Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json)
Hash identifier: sBR8+hGdkXT6+sBx/9HEEfp8NYSFsmvdqGAEfELehDo=
Subject key identifier: 8D:16:F4:BA:14:35:54:F5:C5:7C:18:6F:67:3F:29:79:F8:3B:C7:09
Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc
Certificate serial: 0197B5FC196A7DA840E45C40914C91BB16A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
Manifest number: 08A1
Signing time: Sat 28 Jun 2025 10:01:26 +0000
Manifest this update: Sat 28 Jun 2025 10:01:26 +0000
Manifest next update: Sun 29 Jun 2025 10:01:26 +0000
Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: 6uP6Qapf4Z2N+S0sKqUKdK0Yybe/ELbwpmpe+1HrmXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:19:6a:7d:a8:40:e4:5c:40:91:4c:91:bb:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc
Validity
Not Before: Jun 28 10:01:26 2025 GMT
Not After : Jun 29 10:01:26 2025 GMT
Subject: CN=8d16f4ba143554f5c57c186f673f2979f83bc709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:16:4e:fb:21:ae:5e:77:35:28:29:a8:1a:
e6:9f:30:a8:a3:18:e7:a3:43:8a:15:a2:56:c3:6f:
e9:57:fb:ea:11:4a:33:13:b1:97:a8:9a:04:31:9f:
a5:e9:ac:0a:d9:cd:a7:4e:b8:d6:8b:74:ac:8d:e8:
76:fd:56:42:6b:96:8e:3a:9f:b0:8b:b9:71:cd:65:
39:39:58:03:15:7d:00:60:0d:c9:bb:e0:7d:10:7c:
6b:e1:2e:ed:2d:6f:1b:74:f5:0d:ce:5f:13:9b:ae:
55:2a:3c:58:d3:9e:59:5b:5f:38:ee:bc:2d:6f:7b:
6b:a0:87:e7:9c:ac:44:01:2a:7e:60:20:05:6f:55:
76:31:f2:4c:04:06:44:08:81:09:8f:86:0d:30:25:
bd:1b:51:1f:84:70:62:49:33:09:0e:03:c9:e0:1e:
32:55:79:40:0c:28:1b:4f:18:bb:36:01:35:72:c9:
28:d0:b2:06:07:76:f6:ec:24:f6:52:1e:28:6d:6e:
b7:0d:ff:6a:fc:89:24:94:7f:bf:77:0d:3a:b3:62:
84:ff:d3:28:81:fb:c8:18:d3:3f:63:97:32:fc:52:
cf:26:51:5b:73:43:03:e5:57:b4:74:b9:9a:c7:d1:
0f:7b:6f:f8:34:c1:69:6c:33:37:a1:ab:48:27:1c:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:F4:BA:14:35:54:F5:C5:7C:18:6F:67:3F:29:79:F8:3B:C7:09
X509v3 Authority Key Identifier:
keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:f2:91:a6:87:fa:69:53:88:59:d0:2e:b7:e0:80:9d:81:
4e:c7:71:9d:92:73:92:8b:20:30:4f:d1:4f:46:36:e4:70:10:
a9:1b:97:d0:8e:6a:7c:5d:b7:8c:52:ae:63:9d:5a:97:59:0d:
b3:51:da:fd:1c:63:ed:e3:b4:f8:d6:41:bd:03:4c:92:b0:d2:
24:d2:39:02:e1:da:35:b2:9a:d9:90:4a:f5:79:6b:48:f6:e7:
b9:a4:9d:71:9e:50:18:7c:e9:48:8e:c3:e7:3e:2f:a9:61:6d:
03:3d:28:23:7e:3a:ba:2a:a3:20:b5:6e:87:33:f0:06:c7:d0:
af:c8:6b:e3:e4:3b:12:8d:c8:0a:b7:9b:ac:64:52:57:16:8e:
49:c5:42:97:90:55:b8:4e:69:7b:e9:93:c8:a0:8d:77:d0:04:
ac:61:e2:bd:c9:1d:29:5c:6f:95:03:e0:23:4d:b1:9c:4b:79:
ba:87:dd:c5:99:2c:d7:89:a5:23:0f:23:12:3e:cf:5e:db:2d:
16:8d:cb:9f:f5:0f:a7:80:ad:5d:c9:a7:60:e2:23:8f:ee:9e:
1c:b0:1d:ec:79:c9:69:dc:30:8a:b0:af:98:50:74:e3:cc:1d:
50:d7:47:ed:44:40:f3:e9:b4:28:52:e8:d8:95:07:bd:41:80:
a8:ca:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client