Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: dCtkEgXUbAhLlIkyVkD6alVAHk71Hno/AzilekGQPFE=
Subject key identifier: 60:6B:56:F8:BF:90:1C:9F:A3:1E:6F:9D:1A:90:EE:83:DA:3A:7D:20
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 0198D660A648B9703116D724F5A3DEC340FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: mC2dlgwp5UV3UnvpB5EYqlLPgOFczZX6iRMwsdkbIkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a6:48:b9:70:31:16:d7:24:f5:a3:de:c3:40:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=606b56f8bf901c9fa31e6f9d1a90ee83da3a7d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:bf:4c:bf:40:1d:d4:d2:16:f7:e0:fc:a6:
f2:f7:97:7b:85:26:b7:4f:54:cf:d1:a6:70:90:cc:
7c:fb:9b:58:c4:f5:d2:af:d7:c1:73:73:01:09:be:
cd:ee:06:31:15:14:9c:ca:b0:1c:89:f8:6c:27:d5:
cd:c1:25:db:e6:b5:d6:e5:5b:a9:ac:13:ee:37:8d:
40:23:63:fe:fe:78:49:27:29:b1:ab:a5:54:be:0b:
32:ab:63:e9:d7:f7:97:8a:a7:51:ab:e0:14:24:16:
96:31:bc:e8:e3:0a:95:79:08:50:4e:64:44:25:46:
b0:3e:90:53:69:75:a7:2a:aa:61:33:69:88:1d:18:
c2:ca:9a:38:e6:23:11:fc:87:38:5a:2b:6f:ce:95:
65:a6:dd:11:1c:1e:c3:7d:df:e2:ea:b9:56:80:cc:
7c:8a:df:e0:c6:53:27:79:df:03:ec:ee:18:db:91:
5e:e5:17:da:eb:d2:4e:cb:ed:7c:5a:2e:93:30:39:
15:11:bd:47:6b:1a:dc:82:e2:0c:de:49:c0:a0:62:
82:03:12:ea:52:c0:f8:8a:69:d3:f9:7e:18:e3:13:
18:41:e1:57:16:73:a8:69:55:7d:15:b9:12:8a:ad:
44:07:78:58:4b:79:c8:ed:15:87:0e:41:2a:33:58:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:56:F8:BF:90:1C:9F:A3:1E:6F:9D:1A:90:EE:83:DA:3A:7D:20
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:24:26:4f:f9:55:dc:1d:c6:c9:8b:47:ee:66:77:03:28:
ee:32:81:56:82:c5:78:49:0b:c0:64:47:a4:46:1f:e6:c6:6b:
c2:e4:62:cc:b5:8f:97:a7:32:08:63:cd:18:47:be:2a:8e:6f:
0c:4d:3e:cf:f8:a6:cb:c8:45:60:0f:06:0f:35:26:49:fc:f8:
7a:cc:01:1f:b5:a1:8b:f2:ba:87:c4:dd:b6:80:87:43:6a:ed:
be:de:27:9e:ca:13:4b:14:62:45:1c:10:5f:cb:82:df:a9:11:
0d:7b:5d:3c:92:25:43:f0:8f:97:69:fb:da:b2:e8:8f:a1:79:
80:80:ad:a5:e6:c4:36:45:d5:d7:50:2f:d0:4c:86:67:be:02:
e7:ec:9e:92:37:77:04:da:b7:8f:db:7f:fa:bb:d3:af:6c:63:
ca:5c:e6:9b:ce:4d:9a:ba:67:d0:5d:d6:fa:1d:d0:42:1d:95:
be:4a:46:c8:0e:1f:f8:82:40:cd:ac:53:14:be:e0:dc:eb:e1:
ef:ee:5f:72:14:b9:ff:fa:fe:ed:dc:f6:e2:25:45:68:28:84:
fe:12:aa:b4:0d:0a:4b:b5:b8:bd:e3:41:37:99:d1:a8:13:e7:
05:a0:d6:06:cd:06:78:97:22:cc:d2:26:53:92:9f:bb:15:ac:
5a:8c:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:30:27 2025 by rpki-client