Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: lnE0KpBeRjLzFq19pePBiveHh/SWUdOCNvGqhN4T67g=
Subject key identifier: CF:53:B5:29:E8:AB:63:43:C5:FD:E8:0B:DC:B8:A4:B3:48:CE:CF:7F
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 0198D4A7C25AB189C1DF15C1C20E08C3924E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 056F
Signing time: Sat 23 Aug 2025 02:00:20 +0000
Manifest this update: Sat 23 Aug 2025 02:00:20 +0000
Manifest next update: Sun 24 Aug 2025 02:00:20 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: ySfDowPs4Ro0NooDwB/BmJhW6GlNV1r6JEjYORUuNWo=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c2:5a:b1:89:c1:df:15:c1:c2:0e:08:c3:92:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Aug 23 02:00:20 2025 GMT
Not After : Aug 24 02:00:20 2025 GMT
Subject: CN=cf53b529e8ab6343c5fde80bdcb8a4b348cecf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:23:25:57:c6:76:7b:9f:41:c1:a5:ae:95:
c7:0d:47:c6:72:0e:76:8e:d4:e8:05:bb:89:12:89:
b7:7d:eb:f1:86:0d:4a:c9:93:99:3d:ba:fb:36:dc:
7c:fd:1d:c7:4c:ca:72:43:fc:54:f9:6b:11:78:ec:
cc:d7:87:df:ab:1b:ea:da:f3:fb:24:cd:fa:6f:81:
d2:ac:9b:ca:50:34:30:bd:43:84:70:2b:13:28:4c:
10:b5:54:63:de:9e:ad:f5:b6:66:67:ab:1e:c2:6d:
6f:eb:cc:68:d9:89:68:4a:9c:8a:4d:64:b3:d1:cd:
f7:2a:01:50:02:b1:14:7f:4d:22:78:3c:b0:48:70:
21:18:57:71:2d:f2:b6:2c:eb:1a:cc:bc:41:2c:2a:
33:29:a0:9e:c2:da:59:7d:c3:90:36:d6:40:8e:ea:
e4:9f:2a:ea:02:ee:4b:5f:29:4c:7a:2d:12:13:24:
86:68:ff:fc:72:00:9e:19:03:2a:2c:c8:b9:d5:b7:
2e:dd:f7:ff:07:56:a7:7e:d7:18:cb:b8:79:2d:d2:
12:6b:ca:de:4d:79:55:0a:ab:ce:c1:3f:29:3d:f0:
2d:a5:30:50:3a:73:76:6f:9c:4f:fa:0c:f8:54:4a:
f2:2b:bf:bf:bf:66:c7:31:fa:d2:7a:63:7d:55:dc:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:B5:29:E8:AB:63:43:C5:FD:E8:0B:DC:B8:A4:B3:48:CE:CF:7F
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:6c:87:ae:c5:4f:e8:c6:f7:e0:e9:80:bc:24:99:67:00:
9b:58:5a:17:5d:e4:ae:63:68:02:17:b0:6c:43:79:c7:f2:17:
6d:17:07:84:02:52:42:13:1d:5c:64:c2:98:e3:89:54:88:f4:
e6:d3:5a:f2:74:04:4a:e2:b4:3c:86:49:32:24:e7:a0:fa:04:
a0:39:1a:d6:8c:b4:4c:79:7f:0c:84:c8:ef:d0:6c:d7:b2:ff:
03:2d:90:c3:50:24:19:0c:f0:08:31:3b:3c:8d:9a:11:75:63:
93:7a:67:31:66:b4:08:3d:a7:4e:b8:61:b3:c6:37:ef:0f:ce:
ec:9f:02:49:8a:42:02:c5:0d:66:8f:ab:8f:d1:d8:84:d4:19:
6e:95:d4:9b:77:43:3c:2a:e3:d2:30:de:e6:9e:cf:1d:41:ab:
d0:3e:b2:dd:69:97:c2:7d:a5:99:7a:2a:33:09:dc:a3:ca:c1:
29:79:6e:d9:32:f1:de:fe:ea:eb:bb:27:da:f0:38:ca:ab:6e:
99:9a:5b:a8:38:0a:e5:74:d0:cb:f2:3d:da:69:10:f2:af:1a:
a5:3a:93:68:97:72:71:fe:4b:87:9b:19:43:d6:d0:ce:98:df:
80:f6:d2:6a:6c:bd:d2:d2:dc:57:9b:01:f5:df:72:0d:c1:5f:
f6:ed:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:12 2025 by rpki-client