Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: nPfiawbYvAUe3LOxs+8WbDbeufx5Kq/Ko0P4OPjf2A8=
Subject key identifier: 60:DE:6F:82:B3:B4:21:BD:6E:7D:85:73:8A:17:22:6C:DC:2A:B8:FB
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 0198D66042299F0B05C44525AEBBA9E57E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:29 +0000
Manifest this update: Sat 23 Aug 2025 10:01:29 +0000
Manifest next update: Sun 24 Aug 2025 10:01:29 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: YXx+/C4fLcrsRunfEXmD9dZ2Dayb+0YPfv+jIut4Hys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:42:29:9f:0b:05:c4:45:25:ae:bb:a9:e5:7e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Aug 23 10:01:29 2025 GMT
Not After : Aug 24 10:01:29 2025 GMT
Subject: CN=60de6f82b3b421bd6e7d85738a17226cdc2ab8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:54:c2:74:a0:f0:b2:92:34:3e:18:af:5a:
fb:77:74:da:55:b0:d8:52:1b:02:92:8f:6a:5e:84:
73:c4:53:52:ec:9f:8c:23:e8:34:12:8c:b9:c0:e9:
6a:a6:f4:68:0f:31:c2:36:07:65:70:10:cd:6d:f1:
0d:34:f4:3d:7c:87:00:c9:b0:3c:6a:67:99:ee:c4:
45:8d:c7:2a:3e:21:e8:96:9a:e3:67:fd:62:1f:33:
01:9c:5a:c3:04:1a:06:fe:af:8e:db:49:8e:32:c6:
91:fa:aa:5c:b0:35:1f:ba:18:69:58:4c:c0:0f:b8:
e6:65:98:b2:aa:27:8a:f5:c7:a8:41:84:ba:02:a1:
2d:88:2f:db:84:04:aa:06:0a:dc:d0:7d:99:5a:71:
1e:62:ec:6e:6b:5e:21:5a:5e:40:84:3d:c1:fd:c5:
35:02:ad:2d:17:31:f8:52:42:e1:5c:9f:89:f5:6a:
be:b9:4f:c3:b2:cb:d9:b7:52:bd:34:cd:34:5d:5e:
b1:e9:a4:46:6e:aa:e4:d1:62:f0:70:6d:82:8a:62:
39:21:21:c6:42:6c:9f:41:53:84:4c:4a:73:95:d1:
87:8e:21:77:84:00:3b:fa:dc:89:97:c8:c7:94:32:
05:3f:0a:ab:15:c2:0e:3e:3a:bc:67:45:0a:6f:eb:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:6F:82:B3:B4:21:BD:6E:7D:85:73:8A:17:22:6C:DC:2A:B8:FB
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:16:40:64:ce:3f:8e:ee:30:0a:a8:73:53:0f:bf:03:2a:
81:ab:6f:b7:db:46:e4:61:eb:fa:28:b1:18:60:0c:4e:09:26:
bd:46:3f:71:ae:82:ba:c4:06:5c:50:b1:3b:3d:35:58:f7:19:
bc:07:9a:28:25:12:29:fb:70:fb:c5:aa:92:db:3d:5a:ac:34:
d9:c4:6e:8f:ff:2c:e3:5d:5d:8b:c7:8e:ed:f8:84:e0:be:27:
19:69:7c:80:c2:7f:3d:d1:ba:18:56:99:2f:81:7e:19:69:34:
f3:42:c9:63:cf:b7:97:bc:b5:e7:b4:13:82:ca:3c:e2:2c:64:
5f:43:ad:05:1d:cb:6a:58:f3:f3:34:c1:b3:a6:18:8f:c3:f9:
11:bd:aa:01:a8:c0:a0:9a:18:c5:bd:a9:8c:2e:55:a2:fa:aa:
6d:ab:c5:2b:b0:34:d9:6d:db:7c:cf:4e:62:1b:e3:4e:ec:12:
60:6e:8a:82:18:49:14:e6:4d:b9:b2:ca:15:53:1d:28:26:39:
39:f9:58:37:c0:49:a9:93:ff:c8:66:d8:db:d3:3e:5e:bb:d3:
6f:80:63:75:88:3d:ed:f4:23:4e:95:9e:61:16:fa:37:ce:65:
bb:26:03:68:dd:e5:3c:b0:85:5d:3a:a9:ec:e5:b2:c6:ab:24:
90:3e:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:39 2025 by rpki-client