Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: ALflc6l+L3asJeTSi5kQ0TjEQycHVD1g1ey4Bxnv6ho=
Subject key identifier: A4:E9:F6:16:4E:F5:DA:A3:65:1F:64:C3:64:BE:83:9C:C7:E0:8C:F5
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 0198D5BC0F0FFA11D4240321B9F5B4C1F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 15B0
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: Se0b+7sZXG9tJQeNq9SKK6OavgstZd34RqLYAH1cGqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0f:0f:fa:11:d4:24:03:21:b9:f5:b4:c1:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=a4e9f6164ef5daa3651f64c364be839cc7e08cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:fa:e2:8c:08:a5:cd:5d:26:a6:43:72:cc:
3b:c3:54:57:07:a6:aa:57:d6:19:d6:40:14:1f:19:
64:1b:38:52:f4:67:72:76:6f:ba:62:14:8d:6d:19:
f8:21:53:26:12:66:61:49:8c:f1:c1:bc:83:17:18:
8e:3f:8e:19:ba:ae:5d:10:b2:5a:05:f1:81:5e:fa:
ed:aa:9e:c3:98:23:fd:89:8b:53:c1:61:db:8d:b2:
59:d7:00:5f:f8:7d:0d:78:69:1f:77:2e:41:78:01:
f2:64:d1:13:4f:18:30:c2:eb:3a:ad:f8:22:a6:74:
c3:5a:81:7f:7b:85:e5:ba:29:ef:98:af:c8:42:24:
ca:e5:a6:ca:5d:35:66:fe:32:47:e4:62:48:14:85:
f2:13:86:9b:4b:28:5e:b5:89:01:ee:1c:f1:a1:23:
cf:ab:f7:db:16:d2:68:86:f9:0d:1f:c1:01:45:37:
70:97:8f:6c:ca:6c:4f:e2:c5:10:a9:48:06:ce:0c:
8f:c8:92:a1:b8:c3:df:35:e9:99:c8:1e:0c:46:6e:
ec:2f:7a:2b:63:0a:9e:45:75:f7:45:de:b4:cb:6c:
9a:a7:b6:dd:fb:71:ba:de:c3:69:ec:6f:8f:42:a0:
30:07:66:c3:9d:0f:d8:69:97:dd:4b:b5:51:8c:4d:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:F6:16:4E:F5:DA:A3:65:1F:64:C3:64:BE:83:9C:C7:E0:8C:F5
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:26:9b:6e:c9:c2:eb:6f:ab:99:c9:78:4a:0d:71:db:ca:73:
e3:89:57:eb:8d:99:12:0e:6a:30:fc:87:ff:13:c2:87:83:2a:
bf:8f:e9:0c:0b:bb:fc:03:be:8a:3b:8e:82:fe:e3:f7:8f:b2:
df:f5:49:f1:31:0e:4f:73:d6:01:97:f8:8c:9c:5f:2d:4e:0b:
0e:04:89:13:a0:74:22:a5:29:d2:64:32:c7:ef:ed:00:85:d0:
bf:19:6f:ef:5b:75:2b:65:d9:a0:0d:06:a5:f6:6a:f1:1d:f1:
97:91:4d:29:ad:f2:1a:52:85:41:4c:79:bd:19:21:91:67:fa:
ea:f2:c2:78:99:db:3e:64:57:ef:c2:5f:93:38:91:94:c8:39:
81:4d:d5:63:b1:a1:22:0a:1f:2c:79:ec:ec:ba:5b:00:3d:77:
0a:08:5c:b6:43:eb:d3:9b:8d:cd:13:51:c2:83:b4:8a:e1:c1:
cc:d2:4e:b9:ce:8f:21:b5:76:3f:1c:0e:32:24:a5:4d:ab:62:
49:fb:b3:14:7a:31:8c:58:06:9b:fd:33:5f:02:61:1a:e8:63:
82:0d:64:98:10:1c:17:8a:34:a5:4a:ed:d3:9b:c7:82:29:04:
48:9e:2e:74:19:96:28:42:e4:d5:e8:0a:76:51:70:f8:c6:67:
52:0d:33:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:22 2025 by rpki-client