Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: n7kIj+fZ0lxsdbYqEzp4QSe61Zd7cnixgvcTuzGE04c=
Subject key identifier: EE:D4:E2:B1:D1:72:E4:F8:2B:A6:68:9C:B4:FA:88:99:9D:D5:EB:FA
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 0198D54E44DEA32B25E2D9AFEADF5CB872F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0428
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: GHyCtcrEK6IABhqzjOLSj9hXyK60LXLkI4yjn0Df4As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:44:de:a3:2b:25:e2:d9:af:ea:df:5c:b8:72:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=eed4e2b1d172e4f82ba6689cb4fa88999dd5ebfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:b1:00:83:a1:29:71:f3:f6:71:61:9a:06:
fe:44:9f:42:f9:3f:9e:12:8a:86:d7:a9:64:0f:7f:
2b:39:1e:2d:07:61:4c:34:4a:e3:b8:25:1b:f6:d9:
76:7e:11:ff:0a:12:43:20:d9:f3:5c:0a:58:8d:ef:
dd:ff:71:ba:6a:f7:ae:35:d4:fe:44:85:57:7b:af:
fa:40:b8:1d:6c:65:82:77:dd:20:32:ff:a1:f2:fd:
1b:f8:dd:63:d7:39:82:73:43:69:fa:73:00:3e:56:
5c:a8:59:1d:66:0c:81:24:ed:9f:87:f6:88:5d:d5:
ac:bf:b5:5e:40:f9:7c:0b:df:95:cd:e6:96:4a:d7:
91:40:1b:b7:51:27:9b:e1:c8:37:13:69:c1:ea:7e:
fb:dd:0d:d9:09:f4:56:36:b8:24:86:70:c0:de:ff:
be:b5:4e:57:02:5b:62:4e:ed:4e:55:0b:c4:5a:1b:
d0:ae:8a:5d:07:16:9b:1c:2a:72:8e:07:1c:e8:17:
ea:7f:33:e7:f6:83:2f:48:2f:c4:7a:af:52:ec:62:
cc:d3:be:3f:67:59:c0:56:40:29:73:07:bf:b9:8c:
19:03:04:da:40:c7:87:c5:19:cf:47:20:9c:37:af:
29:24:2d:86:ee:a4:53:8d:69:bf:8a:e3:9f:b1:a7:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:E2:B1:D1:72:E4:F8:2B:A6:68:9C:B4:FA:88:99:9D:D5:EB:FA
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:ec:e3:77:27:02:08:3d:7e:e5:f4:25:2f:41:24:bb:06:
8e:3e:a0:61:a1:e7:a3:2c:28:69:21:65:4d:44:05:fd:fb:fa:
14:10:45:de:12:7c:2d:1f:67:a4:8e:9c:2d:57:c5:fa:e7:82:
cb:5e:02:90:54:bd:4b:fa:4f:98:a1:9e:da:7d:41:c4:2a:34:
4b:84:2e:e6:1e:0f:41:3d:a0:27:59:e2:99:b5:98:74:77:4d:
5f:33:22:0d:b9:29:51:33:2c:00:c1:2d:e7:a6:e9:be:06:9d:
dc:89:00:af:9a:02:8b:d1:c6:95:19:5d:3b:81:f0:bc:e5:bd:
c0:c0:84:a0:eb:4a:9d:98:2d:b2:1e:17:e8:60:e2:9d:db:ec:
c5:21:b4:2b:ff:6b:0b:48:58:f8:52:1f:7f:f5:9a:ff:c9:d2:
5d:31:3a:7b:d3:59:f4:61:4f:15:1d:38:85:81:b6:5b:93:f7:
91:e3:09:f9:e8:8f:94:b3:df:bd:a3:29:2c:6f:f3:d4:79:19:
75:73:e4:95:6d:b8:50:92:04:60:73:32:9b:98:bb:0f:cf:a5:
18:d6:7b:d8:27:34:77:50:5b:24:77:32:f2:8c:25:70:5e:c2:
14:1c:c3:f6:e5:98:ed:2b:a0:f3:ac:f6:f8:81:98:35:44:3b:
1a:75:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:50 2025 by rpki-client