Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: vcdipEWk1s9lA/cznhmF7j8dvFWLtp1hAY34j5osA2w=
Subject key identifier: EE:EA:1E:C8:FE:94:C6:B6:6E:61:C4:4F:03:6E:CE:58:89:3F:0A:BC
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 0198D4E02DD1424C3549446CB6A1368CF777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: uMhbg+dAQevV34Ve8J/u5hDRl/6+a1YUaewOMMUA+a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:d1:42:4c:35:49:44:6c:b6:a1:36:8c:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=eeea1ec8fe94c6b66e61c44f036ece58893f0abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:b0:0e:ab:c5:23:eb:42:e6:50:b5:1a:b4:
4a:db:91:e6:fb:c3:fb:21:0b:fe:3b:d9:13:5e:2b:
5c:d5:59:76:6a:2d:6d:bf:7d:24:f4:00:b1:39:51:
d1:3e:d4:02:64:2e:62:21:22:22:f4:c7:ea:77:f0:
49:bb:e3:64:42:7a:a5:98:f1:45:14:0a:b4:fc:18:
0f:a9:01:bc:56:66:c1:50:70:12:0a:96:cc:8c:bc:
23:80:72:8c:0a:a7:cc:b2:0e:ce:9c:8d:dd:42:ad:
02:4d:df:24:45:46:29:28:3c:47:01:7d:f5:c6:cd:
8b:4d:5d:5f:d1:17:f3:20:40:60:64:e4:42:ca:a3:
a3:ea:c7:dd:48:d2:ee:7b:1b:b1:bf:34:8a:00:90:
f9:96:5a:48:69:89:5c:ec:81:00:76:6c:82:e7:38:
29:80:b0:09:db:3d:a7:74:45:9f:ee:b7:15:9d:4a:
64:34:38:42:14:b0:4b:c4:ae:09:1a:7b:49:a3:f0:
38:1a:56:b7:d4:dc:ba:86:30:8a:6f:ff:66:16:69:
ce:42:d4:e9:ab:47:a1:99:44:ae:2c:04:2e:e7:d0:
0a:ba:86:06:0a:c0:b4:97:bc:f2:4e:f0:93:1d:d2:
0f:27:c5:a3:9f:cb:f0:07:0b:63:8b:e9:ac:d9:b2:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:1E:C8:FE:94:C6:B6:6E:61:C4:4F:03:6E:CE:58:89:3F:0A:BC
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:95:37:b7:49:dc:63:18:79:36:50:91:cf:2f:fa:e8:f5:5b:
c4:77:d6:9b:06:f1:3f:e2:88:e2:18:8d:42:f7:56:14:48:46:
60:f1:f1:72:f1:aa:28:11:b1:b2:71:d6:f0:80:10:3b:79:cd:
8a:e5:75:e3:68:c7:dd:8a:03:0c:74:49:b8:ab:7f:7d:87:57:
9c:23:74:de:97:61:0b:9d:94:dd:b3:49:03:27:83:1b:d8:2e:
f5:a2:9d:6a:59:86:a1:2d:bd:71:ef:f4:d4:58:87:c6:a3:9b:
72:16:a1:96:35:fb:43:d1:64:d8:f3:34:44:de:f3:6a:7b:93:
c6:91:0f:97:4e:ba:ff:4a:45:89:f5:b7:78:9f:73:09:13:0c:
43:46:44:3e:e0:81:11:0e:fa:b8:d4:d3:5f:f8:dc:89:d8:e7:
64:83:5c:8e:cf:f8:93:88:eb:06:61:77:89:ca:cb:7d:9d:3c:
fb:26:7d:59:8b:2b:21:2a:3f:ac:06:05:bd:e9:9c:1c:b7:9e:
1f:e5:5d:26:c8:88:7b:73:19:b7:b6:08:32:80:b1:59:40:aa:
9b:79:ee:2b:eb:7a:55:e6:bc:54:3f:bf:69:9a:08:64:38:2c:
35:4a:8c:05:e4:8c:68:84:fc:5d:e2:6c:46:98:59:33:88:be:
47:34:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:30 2025 by rpki-client