Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: 3KxLJUFEiQq0zW6IVgQA6NiYQ97tWBFhRRtnntwMSew=
Subject key identifier: 2E:32:B0:3D:D4:25:B6:4D:C2:D6:44:FC:9B:6B:A1:91:1F:A4:4C:92
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0198D69849B14C013B95987E69E84064C999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 0466
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: Oig5uP8//SM7AdDJS02OS8czme1Y7n9xcvHRKIckj9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:49:b1:4c:01:3b:95:98:7e:69:e8:40:64:c9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=2e32b03dd425b64dc2d644fc9b6ba1911fa44c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:c8:4c:d9:17:20:d2:6b:2b:06:4b:7d:e0:
2f:59:63:b7:7e:8d:bd:09:37:08:03:35:b3:cf:25:
b9:d2:93:e0:23:76:22:48:de:07:6d:4a:c5:1f:5f:
f9:16:8e:8d:9d:41:49:36:ea:f9:30:68:a0:ed:53:
cc:11:5e:b0:81:73:ea:84:93:ad:7c:85:97:81:8a:
1d:e4:3e:eb:df:56:c8:ae:ff:e9:7c:80:91:7b:fe:
74:94:f9:e6:dd:33:84:78:c6:8f:5a:28:6b:c1:93:
1b:4c:32:5d:65:07:cd:5f:24:35:9f:ca:be:a7:cf:
26:22:80:c5:7a:db:bf:6b:e3:1c:45:30:03:65:eb:
c9:71:69:f8:7b:ba:5d:83:3e:27:e5:bb:34:e3:48:
ab:c2:27:72:73:c8:fd:c8:a9:91:04:ff:52:e8:3c:
9e:f0:ec:40:c3:0d:6b:1e:c5:9e:3a:b7:b7:34:8a:
96:de:18:bc:a7:03:22:ee:fd:44:e1:eb:95:d0:f5:
71:80:e2:2c:17:16:29:47:95:f8:b0:c5:f7:dd:d1:
a4:08:2c:d2:6d:b7:55:74:6c:b6:b3:cc:d3:2b:46:
b1:cb:52:1f:01:58:7f:47:6b:9e:e4:83:f5:47:5a:
b3:29:c9:62:ce:03:11:f6:50:cb:95:16:b9:0a:7c:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:B0:3D:D4:25:B6:4D:C2:D6:44:FC:9B:6B:A1:91:1F:A4:4C:92
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:9f:38:6d:05:70:dd:41:fb:a5:6e:2d:fd:41:fd:89:4e:
9b:b9:e7:55:da:ac:18:cd:4f:b0:37:4e:46:e6:f6:db:46:4e:
cf:66:ac:bf:0d:ba:96:1a:b6:ac:a1:90:b8:97:ad:0a:f8:38:
c4:6c:b1:f8:25:a6:23:8c:82:98:63:68:4e:48:d4:7b:be:0e:
d7:79:db:47:d9:dc:89:fb:27:cb:48:00:67:62:c7:1d:0e:31:
bc:50:8d:de:5c:3f:ab:82:77:38:21:4d:92:c2:74:10:15:4c:
46:6c:30:c1:13:60:90:0d:d4:ae:c5:aa:44:24:f8:7b:ca:b1:
76:a0:af:70:9d:77:2f:02:97:0b:b5:1f:1e:ef:84:bd:e3:ce:
c4:d0:d6:d3:16:e6:23:15:80:f4:fd:fd:52:0f:f3:f3:50:8c:
01:76:4d:1c:9e:8f:66:b1:36:79:1e:af:a2:66:9a:75:95:a1:
ca:e0:7d:bd:db:1d:ad:f6:40:d9:fc:ac:92:74:17:61:fc:dd:
2c:99:1b:2d:8c:8f:e3:03:8b:c7:3f:20:bf:9e:0d:c4:68:cc:
3f:3b:5e:5d:17:69:f4:bd:05:29:72:1a:42:a8:ac:eb:c3:cb:
d5:9b:c5:13:21:a2:82:3a:ef:b1:ce:a7:ed:97:95:0f:fd:2e:
75:fe:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:02 2025 by rpki-client