Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: /eIKFEuPTZdo69Wmh4qA5Z0CMdcGsIByxtl/33uK3vs=
Subject key identifier: D3:1A:CE:6F:02:9A:06:E4:34:E7:AA:8A:D1:AF:F3:CE:82:85:A0:64
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 0198D58401A630773C2F0673EFCE5162E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 02C8
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: OMKVuhHTRpFdTn3qc9ZNmxNA6awGHakjjMlwmDCSC0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:01:a6:30:77:3c:2f:06:73:ef:ce:51:62:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=d31ace6f029a06e434e7aa8ad1aff3ce8285a064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:49:b8:03:c6:b8:6b:8e:8a:5d:81:ee:a9:
4f:64:5b:5b:2c:f0:cc:56:ef:99:a5:8b:6b:d9:f1:
13:23:e3:7e:77:7d:34:f4:ac:7b:4e:48:2a:2d:6d:
1c:97:2e:b6:7f:b8:e0:8f:06:9b:94:e3:91:d2:55:
9b:d5:47:21:d8:bd:23:66:7e:05:34:3b:f8:e3:f4:
d6:f5:87:d5:d0:d3:71:12:e8:86:29:b0:4e:2f:52:
22:9c:12:79:c8:6b:ea:6d:8f:17:12:73:32:79:3b:
43:39:ad:e8:a3:3e:c3:5c:50:44:06:1b:2d:94:c9:
dd:03:07:36:5a:6e:39:2b:ba:64:c6:5e:96:34:c1:
da:80:0a:46:3b:cb:8e:4d:87:62:c5:07:86:16:42:
f2:85:e9:7a:2b:6c:48:60:72:47:56:b3:81:61:30:
47:21:06:e0:c1:67:30:89:01:32:2a:ba:07:98:dd:
a1:d7:30:da:de:b0:63:90:6d:cf:61:7d:61:43:1b:
0d:d4:73:8a:0d:b2:ff:b3:65:55:7d:93:69:00:d3:
a8:96:9a:32:71:dc:d8:88:e4:8f:8e:30:1a:bf:3e:
9a:87:5c:43:90:b0:45:fa:c2:64:4b:c1:11:82:28:
f4:e9:67:ee:62:73:8f:24:6e:6c:56:9e:1e:06:a5:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:CE:6F:02:9A:06:E4:34:E7:AA:8A:D1:AF:F3:CE:82:85:A0:64
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:3d:11:34:91:43:c3:2a:19:79:57:de:41:c4:ab:65:5b:
37:b0:2a:93:58:d0:72:e3:7d:60:f7:fc:5b:11:4c:f4:15:82:
15:ad:15:ee:25:6f:c5:f1:b2:08:d4:45:f0:9c:28:97:b4:80:
a9:0a:16:ee:f4:f3:3a:e7:21:5c:32:d9:c6:b7:42:7e:3c:1f:
66:b2:a7:eb:c2:ab:4c:71:46:41:3e:ef:4b:98:94:fe:2d:5c:
70:ce:7e:af:41:b4:24:7b:96:00:fe:d2:00:be:9b:23:ea:6d:
65:bb:3f:06:a2:f2:a5:be:85:13:31:01:49:de:1b:3c:8b:ce:
c1:41:33:b4:c0:14:58:fa:29:78:a0:56:94:42:e0:1f:db:4c:
0b:15:1b:0b:e9:fd:ee:60:6e:e9:4a:36:ad:80:52:5b:4a:6f:
4c:40:45:0d:f7:6b:d4:88:0c:77:19:2f:ec:36:b5:2b:17:02:
7c:7a:db:87:6d:b2:6e:5c:ae:a5:7a:3f:a3:f4:23:e0:9a:04:
ab:a7:9d:cd:60:fc:b5:86:29:7c:d9:2a:52:86:b2:f7:6e:41:
6f:f1:5d:d4:b1:1f:c6:77:30:a7:c8:ae:e8:f4:5b:cd:b6:04:
ca:49:74:b7:8f:db:3e:d2:05:ab:33:0c:9e:1d:a7:19:bf:b5:
02:21:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:48 2025 by rpki-client