Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: U8vEMRhgqkhwp/APTQz59SxDwW40zq6uqzROP9+S2Xw=
Subject key identifier: 50:EA:24:02:AD:9A:17:EE:65:7C:1B:BB:6A:23:C5:9E:F8:46:21:ED
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 0198D54EAF8AF4E14D467A6B8103D6B175AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 11C9
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: QWQ1q5IlstLDT2jDIV1saAYtJJ+ExLO3Jr5Xk1wLfks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:af:8a:f4:e1:4d:46:7a:6b:81:03:d6:b1:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=50ea2402ad9a17ee657c1bbb6a23c59ef84621ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:60:c5:42:21:2b:66:60:2c:46:5d:98:cf:
f6:5a:ff:17:10:dc:b0:95:2b:5a:ae:b3:4a:84:54:
f5:80:3d:b5:e0:19:b6:62:99:53:78:57:3c:77:24:
15:e4:2b:43:e6:49:f7:ed:27:2c:87:e7:4e:fb:fd:
17:48:04:73:be:24:c1:ae:67:96:2d:9e:61:69:37:
4d:e5:d6:6c:84:9c:91:b3:2b:22:c1:e2:d9:1a:7a:
09:92:57:73:90:7c:6d:7f:5d:7e:19:74:c9:83:9a:
a2:5f:35:c0:6f:a1:98:df:8a:03:10:7c:5f:a2:0e:
88:60:c9:2d:9d:ae:2a:0e:b4:7f:b4:7e:8a:81:47:
68:56:ca:9f:56:a1:cf:fb:00:fd:44:53:3e:06:1f:
09:99:5b:bc:72:f9:ba:8a:7a:79:2c:4c:30:e4:2f:
58:8f:3d:12:03:e4:3f:5c:58:ea:95:49:46:24:27:
3a:af:46:76:02:a1:8f:e0:02:5b:45:9b:0c:a1:d0:
c9:cc:e4:93:06:ff:ac:bf:4b:69:fa:11:e1:f7:ef:
31:56:bf:c8:4d:42:58:27:ac:02:04:1a:ca:ea:3f:
58:b0:95:5f:32:09:8e:17:6c:76:94:cf:27:25:db:
31:01:05:df:34:0c:cc:de:70:93:8f:39:12:ed:3e:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:24:02:AD:9A:17:EE:65:7C:1B:BB:6A:23:C5:9E:F8:46:21:ED
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d2:8d:dc:a3:68:d8:d7:66:c3:38:15:35:a7:fa:58:10:57:
1b:43:7b:c0:e0:09:13:71:03:11:16:2f:a0:a9:fa:6b:3a:5d:
fa:b2:e8:20:17:18:f8:32:39:79:68:d2:4a:df:c2:2f:30:13:
2e:a9:e1:0b:13:8e:3e:57:0f:ca:69:d4:c6:90:cb:6e:14:70:
09:ae:0c:17:25:ba:24:26:b6:cf:54:ae:43:19:18:be:95:48:
f8:4f:d0:64:19:e1:00:92:99:e3:d0:ac:f0:24:99:d0:25:55:
0b:04:38:07:82:0b:c7:01:0e:3c:1d:55:7d:b9:35:79:2a:41:
39:2f:72:92:fc:83:70:3b:fa:02:b7:d3:4c:4a:2d:f0:5f:c6:
43:ae:9f:c7:a3:fb:94:a1:a5:37:5f:45:8b:af:ec:b6:ae:5e:
34:96:9f:1e:23:e4:8d:08:3d:dc:47:2b:f5:9f:78:c4:05:95:
01:d4:d2:33:c8:ed:5b:bf:c6:1e:df:eb:50:cb:58:5f:e6:fa:
c7:00:77:78:86:3c:94:33:ee:18:fb:79:5f:13:36:02:40:39:
c5:e1:87:0f:53:42:d6:a2:60:6e:a3:46:cd:42:07:cf:5c:79:
d5:b6:39:de:77:80:10:6b:1f:86:0f:a0:da:9f:51:b0:37:09:
61:53:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:35 2025 by rpki-client