Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: TCHtqzlWDD3vrlF6HBuWvIIw4jKFhAtKIXnJPevImPo=
Subject key identifier: 4E:73:65:C5:23:D1:7E:8B:71:ED:2C:CD:41:6D:61:03:FD:B0:79:B1
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 0198D84F40837E5206BBFCEDE3833BB59B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 0106
Signing time: Sat 23 Aug 2025 19:02:09 +0000
Manifest this update: Sat 23 Aug 2025 19:02:09 +0000
Manifest next update: Sun 24 Aug 2025 19:02:09 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: fLXHGfkX/MNWmiybRgDR90nN5ysSTiUSAcbq3N5zuZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:40:83:7e:52:06:bb:fc:ed:e3:83:3b:b5:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Aug 23 19:02:09 2025 GMT
Not After : Aug 24 19:02:09 2025 GMT
Subject: CN=4e7365c523d17e8b71ed2ccd416d6103fdb079b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:53:19:15:71:34:93:4f:43:bd:81:a6:bf:
c5:c6:59:5c:69:85:d8:8b:7c:08:65:79:bf:db:6a:
ae:46:81:3f:38:44:79:3e:11:39:71:b7:19:df:24:
e9:6f:a9:58:a7:ca:47:02:34:25:2f:ed:87:0a:ba:
25:4f:91:f0:23:56:eb:ca:38:8d:d8:9f:e6:bb:02:
24:f2:bd:29:bc:bf:8f:a8:a1:b5:6a:77:d1:96:e8:
55:76:be:76:5b:c2:bb:e0:8f:7a:90:f4:42:2f:5d:
07:36:b0:b5:83:ff:02:68:df:78:d3:08:d2:16:4d:
0b:68:38:da:df:0c:a6:f1:06:40:16:c7:bb:63:66:
67:0c:9a:74:a9:2d:f9:a9:04:d3:af:10:2e:1d:05:
8a:d3:1a:85:89:fb:9c:52:29:bc:d1:c7:55:6e:b7:
14:bd:ab:33:a0:92:d2:39:83:b1:a3:cc:9b:89:b2:
a3:69:fe:0d:e5:97:3e:4e:04:93:2d:64:97:b2:46:
75:96:46:a8:38:ba:eb:b8:7e:8b:b6:a7:8c:c9:89:
d0:88:da:21:8d:3e:d0:71:ca:04:87:b5:d8:2f:95:
3c:0c:23:a1:2f:0d:8a:40:db:5e:ff:45:ec:45:8f:
06:77:43:8e:fd:29:ad:22:c6:4f:1e:41:09:e9:de:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:65:C5:23:D1:7E:8B:71:ED:2C:CD:41:6D:61:03:FD:B0:79:B1
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:da:28:db:f5:cd:65:fe:13:75:c0:62:eb:10:25:12:20:f3:
ac:3b:f1:28:4d:b8:9f:7e:37:05:d2:8b:32:6f:a0:a1:83:70:
99:29:d4:23:44:3a:ff:b8:6e:6c:86:72:11:04:ce:65:79:b5:
5b:b9:2a:91:f3:44:9d:75:5a:5b:3f:18:ed:28:ee:6e:59:8f:
0c:c6:28:94:74:5e:10:a2:c3:ee:64:af:d1:5a:bf:20:b6:4b:
49:b0:7e:af:69:2c:28:e8:98:c6:61:1b:99:f5:8c:eb:7e:62:
b0:ef:1c:2a:75:c0:75:b0:72:f8:70:27:a4:a2:12:26:c2:53:
17:af:90:8a:62:80:24:68:c0:68:4a:0f:9b:4b:51:ab:30:2e:
e5:ae:1a:79:15:61:a1:95:01:08:a0:d2:ed:75:8b:c5:42:33:
2e:d4:54:fb:e2:c6:7e:07:ac:a7:5a:88:2c:ad:81:33:ea:7f:
d5:85:da:b1:2f:60:f4:03:34:17:e6:19:7a:8f:ef:b0:1c:90:
da:5f:2c:40:d1:36:ea:e2:d7:ff:01:18:79:4e:58:d1:40:f7:
c0:4e:1f:87:a2:d2:7e:65:e9:ff:57:3a:ad:49:58:61:cc:25:
e5:73:6b:4f:91:02:a0:7a:07:7e:32:e7:df:15:49:77:28:dd:
48:c5:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:24 2025 by rpki-client