Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: uqVcux6ATch8tvUQb6j5esAMlasbd3R8ghAO4kgfdJ4=
Subject key identifier: 23:01:48:FC:CB:1B:A4:0A:75:DB:70:05:96:1D:1A:62:07:8B:51:27
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 0198D4E05953F2E38275CBA5C7FA5373D45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 0DCA
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: I1dc/APpnWX9MebjqeGO+F6rvNp5X+7eu17FICSEOm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:59:53:f2:e3:82:75:cb:a5:c7:fa:53:73:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=230148fccb1ba40a75db7005961d1a62078b5127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:47:d6:8b:70:d7:42:9f:3f:90:6f:db:2a:
3f:39:c3:0e:b2:2c:74:67:bc:09:32:d7:bc:41:fd:
2a:67:1e:0d:f9:5c:51:17:b7:eb:8c:56:df:a9:d6:
7c:2d:6e:02:ca:04:fa:67:ea:5a:93:79:5e:9b:a4:
f7:69:9b:84:6a:9d:48:99:1a:44:74:e4:db:04:a8:
9f:d0:33:37:45:4e:ea:77:87:ef:69:36:f0:e1:9c:
ef:cc:21:c7:22:0d:86:b1:26:a4:e9:9a:2b:f2:e0:
df:71:c1:75:04:11:44:3f:1b:01:9b:ee:80:2b:a2:
59:85:71:e3:59:06:bf:a9:70:f8:aa:87:96:14:7a:
3e:ee:00:cb:e0:b9:5c:43:ce:d0:15:ae:70:13:75:
8b:ce:d7:8b:fa:4c:12:60:c5:e2:88:e8:02:de:3a:
3f:a7:8e:9a:16:16:be:f5:a1:c4:d0:ad:fa:ca:07:
52:41:3f:56:93:4c:f4:49:e7:6b:39:c1:d9:db:3b:
43:24:96:5d:29:07:b0:8e:d7:eb:1e:dd:d4:50:c2:
21:fc:61:1e:a2:74:fa:e3:5d:d9:c0:25:4d:18:cf:
85:1c:23:e3:56:12:b7:48:c3:a4:10:e3:e3:be:a6:
0b:70:4a:31:a5:b5:a1:fb:e0:18:0a:ea:13:6b:e4:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:01:48:FC:CB:1B:A4:0A:75:DB:70:05:96:1D:1A:62:07:8B:51:27
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dd:b1:92:77:cc:d7:23:01:63:ca:b8:77:70:f6:7f:f9:40:
9d:41:d9:fa:d5:93:33:6b:5d:20:ef:a4:d8:0e:46:0c:2b:fb:
ba:36:7d:f3:7f:b7:10:98:7b:06:ce:93:6b:24:f4:53:8f:ee:
6d:62:de:7b:38:e2:37:91:0c:0c:2f:1d:62:d5:12:75:8f:e8:
4d:bf:a2:af:42:85:ae:16:39:c0:55:ec:50:b9:95:f8:e6:cc:
68:55:78:1a:a4:36:fb:b5:e6:df:b5:a7:06:f4:15:72:94:96:
0d:73:42:b8:95:f5:93:e8:46:7f:13:f2:7a:89:47:10:47:7b:
54:10:22:c0:54:a8:bb:64:73:28:8c:16:18:e1:f5:68:8f:f0:
d3:81:df:70:e8:d9:66:66:f9:fa:bf:34:64:12:5e:5c:1f:db:
0e:88:72:3c:03:6b:6d:a1:94:eb:df:3b:56:5c:08:0d:22:1a:
76:30:5c:60:ee:64:04:b8:7b:4d:7e:44:f7:3d:8c:a5:c7:49:
a1:85:63:88:60:e6:99:f6:83:01:0c:d0:ef:0a:87:b4:cc:76:
1c:b1:b7:d7:cb:ae:3f:16:d1:7a:98:fa:82:24:99:19:da:5d:
ae:5c:a8:08:03:da:12:80:f8:54:25:2f:e3:78:98:6a:92:71:
83:7f:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:54 2025 by rpki-client