Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier: 4jgSGLWlGpc/mKWv7KUfEmT1N9kQr6qTK4SmH32mpSk=
Subject key identifier: 33:3A:84:78:4F:94:F3:4C:17:F8:FB:00:22:E6:BD:0D:B3:57:FC:7C
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial: 0198D6CD88C678DB4522C609D7F2210A6405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:50 +0000
Manifest this update: Sat 23 Aug 2025 12:00:50 +0000
Manifest next update: Sun 24 Aug 2025 12:00:50 +0000
Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: pmRoMVMfbZLuPTWTz/cdw4TFov/rMp7nKKrR6hu9MIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:88:c6:78:db:45:22:c6:09:d7:f2:21:0a:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Validity
Not Before: Aug 23 12:00:50 2025 GMT
Not After : Aug 24 12:00:50 2025 GMT
Subject: CN=333a84784f94f34c17f8fb0022e6bd0db357fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:03:98:5d:bd:5d:a6:b8:2c:5c:b4:84:cd:
74:7e:eb:7d:be:1b:05:7a:a2:c2:ef:8b:58:dc:be:
11:05:70:2f:49:c3:e7:9f:79:4c:40:1a:dc:6d:9b:
37:ac:ea:67:93:f9:41:54:2f:b5:07:61:3e:64:d7:
16:5d:24:56:a8:d5:4f:cf:c9:de:ec:7e:ec:75:5a:
55:01:c6:35:c1:44:a7:85:e9:24:cd:c3:8c:8b:0c:
65:62:1f:9a:f9:a8:8c:04:ea:ca:32:ed:4f:be:06:
d1:64:25:1f:ea:c9:f1:45:70:f8:e7:93:32:f5:65:
d7:14:0f:0a:0e:cd:09:b9:0d:43:07:6f:f6:39:8f:
41:57:70:12:4a:e5:7d:0e:23:06:73:27:51:97:df:
24:7d:11:eb:18:88:93:c8:f6:39:8f:ae:16:54:78:
dd:61:1d:72:9f:a0:df:72:e0:8a:c0:fb:13:95:1a:
6f:3b:42:ea:f7:ba:93:2f:af:e1:18:2d:f8:65:fa:
85:cd:2f:94:63:e3:79:30:c2:ac:53:fc:ad:f6:1b:
a7:48:21:5c:34:fa:46:0d:72:71:7d:2a:d7:45:74:
fe:a0:ad:14:b4:b5:66:0c:31:1b:39:9a:53:e7:d1:
fa:8d:8c:1c:13:f2:7b:1c:e2:dc:a5:ea:3b:de:17:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:84:78:4F:94:F3:4C:17:F8:FB:00:22:E6:BD:0D:B3:57:FC:7C
X509v3 Authority Key Identifier:
keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:c7:1c:cf:d3:4a:54:f6:2e:aa:8d:9c:c5:54:1a:08:e9:
74:40:6d:a4:a1:25:95:ab:84:1b:fd:11:55:f0:83:a6:db:aa:
3d:2d:f7:89:81:35:97:73:59:51:eb:02:3b:30:93:39:68:7c:
6b:77:8d:8e:a5:3d:7e:51:03:be:1a:f5:30:80:73:a9:6c:b1:
96:91:3f:cf:5f:62:af:08:7a:5c:c9:47:96:9e:1a:06:45:9b:
01:84:b8:4a:06:11:fa:bd:bc:22:82:cf:ee:da:fe:1d:a9:5e:
4a:d3:d8:35:22:77:ca:c2:a2:7d:62:83:9a:49:20:e5:32:65:
01:dd:bb:77:e9:de:99:3c:e9:b4:cc:bf:9c:32:75:e2:8d:92:
21:e2:8a:a8:51:f6:30:c0:c5:78:f3:bc:01:37:15:c0:10:af:
7b:55:58:34:ae:49:e1:82:ac:94:7c:56:dc:b9:79:3f:b7:af:
95:a1:8e:41:77:a9:d8:44:23:7b:1e:de:47:6d:44:97:b5:13:
cf:42:62:a2:fc:63:fc:39:77:32:51:2a:82:89:00:85:21:19:
c7:c3:81:a8:45:45:86:3a:35:c9:b3:c6:4e:66:37:00:62:27:
50:a1:ea:fe:12:e6:84:be:a8:ba:eb:a1:c5:6a:9b:67:a6:cb:
33:72:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:59 2025 by rpki-client