Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: sNlKYWDRNXlRHvhg2c8H57nIlLKZeBYfGP92ekYuZ5U=
Subject key identifier: B9:3E:93:0C:BF:DA:1C:8F:7C:A6:20:DC:81:25:07:FB:41:49:30:33
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 0198D516077BD251723641D1F3C765279DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 0503
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: 3lEZwUTsgtCu89uJT0eqC6hbjFzZBxGhmOAjG3xHhZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:07:7b:d2:51:72:36:41:d1:f3:c7:65:27:9d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=b93e930cbfda1c8f7ca620dc812507fb41493033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:8e:ac:4c:64:ab:98:b3:07:ea:1f:99:56:
32:f5:37:d8:ec:fe:2f:2c:33:f2:7a:7a:26:f1:a9:
d5:fd:3c:59:94:0e:00:a0:84:fb:7b:1e:b0:a6:3d:
1f:12:4e:21:a0:7e:45:e8:c7:85:9f:9a:d9:3c:04:
92:b8:e3:1c:4c:08:7e:a9:cf:d3:93:2f:9c:61:c7:
bd:8a:de:01:2f:60:1a:8b:bb:63:2c:02:75:9d:74:
fc:62:ff:e4:24:b9:2f:f6:e5:ff:c8:e6:c3:21:d8:
46:59:26:c9:5b:e3:c2:89:7c:fb:f5:c1:b7:3f:45:
ae:4f:47:e3:96:cb:4d:e8:70:58:91:94:71:e3:90:
1c:9a:07:d7:3d:0e:5b:bc:46:c4:69:b3:d3:f9:57:
fa:0f:e8:b4:70:dc:cd:23:8d:c7:97:78:d7:33:38:
66:77:2b:4e:46:ac:67:db:99:ea:88:19:61:5b:52:
0c:ed:7e:32:44:15:46:c6:36:25:fd:a8:ff:ff:c8:
6b:75:5b:2c:e6:af:15:3f:c7:42:76:18:2e:9c:a9:
5f:00:a1:bc:77:c5:1b:b1:f1:95:88:b4:5c:75:a6:
ed:70:91:1b:d1:e2:45:1e:32:0c:95:6e:f9:6e:97:
1f:eb:d3:87:61:db:86:8d:d7:44:cb:b6:2d:88:80:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:93:0C:BF:DA:1C:8F:7C:A6:20:DC:81:25:07:FB:41:49:30:33
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:8d:1b:2b:15:c3:c0:78:cf:4e:f8:bd:63:89:eb:c2:36:
7d:cd:44:0a:9e:85:e8:a2:7b:65:bd:fb:7d:da:33:76:d2:5d:
a3:3c:e5:15:1d:f0:30:85:d4:fd:60:a8:6e:1e:b5:50:a9:80:
d1:77:70:0e:9b:df:3e:71:3a:26:b5:f0:d4:df:df:89:d2:f3:
9e:16:eb:72:75:02:8d:cb:de:9f:db:02:17:f3:ab:16:e5:a9:
c0:c9:7d:5d:fa:e5:b1:79:17:1e:7f:89:94:f6:a6:4d:51:9a:
9c:0e:52:86:b5:08:20:62:32:4c:1f:6f:50:07:0d:b8:b0:2c:
fc:c8:2f:25:36:13:42:e2:d8:a7:2b:d1:c4:17:05:06:fa:3b:
64:58:b5:c7:01:b3:8b:cf:f7:3e:b2:7a:fc:4e:ea:ac:8f:bb:
19:c1:5a:6a:fc:51:7b:02:a3:40:5b:63:4e:ed:16:12:e7:61:
32:90:51:11:cb:5a:b3:57:14:8e:77:e2:dd:91:06:2c:30:98:
a1:07:67:16:48:16:c4:8c:a8:9a:9e:9b:bf:00:05:84:34:f1:
82:fb:21:8a:3f:78:f0:04:8a:0e:bc:3c:5c:c9:cd:5d:ff:2e:
8f:4e:cb:fb:ee:3b:02:de:ba:6e:1a:88:f2:cd:c9:2a:00:43:
9f:af:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:43 2025 by rpki-client