Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json)
Hash identifier: FlMUE7DPunSwVFRzevd+0aP5GJGJNfLb5jbqGhQ6B3E=
Subject key identifier: CC:2D:BC:D9:07:9E:A8:0F:B3:97:D5:65:95:F3:AB:2E:35:95:7B:15
Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Certificate issuer: /CN=1686f7be9ba171c32746ab4ed20be882bd304356
Certificate serial: 0198D5BC0378B3F9FA7297170C75B23570A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
Manifest number: 03D9
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: LpgOG2ZXlmeL7zxFI3Rh19Xxrl0HVmos+JL0xZyVBxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:03:78:b3:f9:fa:72:97:17:0c:75:b2:35:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=cc2dbcd9079ea80fb397d56595f3ab2e35957b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:67:4b:1f:b8:3a:26:75:67:98:13:45:a3:
cb:01:2f:d2:5c:89:99:57:d8:57:52:c5:54:60:56:
d8:9c:56:e1:6c:fe:de:5a:f4:7a:5a:0e:44:7d:bb:
45:ad:cf:58:34:90:f7:99:65:d3:e5:f0:ac:52:e6:
47:6b:ae:e3:72:f4:18:73:19:31:cf:b8:ab:c6:70:
a3:ca:ca:74:f2:59:e6:20:52:15:a1:de:9c:06:c4:
2d:d7:0d:5e:8b:84:a8:3e:4d:c9:72:1f:7f:63:06:
f6:d5:81:c2:23:5c:55:95:bd:02:81:46:bc:63:bd:
09:a0:45:e5:bb:e4:4a:aa:91:21:a3:ad:c6:79:aa:
8c:db:bd:d6:01:43:b4:4c:6c:d1:87:aa:96:5d:26:
33:d5:17:73:03:32:65:67:ec:6a:9f:0d:8e:2e:b7:
3f:d1:a0:84:60:6d:2d:12:e6:a3:aa:9c:f9:44:2d:
21:56:a3:57:a0:c7:cc:24:09:dd:e4:39:e3:f8:13:
5c:4f:fc:e2:59:26:0c:8f:1e:db:9c:2d:e8:c5:67:
6e:46:7d:9a:ef:52:f9:c0:90:ea:9d:d7:f6:f1:20:
3a:ca:3b:e8:be:98:54:9c:90:98:61:ca:62:f2:c5:
e0:71:c1:a1:f2:34:f8:6a:41:5e:4d:0a:84:78:fb:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:BC:D9:07:9E:A8:0F:B3:97:D5:65:95:F3:AB:2E:35:95:7B:15
X509v3 Authority Key Identifier:
keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:df:b6:31:eb:e9:7a:e2:82:4a:42:46:8d:e4:f0:9b:86:07:
df:cb:65:77:aa:94:c3:e6:f7:ce:36:60:2b:22:a6:35:8b:d1:
05:17:0b:36:57:7b:d2:1f:74:f3:34:e0:b3:8c:0d:38:f3:6b:
7d:c1:fc:6e:b9:5c:2a:52:87:ea:a3:e5:2f:dc:d7:82:d2:d1:
d5:f0:f0:38:c4:1f:8f:6d:1d:26:39:da:27:de:63:a0:d0:24:
20:cb:e9:1b:05:14:a9:0e:4f:ae:f3:e4:b7:da:eb:b4:aa:42:
3f:cd:79:99:59:0c:27:9e:79:ec:4c:66:a4:90:57:69:8f:8a:
b5:1e:fd:93:19:40:2b:58:87:b5:79:a9:9f:fd:4a:90:ef:78:
07:59:b9:19:66:c9:85:3a:39:2a:f9:4b:4e:bd:00:3c:6c:a7:
5c:1d:ed:46:d5:15:99:d0:98:cb:dc:c9:b7:67:14:9d:2c:18:
e0:59:c1:c7:0c:35:3c:7c:9d:06:d1:47:08:f8:db:3e:dd:58:
eb:46:ce:7e:1b:32:e0:2d:ee:f3:6d:26:18:54:65:14:a3:1f:
3e:ee:e1:99:2d:00:bc:56:70:48:4b:85:cd:c5:17:80:94:fc:
9e:34:4f:93:6d:5b:f5:ed:5a:27:92:80:a8:f1:7b:a5:bb:c5:
71:ab:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:49 2025 by rpki-client