Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: tK509rKvQMzUv3CkpriHCqJURqxUaSXDIjT4hG08YCM=
Subject key identifier: 8C:44:03:EF:12:34:EC:AF:0C:B2:97:F9:12:E4:3F:AC:91:FE:B2:63
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 0198D73B9D33B1F9D0B2FC647CE7047349D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:01:04 +0000
Manifest this update: Sat 23 Aug 2025 14:01:04 +0000
Manifest next update: Sun 24 Aug 2025 14:01:04 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: Qmax1okWHGHl0xnV30z1CpVeyroA6rHG4TA3EgcwB9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:9d:33:b1:f9:d0:b2:fc:64:7c:e7:04:73:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Aug 23 14:01:04 2025 GMT
Not After : Aug 24 14:01:04 2025 GMT
Subject: CN=8c4403ef1234ecaf0cb297f912e43fac91feb263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:05:54:83:c7:29:45:8e:7f:2b:73:5a:a2:
ef:8e:fb:73:24:3b:36:0f:d1:70:0e:ca:5a:7f:4e:
b3:e2:2c:7a:94:04:7e:b7:9a:70:79:00:34:b6:a6:
4e:ca:58:c1:8e:3a:d5:35:85:b5:01:85:2a:1d:e4:
6a:32:5d:85:fa:73:12:39:7b:e3:bd:76:20:25:7a:
ff:f3:d0:f4:41:94:f2:04:66:5e:4a:dc:cb:d0:6c:
95:a6:96:d1:72:16:33:ee:59:dd:c6:4c:bf:87:41:
0e:43:9d:50:8b:f2:17:ce:40:ff:7a:19:a4:ce:bb:
98:55:e1:96:b6:5e:7c:b2:d1:df:f8:b3:61:39:1a:
d2:d0:c2:21:ab:cc:9a:bb:87:99:4f:34:72:ab:e2:
1e:4a:08:e4:59:88:e1:cf:8d:88:aa:d8:92:ac:28:
6d:15:00:60:a1:0e:63:93:15:28:ff:56:ab:fb:51:
8c:8c:0f:07:07:60:0e:dc:ec:64:c1:14:3a:66:13:
bd:62:29:61:11:1d:f7:7f:b1:8b:6b:a9:f9:92:0c:
35:fe:a3:36:81:85:39:4d:8a:54:c0:9d:a5:c6:a5:
e8:bb:e4:2e:00:f5:98:a2:62:f2:c1:a0:01:57:c4:
a3:8a:68:b2:4a:ed:95:02:84:e3:33:14:c2:83:ae:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:03:EF:12:34:EC:AF:0C:B2:97:F9:12:E4:3F:AC:91:FE:B2:63
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:3c:42:93:1b:b4:85:e5:77:00:7e:b4:e8:3a:18:1e:ee:
65:9c:a4:f6:e5:73:a5:ac:6a:87:a7:d8:68:c0:c8:89:9f:ce:
cf:9a:98:21:95:01:95:e5:ee:ca:60:6c:e6:35:6d:cb:ca:8c:
97:ad:a4:c7:ab:72:19:4e:39:39:25:54:1f:97:44:13:51:39:
fc:0c:46:a6:6a:37:5d:2c:82:b1:14:8c:52:63:22:36:22:8c:
60:6b:85:39:ff:45:1a:a4:84:81:6f:d1:62:d5:e0:73:02:4d:
8f:2d:62:0c:e6:a5:24:11:1a:fe:59:f6:7b:49:90:3f:fb:b1:
88:79:18:97:93:81:c0:82:aa:d4:e3:1a:d3:be:ba:0d:ad:e6:
c7:01:92:75:77:50:58:94:66:2a:44:a7:89:6a:cf:50:f3:23:
3d:05:80:34:76:95:f1:31:30:4a:f0:ee:61:a7:3f:27:46:52:
ce:d5:f1:d6:f9:95:17:2d:2f:0e:9d:32:44:15:03:b3:55:07:
d8:7e:be:37:af:43:0f:14:6c:c1:37:2e:8f:3b:d9:da:13:9a:
12:07:f1:fd:3c:80:79:3c:8d:cf:61:93:3a:59:0a:89:da:e0:
78:ea:dd:4f:bc:bb:12:fe:22:3b:be:a6:89:3e:33:fa:d6:37:
59:12:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:17 2025 by rpki-client