Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: LvIjwNWygHDaKmSIEp9fE3tQ01Q0Sff4t2HzwGnuhpc=
Subject key identifier: 81:A0:0A:68:18:86:34:FB:0A:8D:4D:31:BC:7C:F7:ED:43:DF:70:58
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 0198D850D7DF53FFEEAE2AAEB4C9F99690DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 19:03:53 +0000
Manifest this update: Sat 23 Aug 2025 19:03:53 +0000
Manifest next update: Sun 24 Aug 2025 19:03:53 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: yVSAX0+rQJCXju3K0D8fAMuw0ljVqR5SJvOoJIuiUWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:d7:df:53:ff:ee:ae:2a:ae:b4:c9:f9:96:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Aug 23 19:03:53 2025 GMT
Not After : Aug 24 19:03:53 2025 GMT
Subject: CN=81a00a68188634fb0a8d4d31bc7cf7ed43df7058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:51:0e:4c:c9:30:db:9c:9b:9d:df:03:d3:
fb:bc:a3:f8:5f:0f:f8:89:bc:48:20:34:fd:e2:d6:
5a:1b:31:b0:ad:cb:d6:d8:c0:94:76:51:d0:80:62:
5a:08:82:60:41:47:d1:75:db:18:29:53:60:e0:e4:
f4:e9:56:06:bb:f3:2d:19:f0:bf:5b:cc:3f:a7:b4:
26:66:9b:1c:50:f4:c9:bc:b5:5d:1b:44:1e:56:f8:
89:e0:63:35:d2:d3:87:9f:5a:f7:59:34:32:b9:16:
02:20:3a:c0:3f:de:33:05:6d:a2:b6:c4:ea:bf:74:
e9:8a:56:6f:a8:cb:00:95:fe:47:56:1d:76:44:7e:
a1:51:7d:a8:0f:c4:b3:58:3d:e0:9f:6e:8c:47:3b:
06:a8:e0:0e:ce:e4:7b:8f:2a:d5:b4:ff:13:c7:97:
09:a9:d7:69:1e:f3:93:48:92:0f:8d:8f:da:ba:c2:
a9:f0:e2:b2:af:cf:16:95:c6:a2:d1:52:72:94:dc:
4c:d5:1e:85:1d:b2:58:3d:6c:76:07:46:48:22:ca:
1b:72:93:1c:e8:05:2e:f3:d1:c8:a1:c3:00:7d:a6:
5b:49:18:53:3b:9e:f4:41:88:0d:f6:80:96:95:2d:
a1:f4:f1:f7:3e:4e:00:cc:c1:95:9e:42:21:f6:ef:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:0A:68:18:86:34:FB:0A:8D:4D:31:BC:7C:F7:ED:43:DF:70:58
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9a:57:f5:56:ed:d5:4c:c5:56:36:0a:33:9f:ac:6f:6a:9e:
4f:57:19:cf:d6:52:fa:23:1b:74:3d:c1:b4:57:c7:d1:69:de:
4d:0e:24:b5:5e:16:1b:0c:72:ca:65:e9:cd:c3:30:30:39:b2:
e6:d3:53:f4:3a:b5:d4:7f:1d:f6:16:a2:65:8e:29:b1:a3:d7:
33:14:73:93:15:a2:b5:c1:7f:af:5a:bc:22:58:3e:da:fd:46:
24:6b:b0:b6:99:19:f3:3a:bc:65:c7:06:e4:fa:c0:af:3f:1a:
c3:0f:58:fb:67:66:cd:42:fc:48:6e:fd:96:71:83:2e:b4:72:
dc:13:43:d7:bc:54:e8:fc:7b:68:43:31:6d:9b:1f:e5:cd:35:
32:89:61:d9:78:a3:10:5d:81:e7:e1:e6:71:a5:a8:e7:66:93:
f6:39:5d:c6:75:e2:a2:ae:cd:25:d0:29:a2:02:d7:98:a6:28:
f0:9f:5a:f2:de:ae:b2:99:44:4c:0c:ad:03:94:19:ea:f8:9b:
39:cf:d9:99:82:85:66:af:2a:ac:e4:41:df:f0:5b:1b:a7:eb:
15:ee:57:ed:71:7b:f1:d4:cf:85:d8:9e:c4:28:3e:b0:9f:24:
89:a8:b9:ff:79:35:0e:c5:22:80:ae:11:2f:0d:56:cf:0a:8b:
a9:95:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:57 2025 by rpki-client