Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: sYaFRrCHiNDcbxbhCHdQiVdNnMAaFphHZtEQjs1mVoY=
Subject key identifier: 29:F8:39:82:25:32:99:85:63:88:AF:72:4E:94:C9:55:F8:98:49:B8
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 0198D5BBA34B9D5CDA65C7360C48307B6AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0285
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: BQRVJ/k6r8CAh8ttGiE0oP48Ui0QwslVsauVvVBR4Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a3:4b:9d:5c:da:65:c7:36:0c:48:30:7b:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=29f83982253299856388af724e94c955f89849b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:6c:60:f0:20:6f:1a:ea:9c:b7:08:e0:32:
51:62:02:24:3d:45:be:a7:f8:26:97:26:0b:7a:e1:
ec:22:f1:f4:ac:1f:84:02:a5:c9:07:48:97:07:70:
7a:8b:ad:f7:f1:d9:37:3b:1e:b3:cb:ff:bf:96:6f:
97:cc:83:0e:cf:20:3e:26:3d:f4:52:70:10:29:d0:
2b:22:6d:81:3d:f6:41:b9:c4:75:37:f4:56:76:72:
b1:aa:70:7f:7e:c0:e2:82:64:b2:8b:5b:77:e2:bc:
c4:3b:80:bd:c7:92:d6:d1:0b:45:ba:9f:94:c0:1e:
f7:f0:7d:92:49:a6:f0:a1:cb:58:a5:9f:12:0d:80:
0a:72:bb:00:78:85:30:d4:a7:18:8e:b0:27:ef:5d:
21:53:bc:4a:70:b9:ca:92:ff:12:06:41:75:1d:8f:
d9:79:49:ad:bb:a0:b3:a1:f3:e6:73:9d:73:3e:fb:
9a:27:2d:b0:82:4f:e4:32:11:e5:f7:3d:54:72:42:
f4:39:40:7a:44:00:af:a6:3e:9f:65:5e:47:f2:c9:
d4:c6:4a:81:a5:60:af:35:20:f0:39:5e:9b:5f:71:
73:ea:63:0a:c3:a5:ba:2b:f2:33:5e:9b:1c:58:87:
0e:fb:68:b3:83:01:51:ee:bf:8f:de:33:e8:59:46:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:39:82:25:32:99:85:63:88:AF:72:4E:94:C9:55:F8:98:49:B8
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:5e:a8:9a:e3:88:c0:47:5c:8e:1d:f4:85:18:63:dc:64:
45:85:e5:ca:fa:b6:6f:65:70:93:c0:8d:ac:74:0d:0b:f6:8c:
66:ea:e0:4a:06:96:20:24:5a:29:fe:d5:50:3e:ae:c5:f1:e1:
6e:1d:bf:4a:ed:5d:28:3c:92:f6:d4:5f:ea:be:96:b3:dd:49:
33:1c:79:48:3a:a8:9b:67:3e:97:26:d7:f6:c2:a4:6e:83:af:
cd:37:43:24:5c:5b:ee:10:be:ee:51:67:aa:a9:c8:a7:f4:7c:
8e:33:2f:88:52:3d:1e:14:5f:08:64:7c:65:8b:52:97:14:1c:
9b:cd:3d:a5:04:de:e1:ab:25:74:14:7b:f2:1a:2e:da:ed:1f:
84:0f:6b:82:de:63:17:16:73:6e:14:39:33:64:15:2c:a8:6a:
3a:f9:c4:d3:31:7e:34:c1:58:dd:54:6f:fb:c7:20:3d:9b:4d:
bf:b5:f0:8d:52:8f:56:1d:3b:62:bb:88:57:12:3d:a8:3e:ac:
5b:59:2d:a1:f7:16:76:24:35:cf:d0:a4:6e:5d:4f:a9:0e:28:
41:25:de:1c:60:29:2e:70:24:cc:73:f6:ab:da:09:96:d5:19:
33:50:4c:ab:09:f0:c1:94:13:c5:4f:b6:20:92:ec:f5:93:20:
3d:76:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:07 2025 by rpki-client