Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: 6Uw+rqCwfF/NTIUfo+W5OFfxBusPol4uYXhUorJlScY=
Subject key identifier: 55:F0:2A:80:0E:A2:C0:A1:2B:86:6F:40:3B:8E:42:2D:FE:A9:2F:E0
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 0198D65F5E7709970716D4B3962486447DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: H8XuOprMqzeadRqeUyzivr2qtCYXQTpy8ECuBDdAuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5e:77:09:97:07:16:d4:b3:96:24:86:44:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=55f02a800ea2c0a12b866f403b8e422dfea92fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:8c:0c:8c:7d:0d:7b:1c:c1:32:3a:47:a0:
be:33:79:e9:6f:22:11:0d:0a:05:ab:59:a1:74:1f:
d5:97:c5:28:dc:22:bb:eb:3f:e5:0f:4f:e8:07:47:
b4:49:0e:4b:3f:2f:cc:62:01:90:da:10:8f:e0:4f:
06:7d:f8:bf:bc:2a:a2:ff:ba:f5:85:86:5a:b0:e3:
dd:50:4b:5c:96:82:85:9a:d0:01:68:12:5b:5e:56:
25:4e:a7:9f:3b:e6:1c:c2:37:f9:5e:d5:2e:27:f7:
a7:d1:70:89:1c:2e:07:67:c5:0e:b1:e9:23:9f:ab:
94:6d:34:b4:7e:51:ca:47:c7:73:3a:d3:76:9c:15:
3a:de:37:c8:81:2b:cb:87:b0:9c:96:25:b1:94:24:
74:50:a2:44:62:47:78:0f:88:78:17:f0:bd:d3:14:
8c:d6:5e:36:bf:ae:c8:5e:d3:08:c9:68:0e:ac:95:
4e:34:0e:d2:be:b2:61:6a:d6:95:a5:51:59:58:f1:
0d:ac:12:42:f1:69:ef:a0:05:49:dc:77:d9:38:e5:
ff:ea:c4:44:50:bc:ed:d3:79:de:38:f8:c3:8c:c7:
aa:15:80:45:aa:c9:16:9a:8a:84:72:3c:7b:73:4f:
20:de:43:f2:8d:5b:a4:5f:4a:cd:66:03:6a:05:8c:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:2A:80:0E:A2:C0:A1:2B:86:6F:40:3B:8E:42:2D:FE:A9:2F:E0
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:76:fc:b2:16:b4:2a:76:50:2c:74:74:54:b3:5e:01:21:
ec:b0:1a:95:60:9b:77:b1:01:ea:31:49:ce:f4:0e:1a:57:ec:
0e:19:75:8b:56:e0:2c:ce:b1:f2:91:5c:57:31:a7:12:a7:41:
88:bd:e9:f0:63:e6:4d:2f:a7:bc:19:11:8e:6d:a5:9c:74:e2:
05:92:20:29:dc:48:27:47:21:a5:de:65:7a:80:f9:21:01:c9:
5b:9a:82:dc:1b:61:07:ec:fb:3a:23:2c:59:9c:5c:cc:cf:53:
d9:5a:34:0f:c1:a3:63:f7:ee:2c:48:24:42:79:52:f1:62:93:
c4:fc:84:f4:7b:1e:61:d2:c7:37:05:d4:c0:45:19:cd:86:4a:
ed:c7:33:3d:d1:ee:ad:6c:bd:dd:64:30:29:e1:18:5a:97:0b:
56:49:ba:2d:3e:64:1a:f9:08:91:e4:c4:74:7d:8b:bf:22:9c:
49:97:06:a4:01:47:95:51:d7:c6:04:75:f7:3c:e5:69:29:b1:
b2:d7:e6:8b:ac:e9:44:f3:e3:92:8b:ca:08:ab:f7:3f:02:ab:
56:13:d5:02:49:be:9d:26:59:56:c1:9e:53:c4:01:d0:53:94:
01:5b:d9:71:4b:5f:17:08:c5:38:fc:93:22:e6:d1:0c:d4:96:
11:d5:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:34 2025 by rpki-client