Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: 8qtdYrDcVaigHNjjSQ4RePpLEUbR8FVeHEdGHnTr1mw=
Subject key identifier: A7:90:A7:25:44:12:B3:86:37:5F:E9:E7:79:99:67:97:10:49:6F:4D
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 0198D4E057C9FB7A84FB565B9C5FAF789AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 1633
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: kc4lzaVUQHg4S3Zk4RMcuMZPUfFtlB3NOi+YkCKRjzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:57:c9:fb:7a:84:fb:56:5b:9c:5f:af:78:9a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=a790a7254412b386375fe9e77999679710496f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:da:2f:6f:b2:97:25:2a:1b:4e:45:63:15:
1a:28:8a:7e:a0:8e:28:ff:1f:e8:a7:fb:ae:b3:3a:
3f:09:29:98:ca:ee:46:36:6c:8d:2a:fb:15:68:fc:
91:6f:b1:df:f4:83:7e:36:a7:83:53:b4:d7:05:43:
ab:79:14:fb:dd:e8:49:fc:93:cf:dc:b8:fb:d6:f2:
9d:cd:55:74:47:e5:0d:68:d8:ba:ca:6f:dd:cc:ea:
9c:5f:d4:22:46:4f:38:c3:da:94:44:b8:a6:c6:e2:
17:e7:19:56:26:e0:df:83:0b:af:0c:d1:50:75:4e:
97:e7:b1:78:4b:7c:4f:dc:5e:67:8e:c9:d8:6c:99:
e7:cf:66:25:5e:69:3b:9c:7a:e5:29:aa:f1:3f:b4:
1b:ba:44:63:60:90:a6:4f:cb:d2:3c:a6:42:7b:e4:
1e:c0:e0:7c:e0:72:2c:53:bd:75:3b:aa:d3:71:f3:
8f:8e:5d:a5:b2:d9:e1:75:c1:f0:0d:0f:cd:9e:9c:
93:e2:94:65:95:9c:88:d9:b9:8a:89:7e:5b:e7:06:
74:0d:4b:a6:66:d2:48:27:14:7e:f7:ce:15:e9:0b:
53:de:18:46:db:e1:e6:5a:2b:61:25:49:3b:5f:6c:
51:b6:9f:f1:ef:26:a2:bb:75:4b:04:9a:a1:6b:4f:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:A7:25:44:12:B3:86:37:5F:E9:E7:79:99:67:97:10:49:6F:4D
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:f3:e9:37:25:7d:29:a2:a4:f1:38:4c:a5:18:2c:e3:42:
50:f6:df:2b:54:eb:ae:6f:c5:b8:a5:75:32:c6:c5:2d:1c:1d:
3c:50:07:a4:51:57:a8:93:92:15:ca:16:8a:da:28:a7:eb:e0:
7f:02:17:50:c0:05:07:33:e0:7a:5d:90:fa:92:1e:e4:26:be:
ac:f7:6d:69:eb:fc:fd:81:d4:2b:a4:27:c5:e8:d1:41:d5:32:
01:03:e0:62:bb:1f:79:ef:b4:b6:8c:29:80:f7:65:5e:97:53:
0a:d6:ff:91:7e:18:ae:4d:96:3f:4e:b2:5e:dd:0e:e2:60:fd:
2e:22:5e:2a:99:33:68:94:d8:f2:bd:74:a3:58:be:cf:25:d5:
e1:40:2a:dc:90:d6:dc:4f:72:7b:b6:88:3c:5a:6b:27:2c:16:
80:8a:21:11:08:eb:c9:58:cf:30:ce:4a:cc:c6:06:d6:c6:cb:
07:0a:c3:6b:89:43:d4:86:41:dd:1c:77:d0:e2:8b:6e:25:23:
48:92:68:69:3c:b7:a9:38:c4:7c:c4:d1:a9:68:f6:f5:9d:7a:
0d:b9:dd:fd:14:2a:9d:6b:57:18:8a:f7:f9:bb:e8:e5:4a:38:
b6:7d:58:98:bc:a5:67:d3:a2:e3:56:df:e5:15:4d:50:46:c9:
b6:c0:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:56 2025 by rpki-client