Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: naWilG545MB8w9iu4knEct6cVVtP2UBSu0gNALFuJxI=
Subject key identifier: 85:BE:75:AD:FC:B6:EF:91:13:EF:6B:C1:BA:20:0C:7D:0C:B8:E9:32
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 0198D6CD5E484BD4FD0EB31B244500BC8992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0EB2
Signing time: Sat 23 Aug 2025 12:00:39 +0000
Manifest this update: Sat 23 Aug 2025 12:00:39 +0000
Manifest next update: Sun 24 Aug 2025 12:00:39 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: FJNN+HxMmJYhu/lOU/QSMgTwMAgYRQEAPhOffLFjcSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:5e:48:4b:d4:fd:0e:b3:1b:24:45:00:bc:89:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Aug 23 12:00:39 2025 GMT
Not After : Aug 24 12:00:39 2025 GMT
Subject: CN=85be75adfcb6ef9113ef6bc1ba200c7d0cb8e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:0a:59:10:2e:2c:17:b6:a3:4d:c4:30:88:
ea:40:4f:26:13:03:c1:27:4f:d8:ba:2f:05:70:51:
fa:4b:71:cd:0b:71:52:49:d7:b2:54:8e:aa:28:4f:
59:e1:80:34:3e:2c:73:07:dd:37:ac:81:0a:48:6a:
f4:6e:97:4f:5a:4c:1e:75:d3:74:3d:f9:f7:7d:7f:
54:9f:5c:ed:a3:6b:11:f4:d9:d7:ea:b3:cc:ed:bd:
96:28:7a:13:45:c0:25:9f:fa:b5:44:31:61:03:77:
96:ad:be:c1:24:b1:c6:4f:8d:ee:0b:6d:4b:33:47:
83:9c:06:7b:82:74:ca:1d:2a:f2:6c:b8:7b:cc:51:
66:79:a3:57:fe:2e:a3:92:3d:92:6c:ff:35:b9:0e:
bd:b1:13:6f:64:03:cb:0a:e1:a4:59:d1:91:50:d6:
fb:60:91:d9:a3:6e:fb:ea:99:1d:ee:41:57:a4:81:
49:90:d3:a2:e4:29:f6:2e:9b:ce:a2:04:92:9a:50:
d0:8d:40:25:c0:b9:b5:f4:57:c8:da:0f:ec:86:b9:
99:a4:98:aa:96:c1:5c:75:67:da:d1:be:5a:98:ee:
69:0f:44:13:fc:63:27:4b:35:d8:02:aa:5d:31:f1:
6a:6b:bb:80:05:d7:c0:fc:f1:3b:e0:54:ca:0a:28:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:75:AD:FC:B6:EF:91:13:EF:6B:C1:BA:20:0C:7D:0C:B8:E9:32
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3e:73:a6:8a:69:e5:ee:32:ed:31:2b:4d:6e:73:06:ec:4b:
4b:8c:4d:dd:fa:0e:aa:0b:c4:cf:78:85:7d:aa:19:e8:02:d6:
ec:61:8b:5b:1c:86:58:4d:ce:22:7e:f2:0c:fa:24:df:4f:cf:
84:2d:a5:d6:03:7c:8c:7c:db:74:e3:12:61:fa:43:cf:36:b8:
d3:f1:17:c2:fe:99:50:58:b8:52:c8:4f:15:65:44:f4:32:67:
3c:fd:af:84:71:e5:ff:b1:28:c6:bc:0b:5c:1f:9b:9e:f3:6f:
55:01:14:85:e0:be:e2:a7:9e:cd:33:12:46:de:70:e7:cb:06:
9a:8a:b6:52:33:b6:be:95:f2:6d:f9:6e:f5:db:a6:30:03:79:
81:ca:82:a6:14:cb:0f:1c:d8:da:05:32:42:66:29:d2:e5:f8:
26:68:e6:aa:de:d2:f3:db:ec:88:49:fb:64:f3:fd:0a:b5:b2:
0b:44:25:9a:68:a3:d5:11:a2:ba:5e:3a:0b:76:1b:46:d1:3d:
52:6b:aa:fc:58:91:62:c7:b5:8e:1e:05:d8:9b:0e:0f:4a:17:
03:1e:fa:d1:de:15:4c:61:be:bb:ba:66:6e:40:7e:08:79:d4:
3c:50:f2:d0:5f:5f:f2:12:85:d9:a6:be:63:e5:2f:46:f9:ee:
92:00:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:33 2025 by rpki-client