Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File: fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier: m9BiwzUGCPW1mshkUfdoDqKyes0SiUd+z1H+TYo+2zw=
Subject key identifier: C9:71:A8:6E:F7:D0:D1:84:56:54:7D:60:20:26:34:EA:9D:8E:5B:5F
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer: /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial: 0198D660152D0289AEAFDE84401C6D92CA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:17 +0000
Manifest this update: Sat 23 Aug 2025 10:01:17 +0000
Manifest next update: Sun 24 Aug 2025 10:01:17 +0000
Files and hashes: 1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: FTshT1Ji4l1pn2cehyXRFEujhq0mULTJEbjPMwok7KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:15:2d:02:89:ae:af:de:84:40:1c:6d:92:ca:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Validity
Not Before: Aug 23 10:01:17 2025 GMT
Not After : Aug 24 10:01:17 2025 GMT
Subject: CN=c971a86ef7d0d18456547d60202634ea9d8e5b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:5b:ae:9a:8c:88:d5:39:d1:0a:7b:02:6d:
f3:2d:ee:15:0d:93:39:20:b9:4a:c6:ae:99:b7:ae:
5c:4b:23:91:32:b7:92:93:7f:30:fb:0f:8b:a0:00:
bd:b2:8c:26:5d:e4:8b:b9:72:c9:95:55:69:fb:c2:
7d:db:3c:82:31:1b:f3:38:c2:ff:9f:fe:86:40:0f:
f8:d7:3c:f4:03:82:13:a4:65:1f:df:2a:11:0d:56:
e0:3b:7e:1a:3d:ab:2b:5b:89:b8:d9:2b:74:a7:4e:
8b:33:28:c3:39:a1:73:cc:32:21:fa:62:cd:00:03:
ab:a2:96:74:f4:d5:69:7d:c9:47:8f:f1:57:d0:ab:
37:07:f0:42:3c:56:4c:2a:4f:82:52:3f:ad:a3:95:
94:82:d2:e8:ec:d3:a5:73:3d:7e:f3:25:24:00:4e:
10:4d:7d:54:92:5e:b3:20:3f:3e:7c:53:59:9d:22:
8f:72:00:c3:9c:67:4d:fd:9f:08:de:c4:8b:79:2c:
67:5d:ff:35:fe:d6:b1:83:4f:d3:12:a3:59:87:6a:
29:4a:a2:3a:c4:3a:3d:a0:96:f0:f1:41:ff:04:ac:
d7:35:23:5d:7e:af:22:ba:d5:5a:b9:e7:51:57:66:
be:5d:64:b3:7f:93:cb:04:03:bf:02:34:e7:ba:ee:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:A8:6E:F7:D0:D1:84:56:54:7D:60:20:26:34:EA:9D:8E:5B:5F
X509v3 Authority Key Identifier:
keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:74:43:91:84:93:be:70:b3:54:c4:1a:f2:63:17:96:5b:
3d:7f:0b:7c:35:63:4d:11:90:34:6a:2d:cb:f8:6f:b8:45:e6:
05:53:da:10:aa:23:cd:2a:bc:27:f8:b4:ce:8e:ad:32:95:06:
6f:bd:48:5f:47:ae:8e:17:e4:17:b5:07:24:b4:d6:9c:03:34:
43:54:89:22:62:b5:05:34:99:fa:10:23:86:f3:07:41:a8:e6:
21:06:81:f9:9f:04:dc:55:11:0a:6b:88:7f:74:22:c9:dc:a3:
34:1e:f1:a6:e4:26:8f:d6:cb:fe:3d:82:11:be:17:b7:92:c9:
0a:6b:5e:b6:b7:fd:d8:c8:d0:2e:ca:a4:97:07:e3:f9:6c:6d:
93:fc:29:51:7a:a1:89:ee:3a:54:82:3a:55:65:e0:47:6c:48:
5b:34:c6:0c:c6:2e:ec:97:8c:8e:11:ac:ae:13:5d:9b:90:6b:
a2:ea:22:8b:fc:f9:b2:ce:47:95:17:48:a6:c2:f4:54:54:dd:
11:22:91:f2:0f:ea:2c:a6:ff:8b:6c:74:02:0f:4c:74:56:1f:
7b:2c:b3:8d:f7:61:47:ba:63:60:ea:47:bf:84:69:c9:d1:d6:
7b:11:35:56:4a:0d:72:93:10:a9:53:29:5b:ba:ef:25:ca:b8:
0d:71:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:25 2025 by rpki-client