Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: vALEFcn16vjjqnl+mXRJmG3gP1NYeV0PaHdtfvzPHXk=
Subject key identifier: 54:28:DA:40:3E:18:DC:BE:E4:1D:FE:84:91:B2:DD:CC:3D:14:B4:75
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 0198D70586D4462D31449BB25E35E39E37BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: z1/XM8SD69xhnmui7EXAehtO0hc1jVMlqTu8LMndhVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:86:d4:46:2d:31:44:9b:b2:5e:35:e3:9e:37:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=5428da403e18dcbee41dfe8491b2ddcc3d14b475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:38:70:0c:d2:52:00:a6:c0:93:74:22:4c:
14:b3:6b:23:d9:14:a9:a7:46:ea:50:8d:4b:9f:a8:
ce:0b:f3:80:47:ec:80:55:57:c2:85:c3:3b:c2:ee:
92:04:0e:03:78:fb:8d:d0:a3:78:04:0f:90:a0:ee:
89:71:49:04:d1:2f:6d:8b:65:00:d8:a2:c2:e6:69:
93:c9:9c:6f:77:fc:56:25:0f:04:b9:24:b4:6b:0a:
1d:c3:f8:f5:5a:22:d4:bd:5c:13:ac:66:a5:93:8c:
ec:0b:e6:fb:eb:14:6b:d6:5f:97:4b:ac:5e:0d:f3:
55:2d:43:01:8f:74:f7:22:47:76:0a:37:de:d8:59:
32:41:e6:df:e1:16:93:eb:08:ed:19:6e:4e:bd:3e:
45:c2:2e:72:1d:94:23:57:c1:f5:e8:96:58:33:e8:
03:44:fc:53:23:3d:3e:43:f3:7a:11:1c:b8:d3:b7:
8c:01:97:16:53:27:4d:4d:87:88:50:d0:82:a7:67:
4e:e2:09:a5:62:42:e6:38:6f:01:cc:0b:19:f0:ba:
cd:7c:dd:35:2d:24:2d:e0:22:10:06:a2:be:7d:9c:
a5:d6:f3:09:55:68:63:e0:da:4f:88:ea:06:cb:87:
02:ca:ea:8a:1d:62:af:9b:70:0e:4c:45:2e:98:64:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:DA:40:3E:18:DC:BE:E4:1D:FE:84:91:B2:DD:CC:3D:14:B4:75
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:8f:11:8e:c8:36:00:e5:40:ea:11:1b:75:77:34:62:1b:
bb:a1:11:56:dc:ca:37:06:d9:63:0c:92:0a:62:64:48:b3:0f:
92:d5:03:9c:ef:67:f2:4e:e3:6e:b4:0b:96:bf:87:20:3a:87:
70:93:e3:da:04:be:0c:59:12:1e:d2:73:99:4b:58:a8:91:5e:
ce:c3:30:2e:ff:4f:7c:ea:23:ad:ad:78:da:37:9b:4a:23:71:
e8:31:f4:ff:f8:9e:54:85:77:1b:ae:c7:06:03:36:25:f4:08:
85:45:80:97:d5:61:6e:83:8f:15:21:c9:28:16:e3:a3:81:0c:
6a:27:c5:f6:8c:c8:64:bc:74:5f:6d:07:eb:0a:50:4b:4d:da:
fd:bc:01:14:92:00:11:4e:37:60:00:fd:4c:5f:16:bf:32:95:
1e:93:e7:cf:d7:ba:3a:27:8d:b1:a8:0f:9a:61:3f:38:1f:a9:
50:f3:86:fe:f2:4d:cd:6c:49:0c:30:51:ae:04:7f:96:04:0a:
ca:c6:ff:f8:13:ca:96:a2:0a:74:f8:27:75:4b:ec:b7:a9:c5:
88:00:01:42:9f:ff:50:22:d8:a2:30:8a:7f:8b:a7:d8:b1:45:
c4:f3:04:89:4d:3e:4c:08:88:6f:d6:35:21:6d:c8:12:5b:85:
b0:be:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:10:40 2025 by rpki-client