Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: L1tm82xbBX/+5pjkdCWLvKvBEnWCuOhALJ3n+ulfZNg=
Subject key identifier: 9C:9C:FD:28:0C:8C:65:79:C0:BA:6E:7A:9D:04:36:E6:80:31:44:6D
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 0198D515F1BB8D3FB7635C3EC7A8D0119973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 0387
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: /EPLGCdo8vfI7LKcJV8TElyNA0HiCMv36Fr/mReokTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f1:bb:8d:3f:b7:63:5c:3e:c7:a8:d0:11:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=9c9cfd280c8c6579c0ba6e7a9d0436e68031446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:82:6f:66:f3:1d:39:10:c5:a6:4d:70:fb:
ba:a5:ca:30:5f:b9:e0:c1:8f:54:a7:1d:93:72:9f:
91:d3:66:6a:61:03:45:de:34:e1:5e:72:90:a0:68:
5d:05:8c:38:1a:16:ba:4b:45:13:92:5b:2e:01:0d:
d0:c8:99:71:2d:3f:cd:eb:cb:5c:ff:7b:54:0b:9f:
fe:7f:e9:89:89:52:59:42:50:07:a7:4f:27:8d:5b:
a4:18:3e:68:45:c1:20:f5:37:36:ac:45:f5:ba:6c:
bb:e3:ea:f5:67:9b:5a:ef:fe:42:45:d2:bc:65:4e:
43:75:b5:5a:7b:a9:7c:23:ac:65:8d:bc:a9:36:c5:
4f:32:68:f6:45:96:19:15:11:f6:19:a5:65:a7:81:
69:4c:f5:08:0b:7b:13:0c:cf:2f:0a:28:52:99:bd:
c3:b3:63:7b:7f:2d:4d:ba:45:9a:75:9c:88:e4:50:
64:c5:21:52:40:1f:fa:74:b0:fb:37:39:9f:75:e9:
e7:99:36:7f:ce:ab:4a:dc:d6:02:d7:b4:d6:10:ef:
f7:60:6f:cd:73:a2:f0:c8:c5:f0:d5:c8:99:3d:17:
f5:6f:b3:c2:c7:51:57:12:a7:10:fb:91:38:d4:e9:
cb:70:01:6c:a1:0a:f5:b1:2b:ba:6b:57:82:d9:ef:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9C:FD:28:0C:8C:65:79:C0:BA:6E:7A:9D:04:36:E6:80:31:44:6D
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:fd:a1:0e:ec:f9:2b:d4:3c:91:1d:51:13:b7:4d:a4:5a:
4e:9c:85:c5:15:fa:56:3b:c4:bc:f3:c3:9c:eb:76:9c:08:92:
99:30:77:48:35:33:65:55:d2:2c:f8:2d:68:bb:25:79:77:0b:
15:d1:2c:7d:09:db:b0:b3:3e:5e:0c:2e:f9:34:fe:e1:08:f6:
3d:ce:b1:3d:1a:73:11:62:ef:a7:ea:c6:97:3b:2f:40:71:5c:
ee:ac:40:9f:5d:c7:cd:f0:39:1f:6e:89:f4:67:bb:32:e6:ff:
b3:97:ec:72:ed:8d:21:d5:aa:58:b4:0e:40:f8:06:34:c1:29:
3b:ff:36:8c:e6:9b:0d:31:f3:a1:cd:e8:b1:d9:55:7a:81:0e:
65:f4:60:2f:13:02:28:f9:b0:e6:63:97:f5:c0:e2:1c:5a:b3:
d8:1e:8f:5d:7d:9a:ed:16:0e:bd:54:10:62:ef:52:8d:7a:8e:
52:4c:fd:15:20:da:37:79:d0:bb:37:50:f5:3b:92:ce:98:59:
27:de:e7:a0:6a:85:9a:6c:94:0c:ca:04:0a:fe:7f:a2:0c:22:
a7:1a:db:d4:03:4c:b3:59:2e:99:b9:b4:6f:ce:1c:11:55:aa:
63:5a:aa:30:b2:02:52:09:04:38:bc:e9:81:4a:03:1a:54:f8:
c4:b6:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:34 2025 by rpki-client