Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: 4FktBWDY0ArTNFa5S+PGguwfJhRI6B2X5MPfqcNIY5k=
Subject key identifier: B4:92:6E:F1:2B:D0:37:8A:D1:E0:57:C2:40:C3:42:00:84:4C:21:D9
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 0198D4746FA9ACCFC55BA175C45281A89414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:04:17 +0000
Manifest this update: Sat 23 Aug 2025 01:04:17 +0000
Manifest next update: Sun 24 Aug 2025 01:04:17 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: Mnd7VK29NvXeBcj1BFlJiP54l6lDU87Uh9iiC4wj3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:6f:a9:ac:cf:c5:5b:a1:75:c4:52:81:a8:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Aug 23 01:04:17 2025 GMT
Not After : Aug 24 01:04:17 2025 GMT
Subject: CN=b4926ef12bd0378ad1e057c240c34200844c21d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:b7:de:44:a8:e5:bf:c1:d7:1d:61:03:50:
df:02:5c:19:71:8d:95:0b:ad:b8:63:0f:b7:b1:3a:
5d:61:06:57:a8:cc:c4:4c:fe:1a:fa:69:f3:40:e9:
29:1b:c5:44:ee:71:c2:4e:9d:dc:c1:f4:4e:75:16:
0f:b1:64:74:04:2c:a8:0e:da:d2:6d:d7:08:9e:26:
9a:07:4a:90:bb:53:5c:3a:64:29:da:6a:c4:1e:92:
cf:fa:bd:01:16:91:ee:b1:77:72:58:8d:1f:fb:99:
02:4a:cf:0c:ef:e4:11:03:87:a2:b1:10:4f:9b:74:
92:4b:9c:2e:1d:a8:8c:26:78:f3:0b:c3:5f:46:6f:
54:60:d4:c1:b4:17:8e:22:94:c6:08:c2:4d:56:23:
96:56:2d:df:77:3f:44:55:14:71:42:c8:85:a3:4a:
67:3c:a4:f2:ba:3a:d4:40:00:35:c6:53:69:9b:aa:
d1:af:a8:a8:82:33:72:67:4d:07:52:f4:07:73:57:
e0:93:1b:b8:4b:b7:51:cc:40:a0:04:e1:92:1e:f1:
9b:27:ed:ab:e2:19:d3:20:61:9e:e2:07:ad:2a:fd:
ac:78:8f:03:ec:61:64:21:32:b1:2e:57:da:d6:f4:
e9:e3:97:a6:f3:ae:a0:f7:cd:61:e8:06:66:53:b1:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:92:6E:F1:2B:D0:37:8A:D1:E0:57:C2:40:C3:42:00:84:4C:21:D9
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:aa:d1:50:63:c8:1f:6a:23:26:ac:e0:9b:90:32:03:a5:29:
b2:b7:7a:81:86:63:ff:c5:14:16:d6:44:7b:13:1c:ac:62:04:
6b:c6:b6:12:b6:25:83:96:51:e4:c9:41:d9:4b:ac:58:1b:b2:
bb:93:4d:a4:b2:f8:f2:ac:99:2b:95:38:7b:91:fa:4f:e5:e5:
05:72:40:9d:05:7e:0e:19:4e:de:55:5c:c6:77:e8:eb:ac:f2:
6e:84:fa:c6:83:79:5a:f8:55:ce:af:d9:b5:10:1d:a1:07:57:
92:9c:ba:f8:ed:82:cb:3f:56:f3:8d:c1:86:89:71:62:63:6c:
a8:b1:6a:21:98:70:5d:9d:f1:c3:6e:44:91:f7:9e:5b:34:5c:
d6:41:53:71:0b:61:b2:d2:bc:a6:d8:58:d3:31:9c:fc:db:c8:
0c:72:f3:c4:2e:96:b3:6b:3e:6c:7e:40:7c:6e:ca:6c:20:93:
9f:43:b5:91:a7:33:97:cb:a1:08:1f:a5:9f:97:e8:e1:04:dc:
92:f4:bc:af:cf:ab:d4:1b:8e:0f:d0:4d:3c:da:07:65:df:0c:
83:ac:1f:ed:dd:b1:9f:7a:e4:15:0d:38:f6:44:7a:84:be:bb:
d3:74:ba:60:b2:18:6d:3b:94:84:8d:12:48:28:09:85:a5:13:
6f:30:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:42 2025 by rpki-client