Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: tSGOkUur1LMnDImcwOuiBTzak1F9UhKYNYuRr3YVS04=
Subject key identifier: D7:03:53:5F:68:D6:72:E6:30:F6:61:49:22:4C:C2:6A:F0:68:45:2D
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 0198D5BB82F06183EDE06D01DF798B88AB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 04C3
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: lWFK9C5uJk2XXg7m0RqA4xCa3PRQWOF7dQFvAeVcl6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:82:f0:61:83:ed:e0:6d:01:df:79:8b:88:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=d703535f68d672e630f66149224cc26af068452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:19:2d:21:43:a6:2a:20:65:ec:53:99:ea:
3a:48:4c:f9:97:0a:78:f5:d4:b6:72:88:db:1c:58:
7b:c1:43:22:97:71:3b:14:7d:c5:c4:9d:a5:ef:05:
a2:29:fa:b9:ab:ec:9b:5e:07:f2:fe:8a:5f:38:44:
aa:76:bb:b7:3a:c8:36:85:df:64:38:7f:71:66:c6:
af:73:4c:32:b5:c7:f9:06:cf:c0:42:7e:bf:44:ee:
9b:69:52:9f:6f:b9:6d:7b:27:8b:47:31:c1:2a:96:
50:34:98:d7:b4:c7:de:e4:c7:64:f2:e8:8c:41:c0:
45:f8:54:2e:7a:1c:65:ee:29:b8:d6:f0:28:29:92:
6e:dd:bb:ee:69:18:7b:57:b9:43:c2:35:c4:59:f9:
61:00:e5:56:14:53:8d:34:0c:01:55:0e:9c:57:1f:
e2:60:01:32:48:ea:25:43:62:76:4f:3b:07:7e:44:
c6:e6:20:1f:83:10:3e:17:b2:57:66:16:bb:dd:0b:
a6:ce:ec:06:fd:60:52:a3:da:5c:13:8c:90:47:df:
d3:d0:71:1a:3e:f6:9c:63:7d:c2:d7:0b:db:81:44:
44:2e:5f:d7:79:75:b9:48:c1:e8:03:64:b4:da:12:
ce:40:ff:f6:c2:91:38:87:b4:a7:23:23:e6:47:4e:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:53:5F:68:D6:72:E6:30:F6:61:49:22:4C:C2:6A:F0:68:45:2D
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:61:f8:43:ad:fa:0a:0f:ff:6d:82:3b:15:7d:19:1a:80:
ca:9f:2f:6e:53:96:e8:76:53:d2:46:5f:b7:6e:f0:4c:a5:0a:
4f:32:9a:35:88:b7:34:2d:2e:7c:1e:ec:7a:3d:35:94:e3:b3:
54:7d:e2:74:24:9b:9c:b9:e0:ca:d7:26:fd:79:6e:a5:21:7f:
ab:78:ed:d9:4e:d0:c8:4d:c8:e9:7a:4f:74:26:d8:10:69:15:
69:9c:95:59:17:c7:35:d7:70:7c:9e:37:8b:72:0c:0a:ca:34:
e0:d8:dd:82:37:53:b4:2d:d7:5c:db:16:9f:25:c9:cf:c2:be:
f1:c1:bc:5e:04:27:74:66:7b:87:0e:e7:8e:f8:70:ec:ef:fa:
3c:e4:78:83:74:10:db:ab:d7:90:78:ef:34:dd:32:65:48:be:
b7:e5:1e:ce:67:6a:87:75:55:4b:9e:1b:47:04:9d:98:d9:56:
13:43:92:6f:8c:50:01:6a:46:d2:e4:5b:d6:7c:ae:1c:da:56:
07:0a:93:bb:ec:80:ab:b9:a1:68:9f:1b:e0:29:09:a9:00:e9:
2b:aa:a5:44:b3:8f:12:9f:31:76:20:61:f3:bf:37:df:8f:f6:
eb:99:c1:2a:c7:04:a0:3b:a0:b2:02:ef:5d:5d:bb:2b:0f:27:
c9:63:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:36 2025 by rpki-client