Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: wPo51ncz1U6ckZI36Ye07GuBrLsYeuU4wYKo3MxREI4=
Subject key identifier: E7:E6:6E:65:65:CC:E0:3E:E3:C2:C0:CC:59:8A:D0:77:71:AA:92:3D
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 0198D54E40B14AA2CE6E86845EF21D213C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0598
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: ZIXfOToNWzM5GuiM2GHNpSyTd0cP4jTNVS2n8NBuulA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:40:b1:4a:a2:ce:6e:86:84:5e:f2:1d:21:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=e7e66e6565cce03ee3c2c0cc598ad07771aa923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:db:55:cf:94:27:69:cf:e6:9d:f0:b7:8f:
6d:91:41:75:03:40:43:8e:38:95:75:24:68:c7:c8:
dc:a8:f7:51:15:9f:a1:1d:53:ca:f0:52:84:f7:25:
21:67:a8:9f:2f:a3:5d:59:b1:e7:25:36:56:2f:a1:
50:c7:3b:f6:a5:4b:27:47:ef:b4:7a:1c:68:9d:d5:
0d:c9:11:66:80:73:27:9d:99:da:a6:a1:cf:e5:a8:
0f:7a:31:4c:6c:50:d8:3f:84:8a:05:70:35:bd:1d:
7c:7c:f4:90:fd:05:2b:58:e3:a1:55:e8:d8:55:5c:
5d:7f:b9:b5:0e:12:19:2f:92:99:cc:1e:de:cb:61:
34:50:26:1b:e7:ff:7d:fe:e5:02:ca:cd:21:4a:e7:
10:27:8d:6f:5d:37:d9:79:1a:f9:89:42:51:b4:22:
64:77:ff:8a:ce:64:cb:f8:84:78:7b:f2:ee:a0:8a:
c8:25:ac:d7:70:f1:5f:2b:2b:89:01:be:e2:49:98:
f6:8b:50:1e:27:e4:33:87:54:9d:10:af:a4:e3:d0:
f0:32:4e:3b:93:b5:55:39:bd:05:e9:f9:27:b1:28:
80:af:c2:d4:53:9c:56:99:b1:03:54:b5:8a:f6:28:
32:f9:7a:da:4e:a9:b4:30:39:35:27:6a:1a:58:96:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E6:6E:65:65:CC:E0:3E:E3:C2:C0:CC:59:8A:D0:77:71:AA:92:3D
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:52:fa:c9:da:a0:8e:97:be:26:91:bf:fe:5a:99:d6:02:2a:
f4:4d:84:44:56:be:46:6d:04:36:fb:69:04:c8:6a:12:d1:52:
19:e0:83:2c:5c:6f:60:14:d5:45:53:7c:cb:72:78:5d:c8:0e:
aa:e7:89:f6:1a:fe:70:8a:4f:bc:90:f3:cb:30:32:c7:94:25:
67:17:ac:10:92:aa:53:38:e5:2e:c1:ea:b9:90:dc:1f:04:4d:
40:81:44:03:e9:bc:b1:bd:24:d3:69:84:35:3a:62:c5:8e:ac:
b7:72:b3:33:0f:1d:81:87:7d:7d:b3:85:d9:1c:d5:a3:ea:6e:
ab:ba:9f:75:0e:ec:07:1b:83:f3:be:fc:74:2a:e0:9b:a2:a9:
34:b4:bc:c7:49:0e:42:3d:49:72:f5:22:dd:85:24:7c:f8:1e:
70:4c:2b:d6:93:26:08:16:4f:9b:5b:c9:e7:15:cc:0e:93:4d:
36:aa:f5:92:d6:17:8d:bc:ab:d8:1f:34:6c:32:27:36:a3:c6:
d9:5a:f3:25:4d:be:1f:a6:2e:09:3a:93:f8:33:68:75:5c:ec:
7a:4c:38:0c:6f:a0:3c:74:1c:e1:42:c7:5d:0d:01:19:a8:98:
e9:9f:36:73:d0:5e:8e:0d:be:a6:49:3e:20:84:ef:f8:11:db:
01:47:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:06 2025 by rpki-client