Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: 2D7UoG02uGfyfin8EqvGN7eZ2jft7hI4esPu7iYYA5U=
Subject key identifier: 0A:61:5C:58:54:CD:92:C6:D5:AF:7E:37:FD:29:0D:B0:C2:C3:6D:0D
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 0198D66143F35EE8C96B00A77276A152DCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 1064
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: oGix9q49ia7Fwgy0RwB7ZyWnJNiqDSrqDn2v6KeZV0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:43:f3:5e:e8:c9:6b:00:a7:72:76:a1:52:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=0a615c5854cd92c6d5af7e37fd290db0c2c36d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:fc:96:30:8c:46:32:9a:73:74:8b:86:c2:
a6:2c:89:85:db:5e:19:74:94:02:ea:50:27:c4:bc:
3f:11:ff:de:57:de:95:fa:fc:64:93:89:0b:6e:74:
33:35:6f:24:44:8a:76:80:4c:8f:6d:b2:aa:dc:79:
15:ae:0a:31:5d:a3:07:c0:90:2f:91:b7:91:71:aa:
bd:df:cf:24:8d:85:0c:49:ba:62:f2:18:72:73:ef:
40:0b:95:15:c5:6e:eb:9d:be:95:06:02:6e:cf:45:
7b:3d:5b:30:8f:30:23:81:3a:b9:ad:4d:31:97:23:
d6:a8:1b:e2:ad:2c:4d:ec:88:aa:ef:50:05:cd:e1:
4f:9b:66:8e:d8:07:4a:67:cc:39:93:19:bd:95:cf:
63:9d:2b:92:5c:57:54:72:9d:f6:39:fc:91:cd:7b:
c0:44:15:9b:e4:09:62:82:04:2a:fb:3e:12:90:88:
30:61:dc:34:d2:64:ac:6c:55:c7:41:18:e3:83:b4:
16:91:28:68:a3:d5:12:c7:da:db:21:a6:df:5c:ae:
95:fc:b2:b9:72:0e:ef:6a:0a:a6:a3:58:97:23:20:
8c:38:b2:dc:27:e7:c5:95:36:42:4c:52:85:12:c0:
15:fb:d9:e1:6a:06:c5:ec:f9:64:da:81:12:4c:50:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:5C:58:54:CD:92:C6:D5:AF:7E:37:FD:29:0D:B0:C2:C3:6D:0D
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:4f:d8:24:63:3c:a5:d4:f5:d2:16:1a:23:a9:bc:2e:f9:
0f:c0:3d:87:83:03:3b:83:e4:b8:c5:bb:66:ef:80:02:e9:db:
5a:f0:c9:0e:32:97:61:3a:6e:b1:98:38:07:07:18:34:72:b3:
b3:0f:59:cb:fd:f3:67:9c:ab:f3:9d:b8:7f:39:4e:88:79:32:
47:59:55:58:c0:c6:40:51:d8:8f:d8:61:45:7e:e3:ce:62:2f:
83:37:3a:ca:ee:a0:d0:95:8c:dd:dc:0f:5d:0b:e8:3b:a4:e5:
f8:67:d0:3c:57:cd:70:a9:9c:06:b5:08:8f:e7:a2:88:a7:0b:
42:9b:87:75:a1:60:2a:0c:ee:ee:e6:7b:d0:8b:a1:50:6f:73:
c7:93:0f:71:12:38:2b:f8:65:1b:ca:75:db:23:fb:7a:f6:fe:
d6:91:c0:8d:38:ea:49:85:25:24:c6:96:b1:49:27:9f:2d:9c:
5d:a3:ea:d8:3f:8a:ab:b0:2b:96:fa:a1:da:ec:1e:ac:3c:4a:
12:7f:b4:93:c9:99:7e:24:ba:b1:66:f9:2b:7d:74:0e:0e:c0:
ff:79:58:d9:d3:0a:51:a5:a6:59:75:91:ed:5f:e9:c6:27:80:
45:ff:d5:0f:77:da:4a:dc:77:1b:60:8a:cc:5e:5d:b6:84:0b:
af:aa:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:20 2025 by rpki-client