Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: oXf0cyvO7sdBTUZtEDTIKHI4YQxA9nd2C4gwqvOEh6M=
Subject key identifier: 0D:D7:16:A2:41:97:DB:00:FA:FC:03:DD:7D:80:BB:15:BA:5A:59:24
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 0198D5BB8C8B477C29BFE3F3711AFD5343A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 025A
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: 5Xfyn2MMNsWpxbmn6XNMa9NwJsdyGI4E4DL2Sy+fnFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8c:8b:47:7c:29:bf:e3:f3:71:1a:fd:53:43:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=0dd716a24197db00fafc03dd7d80bb15ba5a5924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:fb:af:e2:99:7e:15:6d:fc:4f:cb:9d:27:
3a:97:a3:8f:99:7a:d5:d0:e7:23:df:4a:8f:3d:ec:
9c:bc:6f:00:95:f9:75:02:20:88:7e:14:0c:dc:63:
7c:93:7e:b6:34:0c:b1:9d:2d:cb:da:18:d2:d5:0f:
84:f2:ba:86:76:e2:3d:70:17:c5:ef:0b:e1:28:b7:
34:e0:ab:05:da:f4:3e:90:2a:84:cf:f9:8e:c6:88:
38:ba:9b:27:07:bd:67:6c:90:49:c5:44:55:da:23:
04:6a:57:20:c1:45:0a:35:04:e1:02:fb:f2:80:17:
ed:1a:5d:9f:55:43:aa:c4:35:c6:77:08:c1:e3:56:
8b:fd:61:26:91:27:29:08:87:f9:c7:7b:a4:47:03:
74:33:f9:9a:a3:6a:98:67:e2:3e:9b:89:a6:fb:2c:
f5:63:5e:fd:df:27:60:54:0c:eb:c6:34:fd:34:7d:
bd:db:8f:87:6c:b3:80:54:bf:45:45:ab:ce:8c:dd:
8c:2e:a5:ab:18:be:57:6f:0d:50:35:9d:49:da:5a:
bb:4d:e4:cd:d6:90:ab:56:6f:e9:6d:41:32:80:e6:
99:30:e0:40:5c:93:57:25:1f:26:3e:26:64:8e:35:
49:30:8d:5d:e2:7d:9e:9c:29:fc:99:40:57:6c:2b:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:16:A2:41:97:DB:00:FA:FC:03:DD:7D:80:BB:15:BA:5A:59:24
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d4:cb:05:00:40:60:82:4e:91:96:08:13:a9:f7:ed:8d:c0:
96:48:07:74:d8:39:89:b4:44:0d:23:e5:25:cf:90:aa:91:3c:
be:9c:7b:68:f1:76:83:95:88:78:d3:0f:bc:5e:7f:81:72:73:
30:91:9a:6c:49:29:8e:bc:39:a5:2d:1e:64:4b:3f:a7:ee:85:
da:3d:a8:ce:d7:3a:8e:9d:03:ca:6d:dc:42:6e:57:16:ea:4a:
e2:ad:0f:52:b2:1d:a5:0e:70:59:73:29:91:ea:ec:22:a9:a3:
45:46:b5:90:a3:6d:08:eb:3c:96:ae:10:eb:ef:f6:68:96:ed:
47:00:7b:e1:e7:f7:9e:10:31:18:4f:3f:0f:bc:c9:38:ba:bb:
17:aa:c3:0d:39:8f:3d:c3:62:1a:7e:66:23:ec:d6:89:04:2a:
af:cf:1a:8d:3e:c2:ae:80:63:38:22:6e:de:14:91:3a:30:b7:
87:e5:1b:3a:e6:d3:4a:d6:36:39:15:70:d3:70:22:02:fc:29:
35:d3:f6:3c:0a:22:47:6a:a2:87:58:aa:f6:db:a6:4e:d0:5b:
6b:f2:2b:d9:89:91:bb:1e:cb:4e:38:df:ad:78:fa:a5:98:7d:
b7:fc:6e:76:a4:c4:d3:cd:b9:ee:9e:27:e4:d7:8c:5b:78:18:
bf:80:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:47 2025 by rpki-client