Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File: fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier: joGjU5TxUyi57iu+74Hu2Bazqer4UE67BMneIv6cRZs=
Subject key identifier: C0:B3:EF:3B:5D:7D:91:35:CD:D8:C1:1E:F1:0D:55:3E:D6:AF:69:96
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer: /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial: 0198D5BBB99DCCAC6D2F732A1ADC5891F6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number: 0459
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: FOjL3/eQTrw7AO5NhOd534GsSZ7p8togjJBxtatMlTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:9d:cc:ac:6d:2f:73:2a:1a:dc:58:91:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=c0b3ef3b5d7d9135cdd8c11ef10d553ed6af6996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:a2:5d:3b:f5:f1:58:be:f0:d9:61:cc:a7:
3f:70:e6:12:fe:d2:ec:ff:da:e3:bf:76:a8:5d:04:
f9:ce:24:ed:11:50:f3:82:45:c9:06:36:44:6a:ba:
8c:3c:cf:c0:eb:4a:ef:b4:2c:74:e5:22:e3:c5:c4:
e3:3e:8c:80:da:a5:e8:d2:b3:7b:20:68:c2:a3:26:
64:ca:8f:9f:3f:50:0e:66:40:29:57:25:5b:ed:c7:
ca:1f:fd:92:06:d6:dc:40:09:a6:46:af:05:86:56:
4c:3f:92:83:6e:4b:e3:92:bd:8f:de:36:0f:ae:1a:
ea:e9:5d:bf:9d:ad:96:4d:62:5f:1c:79:eb:61:41:
bb:75:cc:ad:29:bc:9e:3d:68:55:67:f6:a0:e1:0d:
88:71:03:3b:f5:fb:ed:66:97:7b:a2:9a:5d:36:cb:
c3:47:80:a3:8c:63:f6:cb:c8:42:f0:63:31:19:de:
a4:75:71:ac:11:6c:86:9c:2c:b9:b6:9e:2e:98:3d:
3b:fb:80:eb:aa:66:25:02:54:cd:d8:07:c9:45:bb:
82:5d:34:b0:51:40:b1:bf:d7:f1:90:ef:21:a9:9b:
95:ec:e6:52:e6:74:1f:72:71:ac:c7:a1:56:d2:e8:
a2:c1:8e:07:a0:0d:04:e5:b7:50:a2:a9:8d:b0:74:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:EF:3B:5D:7D:91:35:CD:D8:C1:1E:F1:0D:55:3E:D6:AF:69:96
X509v3 Authority Key Identifier:
keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:1a:f6:9f:b2:87:39:6d:0c:ab:07:4b:9b:57:7a:7f:4d:
9f:d8:05:7b:b9:2d:33:fc:28:41:07:6b:df:ca:fd:c3:e3:6d:
80:0e:ee:03:a1:f2:79:79:66:22:54:e8:80:8e:20:9e:06:c8:
96:b9:55:34:8d:38:8e:03:83:b7:0c:dc:60:b5:bb:cd:f3:17:
de:1b:f7:5f:b2:8f:4d:7d:85:cc:07:c3:56:32:c7:40:3b:8e:
93:b9:b7:c9:e4:06:85:cb:42:64:42:6c:a3:5d:63:aa:ab:30:
2a:cb:50:f9:8c:8d:21:25:52:53:b3:e7:a3:f5:85:d5:2b:f0:
dc:50:46:1f:55:7c:82:a4:86:6e:ca:22:20:11:93:e0:10:1c:
ec:59:69:88:aa:31:1b:d8:97:98:e4:10:86:98:41:a8:d9:46:
96:79:68:5d:cf:cb:c1:12:a6:9f:1f:12:56:10:aa:3d:36:d3:
54:70:fd:8d:74:63:03:d9:79:fd:95:4f:ae:cf:27:74:a9:67:
91:c5:fb:c8:13:63:71:f5:00:7a:a2:06:ad:ff:58:12:23:f2:
73:8f:45:b1:a1:c4:46:9b:f3:da:5f:7f:f5:50:c8:2c:e3:52:
95:67:7b:e9:8f:d0:8d:75:a6:e8:ba:85:21:b6:8b:de:42:a1:
aa:92:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:41 2025 by rpki-client