Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: 3rLuebN2HY+2WA94Pdgnv46q6YVL2nAADthrsDQwGbs=
Subject key identifier: 11:83:55:C0:66:01:46:3E:71:97:6D:10:D9:9D:A0:98:32:B0:A0:16
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 0198D73B01220CB9F8CC2C130EF687F0658D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 14:00:25 +0000
Manifest this update: Sat 23 Aug 2025 14:00:25 +0000
Manifest next update: Sun 24 Aug 2025 14:00:25 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: XLDw4j1TyOE/H2s1YPpVP0yxqZNJTsD27Hu37k1WyhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:01:22:0c:b9:f8:cc:2c:13:0e:f6:87:f0:65:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Aug 23 14:00:25 2025 GMT
Not After : Aug 24 14:00:25 2025 GMT
Subject: CN=118355c06601463e71976d10d99da09832b0a016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:4d:0b:89:11:f9:24:8a:45:c7:25:d0:3f:
65:82:33:78:75:28:71:f2:f6:49:5b:1b:56:4c:5c:
e2:72:dc:eb:6a:e3:a8:ca:8f:d2:9e:73:fd:dd:9e:
aa:bf:d3:ee:9e:cb:bb:c5:ef:f2:57:0c:45:d1:cf:
c5:b6:ea:af:fe:84:2a:b9:ca:7f:0c:19:00:82:c2:
7e:49:32:c5:db:0c:5e:6f:82:42:e8:15:a9:91:9b:
d8:77:47:cd:c6:df:43:30:a2:29:70:4d:65:43:34:
22:41:f5:1a:c9:61:5a:ac:0c:53:a6:fd:18:e9:f5:
89:16:c1:35:6a:01:69:82:41:a3:c7:5b:7f:60:13:
aa:2c:79:15:48:00:50:c7:3a:bf:f0:02:1b:ab:0a:
84:4f:38:12:bf:b3:e8:2f:99:09:8f:11:8c:78:86:
04:61:62:39:f0:8a:a6:cd:22:79:fb:57:bb:d4:08:
c1:dd:fb:e6:7f:67:4f:40:da:b9:17:78:b0:c7:7e:
b7:2e:8c:eb:0d:a0:e6:33:96:29:6d:d4:91:f8:03:
f4:5c:05:9d:f1:71:2c:01:c6:49:d0:ec:ad:d6:7a:
6c:49:43:ca:a3:27:af:fd:df:8b:cf:31:63:6e:36:
39:da:78:42:66:0a:26:cf:52:89:af:bc:67:3d:86:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:55:C0:66:01:46:3E:71:97:6D:10:D9:9D:A0:98:32:B0:A0:16
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:61:94:da:b1:4b:0d:db:3c:8b:f2:f6:b4:97:03:f9:aa:
f1:c0:48:b4:f3:7e:ff:d7:69:11:02:3a:6d:29:69:26:ae:3a:
54:ca:84:28:21:c3:53:26:07:d7:5f:cd:80:5b:0a:60:e2:cb:
ce:d1:d3:56:68:4c:0c:55:fb:36:ff:b7:28:f8:bc:13:b3:5d:
37:49:21:f1:98:c4:cf:75:48:c7:72:d1:61:fa:bb:20:8c:e9:
ae:7a:01:9f:fd:bd:22:61:a1:2b:e2:c8:0e:62:96:35:59:d7:
02:02:ac:d3:1e:9d:0d:2f:8c:3b:1c:f6:08:d4:98:d5:a1:18:
dd:c8:fa:c1:5a:58:75:9c:f9:e3:28:26:34:2c:a6:ab:d4:3d:
b0:bb:90:2d:98:8d:47:b2:e2:ff:dd:e6:39:4a:23:d1:25:d5:
49:6e:bb:41:59:6e:bb:d4:6e:55:cf:81:a8:5b:d8:c6:83:4f:
bb:66:32:60:ef:fb:d1:79:47:68:25:d9:67:dc:ec:97:4f:f3:
6d:9d:62:48:50:da:d3:97:db:94:e8:3e:09:0c:3a:2e:9b:8b:
b7:d2:4f:3c:b0:c3:15:b3:dd:fb:39:e8:39:68:e7:e0:13:c1:
6f:d5:82:81:0e:b0:80:ae:ce:1a:28:0c:2d:d2:7a:cd:8e:55:
cd:db:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:37 2025 by rpki-client