Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: icrSaU/ynag+xFdWCjOFixGCMWKQi3cTdV5J2ydnByI=
Subject key identifier: DB:38:52:75:D9:BC:78:3D:6C:82:A6:E8:29:38:E2:4C:E7:D6:24:04
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 0198D8BCD9E8696654F24207DD2E9E1D045C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 21:01:51 +0000
Manifest this update: Sat 23 Aug 2025 21:01:51 +0000
Manifest next update: Sun 24 Aug 2025 21:01:51 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: i7GJMITGofLroVZh841+czdQ471D5P3nF18ebGgAC+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:d9:e8:69:66:54:f2:42:07:dd:2e:9e:1d:04:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Aug 23 21:01:51 2025 GMT
Not After : Aug 24 21:01:51 2025 GMT
Subject: CN=db385275d9bc783d6c82a6e82938e24ce7d62404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:a9:58:cd:f0:04:0f:09:48:5e:4c:06:db:
74:80:1d:7a:da:fb:04:ab:d4:7d:c8:d6:50:c0:9d:
84:72:04:ab:8e:f2:4d:de:51:b0:ec:65:74:b1:9c:
3f:7d:6c:28:b0:6a:62:03:8a:ce:28:90:0c:e6:ec:
aa:71:92:9a:47:2d:8e:e3:14:34:5f:68:a6:a3:92:
dd:ba:df:9b:68:37:ad:b4:78:85:12:01:f8:27:f7:
49:46:2f:a2:01:bd:40:55:b9:29:b9:72:8f:c4:a3:
9b:3c:6f:e1:c5:31:85:62:46:eb:38:ff:7c:a1:5e:
fa:1e:88:b7:73:ef:2e:f6:15:3d:5b:73:31:24:f3:
b1:ee:2d:b5:a0:19:5a:ba:a7:4d:ca:f4:56:ad:06:
29:62:44:e7:5a:18:3f:18:48:70:52:73:3b:ea:2f:
37:4f:3e:7f:de:5d:bb:61:55:ea:b6:93:13:b7:11:
30:a2:22:3d:b4:c5:03:b3:a6:e7:bc:3b:54:0c:b4:
d3:f0:0f:19:7b:38:38:e0:aa:a6:df:79:02:e2:be:
04:fd:44:85:24:24:88:b6:20:4b:9b:61:15:6d:dc:
7d:6c:54:db:2c:65:69:ac:68:95:cc:1d:b5:ea:21:
ad:6a:0c:0f:a1:19:0e:10:47:64:aa:a8:d0:9d:d9:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:52:75:D9:BC:78:3D:6C:82:A6:E8:29:38:E2:4C:E7:D6:24:04
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:d2:13:86:88:85:ba:e9:d6:69:a8:91:a0:1b:d6:41:5a:
bf:4f:5f:7c:e0:ef:f0:47:aa:c2:82:f9:d8:da:9d:93:51:44:
38:6a:8c:2c:3b:94:da:2f:79:fd:44:ee:a9:cf:2d:41:17:1a:
f2:ca:bf:c2:7e:bf:a3:45:8a:71:a2:c1:cc:82:92:fa:75:2d:
81:3b:35:33:8e:97:81:de:44:f9:41:2c:da:64:93:3a:4b:36:
0e:ce:31:f1:e1:d9:b8:64:a0:8f:d2:ea:3f:20:98:2b:07:a9:
3e:17:db:75:38:ed:59:12:0f:2b:3d:13:eb:95:f7:10:d0:7e:
ba:7b:a2:e4:89:8a:79:12:77:6c:23:8b:fe:85:8a:78:2b:16:
09:a3:ba:3a:86:72:fc:10:d2:85:ab:f7:21:2a:23:5d:a8:42:
b5:05:cd:bf:ca:31:de:4d:b3:0b:a6:f3:04:dc:c0:ad:74:5f:
47:b3:c8:5b:3a:8a:9d:fb:83:0e:6b:98:f8:d8:c7:d0:26:f9:
14:de:20:93:c7:a2:99:fa:8e:cd:69:66:d5:14:0a:f6:1b:71:
d3:6d:36:19:38:23:82:46:2d:d5:87:6e:9c:9a:89:82:f4:c4:
9e:23:9e:93:85:ec:18:b6:90:62:3a:be:ca:8e:5e:80:32:16:
84:ac:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:27 2025 by rpki-client