Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: NrSjjOC6G574tL2XbXUvcNBlp4dmKZsH1guWcsTJeJM=
Subject key identifier: 3D:B9:99:4C:A7:B6:4F:4C:D8:9B:DE:E0:21:B6:FB:DB:22:25:B1:CB
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 0198D54E27CD3B530AB4E51D5D676976CA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 0F22
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: xVchs0YDfmfV2Y6A1mCdpq+8ozmsqdUKe74tJ/xXaCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:27:cd:3b:53:0a:b4:e5:1d:5d:67:69:76:ca:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=3db9994ca7b64f4cd89bdee021b6fbdb2225b1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:82:f0:6d:08:f9:4f:b4:76:ee:fe:ee:78:
db:05:a5:b6:6c:23:8e:ed:b3:ee:c1:1c:9d:7f:3f:
f2:20:2f:fc:31:90:19:d9:d8:ef:ca:4b:5b:c4:11:
65:88:a4:95:14:65:d4:26:b7:74:fc:62:f8:bf:5a:
ed:1b:01:87:85:ec:6a:e5:8f:87:17:e6:c6:b4:8e:
21:6d:15:11:c1:23:a4:15:3f:78:4c:2e:60:fd:c0:
c1:6b:e1:61:a8:64:58:32:ca:2e:8d:f3:b2:0a:a7:
3a:90:6a:9b:c7:ff:33:d3:22:43:39:9d:73:b7:5a:
c8:1f:04:a4:19:4d:61:0c:e7:ac:12:64:1b:ad:c0:
f4:12:09:4a:fc:33:80:fd:a9:bd:e2:97:d4:54:4f:
94:30:ce:e6:10:8e:d6:f1:85:0d:3a:67:41:8b:a7:
a7:ca:af:a6:07:03:b7:4a:7c:8e:0f:48:c6:5f:a0:
3c:d0:41:59:de:b7:73:67:43:d1:7a:5d:2b:c9:e0:
86:a7:e2:ca:85:a9:b3:4a:77:98:06:f6:6b:71:9f:
c8:97:09:51:a0:bf:d3:70:bc:34:7a:22:14:8a:c8:
4a:af:41:17:cf:9c:37:0b:2d:dd:e6:a1:b0:60:2f:
8a:aa:1c:42:51:95:bd:45:a5:74:b0:b8:e2:c4:03:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:99:4C:A7:B6:4F:4C:D8:9B:DE:E0:21:B6:FB:DB:22:25:B1:CB
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:3d:f7:be:3e:a6:b8:de:b8:0b:00:4b:9f:79:b3:71:83:
40:d7:aa:03:77:c5:cc:55:d5:37:68:0b:15:6d:0c:dc:89:75:
c9:04:da:85:94:43:34:23:1a:50:af:9c:ef:66:6a:b5:95:95:
a1:54:71:b5:80:3b:33:d9:b5:5b:1d:56:fd:4a:0f:01:f0:9a:
95:22:75:57:96:cb:24:f0:96:a3:44:cc:fa:c0:61:a4:12:4c:
5e:d9:f5:04:b4:58:48:67:24:2c:42:20:9b:d2:82:1f:e4:f0:
3a:02:4f:10:cf:94:51:1f:f4:9b:64:e2:8c:89:91:41:cb:39:
32:e2:e7:4a:b0:dc:b3:c5:92:c8:f3:38:82:1c:02:cc:91:6f:
88:30:08:2c:55:7c:2f:dc:87:21:4c:b0:9f:3c:67:dc:b9:a7:
77:b2:06:fb:6d:5b:25:82:0f:ba:a7:ef:f1:ac:bd:67:83:b3:
76:09:9d:e7:1d:f1:0f:bf:5f:d5:6f:a5:c3:aa:af:af:b4:bd:
ec:34:ba:22:89:e1:1a:53:5b:4f:88:83:83:fd:6f:ec:c6:b6:
72:3a:38:1c:4a:69:8b:6d:c6:7c:c0:be:02:74:9e:d8:93:52:
ea:a6:f9:8d:d2:bd:71:34:15:2f:21:5f:9b:b5:3c:f0:ae:3b:
d8:e0:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:28 2025 by rpki-client