Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: KEHo2okJrbCR1grR/jLgpIWHu0lsFksTsxfaVuTvFhs=
Subject key identifier: 18:2E:20:BC:22:D3:8A:06:30:A4:56:FC:54:DA:92:52:C2:C6:A0:0E
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 0198D697F8B55F82BB8CE22570E14AD8DE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0A4B
Signing time: Sat 23 Aug 2025 11:02:20 +0000
Manifest this update: Sat 23 Aug 2025 11:02:20 +0000
Manifest next update: Sun 24 Aug 2025 11:02:20 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: LejR/GdIxqjuVrug8rx9ROU7+rEOscsD1KXkHxHCKeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f8:b5:5f:82:bb:8c:e2:25:70:e1:4a:d8:de:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: Aug 23 11:02:20 2025 GMT
Not After : Aug 24 11:02:20 2025 GMT
Subject: CN=182e20bc22d38a0630a456fc54da9252c2c6a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:7c:1d:ef:23:b8:00:f9:27:18:8a:1c:13:
df:3b:66:45:a4:b2:40:94:c4:be:f2:84:c8:de:db:
0a:48:93:bb:d4:e7:26:58:a6:71:67:80:29:eb:58:
8f:00:ff:62:fd:1b:e4:46:5e:dd:22:06:49:90:6e:
16:48:0d:10:4c:86:e2:9f:fe:1d:a0:0b:17:2a:da:
9d:eb:aa:a7:41:50:a5:d5:43:2f:d1:49:2b:15:bf:
bb:41:ae:da:91:ca:d3:f2:87:2a:f4:2f:ae:1d:87:
b8:fb:64:df:0d:30:93:f2:63:84:e4:94:71:fd:28:
7e:02:7a:e2:10:21:73:12:d6:21:38:ea:81:3b:dc:
0d:ff:9c:30:27:80:60:c8:fa:60:9e:70:86:df:c3:
27:39:dc:b3:03:4f:03:2f:5e:b6:55:ea:00:67:e0:
f3:31:73:5f:98:87:3d:33:fb:cc:d8:72:6a:76:8d:
88:11:78:31:80:c5:99:7c:14:89:12:9f:30:ec:0d:
8d:68:bd:d3:9b:7d:92:e7:33:30:dd:52:55:fc:1a:
ba:e4:8f:cf:ec:45:51:19:10:ac:69:26:40:00:c4:
0d:bf:d2:e5:4b:75:7d:55:b3:6e:76:7b:bf:c8:7f:
61:ac:c7:df:95:2d:67:c3:3b:60:b8:b4:0b:36:c4:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:20:BC:22:D3:8A:06:30:A4:56:FC:54:DA:92:52:C2:C6:A0:0E
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:42:24:73:d8:6b:2f:1d:86:7f:b1:81:e5:d1:90:11:65:d4:
60:89:ef:cb:bc:20:6b:8f:a3:59:fe:48:94:4b:b3:8f:11:02:
0a:de:f3:4c:6c:c7:f8:c8:34:17:45:1b:4f:cc:74:1d:ce:42:
c2:90:ea:39:00:f7:81:41:6c:be:09:f1:b5:ab:64:29:c0:81:
9e:be:17:9e:78:d6:21:df:fc:02:a1:a4:51:cb:75:59:1d:b6:
21:85:16:b1:fb:5e:5d:c4:40:7c:02:a2:97:2f:e4:fe:af:d8:
9c:27:bd:c1:e3:6e:03:aa:a4:50:1a:cc:ce:6c:ac:b2:87:47:
12:ea:68:82:87:a4:31:61:9a:7d:7f:67:1e:0d:83:12:0d:48:
cb:d3:65:91:ed:cb:86:8a:77:10:ec:a3:47:0c:66:b8:a1:67:
4d:0c:bd:5c:57:75:0d:9e:e4:3f:2b:4e:b0:1c:4f:9c:f9:78:
56:e2:68:b0:0e:f9:85:33:1b:cd:9a:e0:11:bc:2d:54:ab:c9:
40:e8:12:28:8c:05:6e:66:58:5e:e7:c1:5c:b4:6a:57:23:d9:
ac:3d:93:4f:b4:22:d3:bf:5c:54:86:a7:bb:69:e8:bf:18:14:
1d:d7:ea:df:71:bf:6f:6b:99:51:6d:39:b1:2a:90:0b:45:31:
b0:de:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:32 2025 by rpki-client