Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: yBasuGX6FlPPAKrlodcbZLbj2Ow9mmk7A9q/RKm9PCQ=
Subject key identifier: AA:CF:B6:DF:15:80:D5:01:27:F1:21:EC:AB:BB:F7:87:B9:D4:EB:E9
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 0198D472B47471784514255096F0350DB232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: GY9Z1z3S+2Y9jNQ/QuByBZYmlTJ6r8GKtX//dfs7Ww0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b4:74:71:78:45:14:25:50:96:f0:35:0d:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=aacfb6df1580d50127f121ecabbbf787b9d4ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:a5:b8:c9:1d:89:95:c0:dd:7f:02:1d:5d:
ac:5b:17:2e:28:b7:2f:40:ab:eb:06:50:b8:5e:f2:
ac:69:58:5c:40:c3:f7:c7:4a:d6:de:cb:dd:8a:7f:
ee:5b:33:fd:67:0c:9d:00:0d:21:b9:11:5b:ea:a1:
ff:0b:58:db:35:8a:d0:ce:9d:3f:bd:bd:ca:19:c5:
d8:95:29:4c:28:bf:7c:21:19:44:ce:b0:ed:f4:0c:
bd:93:f9:51:a9:39:e2:f0:0a:e8:07:b8:19:c5:b9:
57:d4:ab:e2:fb:85:45:e9:97:f3:6f:aa:34:41:6b:
88:d2:c4:92:0d:90:c0:9d:bc:1b:a1:fb:d5:e7:09:
fd:a7:a1:4e:7d:b5:c9:f1:1c:ba:6f:fa:81:fc:6b:
50:f1:bc:9e:ea:36:07:94:13:46:ed:1e:a6:70:ba:
7b:47:91:69:72:6f:ac:01:c4:f3:32:bb:7a:35:59:
05:db:59:7a:f0:9e:aa:cb:9e:5b:a5:a4:3d:cc:0f:
96:37:0a:43:4d:79:70:d6:08:8e:d2:f3:a0:0d:49:
1a:f1:f2:3e:74:c7:3c:89:69:21:1d:8a:19:cf:ec:
83:a0:76:71:6f:63:81:15:b3:6a:75:3a:07:b1:4b:
e4:5e:35:48:39:08:d5:fd:f8:c7:56:9a:7a:c8:e2:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:B6:DF:15:80:D5:01:27:F1:21:EC:AB:BB:F7:87:B9:D4:EB:E9
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:07:b4:e2:94:a1:6a:8d:d7:3a:da:8d:d2:74:7a:6b:34:
1d:e9:00:74:bf:b4:e6:5d:dd:7c:8c:5c:65:1d:5d:d4:bb:41:
75:72:ba:35:74:4b:30:e2:d3:bb:ea:19:e8:93:18:10:13:a0:
60:68:9a:68:b5:9c:13:0b:d5:ba:d1:e6:88:d7:f7:31:48:29:
35:1f:8a:b5:eb:92:f1:a3:60:30:0c:2d:8a:9a:99:a9:79:90:
0b:40:9d:33:45:ab:5f:49:a7:36:5a:24:7e:eb:73:ce:b4:47:
b6:5c:44:62:3a:72:80:42:3e:84:22:a8:9f:8e:27:78:51:ef:
99:82:17:c1:d2:65:e3:74:e4:6f:27:48:ec:8d:7a:2a:51:1a:
49:af:a9:83:f1:b9:da:fb:e6:05:74:5c:2e:b9:a4:c2:84:ab:
ee:4d:3d:d3:fe:b7:8f:e5:fb:de:1f:42:ab:7b:0f:01:1b:e9:
27:8c:b4:1c:54:dd:41:31:38:82:30:37:37:13:c4:30:fd:27:
c8:05:d9:21:66:35:db:80:13:0e:2e:38:6d:45:76:d2:07:d0:
38:2a:23:c2:71:44:5f:87:f8:ff:b9:43:a3:e5:02:9d:01:ef:
03:a4:42:a8:35:15:4d:8c:c2:cd:20:61:e3:cf:45:1c:b9:e5:
2c:44:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:56 2025 by rpki-client