c7:d2:27:9b:ad:d5:b2:
69:49:37:1c:e9:1a:5b:e3:4f:c8:f3:0b:a8:02:d7:7d:17:ef:
5d:e2:36:58:dc:4f:26:23:0a:c8:ce:1a:ca:f1:74:f3:5f:38:
1b:6d:b7:63:9f:7e:cd:e8:e4:15:b3:b6:1e:74:c9:6f:7d:e3:
6d:79:03:a6:b3:f6:47:dd:94:7d:8e:6a:34:4b:43:21:3f:3a:
62:59:1f:11:5d:a0:22:02:b8:e8:65:6c:c3:a4:2a:7f:3e:2d:
fb:2e:39:e8:b9:12:48:86:72:33:5d:0c:4d:83:27:f2:63:15:
63:22:f5:f2:df:09:4b:c7:4f:22:c9:b8:6d:cd:0c:ea:ee:e6:
24:79:bf:7b:e0:1d:23:19:58:79:2d:78:fe:e5:0b:27:35:ae:
71:55:f6:a9:b3:35:fb:92:6d:1c:71:10:45:59:15:d6:7b:c7:
e2:bf:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:51 2025 by rpki-client