Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: 7XNq8uZby4my7/mh+vBqSfWV+g5O06GVLAIgsoJU0Xg=
Subject key identifier: 08:3E:F0:03:4A:AF:26:27:20:B2:55:6C:5C:3F:FA:83:0A:66:CE:BA
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 0198D473FAB922292BEC63BB2B8B1ACDF3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0D58
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: NEscbQbi99NFUTRkjH7loSfs7zYjBZhME6kPRQ0UAtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:fa:b9:22:29:2b:ec:63:bb:2b:8b:1a:cd:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=083ef0034aaf262720b2556c5c3ffa830a66ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:4b:79:7e:50:a1:17:c2:19:59:d0:03:3a:
fc:2e:93:c2:99:4e:ba:df:6d:3e:08:f0:07:dc:c0:
48:37:34:47:df:ed:ef:d5:91:3d:c1:53:cd:dc:91:
0e:ad:28:8c:61:b4:e9:de:be:20:03:6f:64:1d:75:
b6:32:6b:e7:f7:80:31:83:36:6b:b3:c5:85:82:d2:
ec:1e:6d:c9:f2:4d:e5:1a:de:5c:b1:a3:54:0f:8c:
f9:2b:49:a3:43:d8:10:4e:2f:55:7e:c5:9e:44:25:
0a:e2:3c:95:e3:ba:d7:e6:ad:7a:a8:b4:db:e3:e4:
7f:d4:f1:fd:06:09:6b:24:2e:35:e6:a3:ef:4a:a5:
17:0f:74:5b:26:4d:0c:a7:32:1b:48:19:eb:1a:b4:
b6:92:d9:56:39:4f:5c:e6:4d:4c:f8:17:01:b0:c0:
5a:cb:3b:2c:36:66:fa:08:e8:a2:78:4a:0d:9b:30:
5c:82:c5:57:c5:e1:2e:a2:a6:7f:84:25:39:e2:7d:
5b:89:9f:95:6b:10:c4:96:12:c2:69:44:77:72:c2:
ab:72:25:4f:2a:38:32:bb:b3:0e:1c:3a:eb:13:96:
09:6b:57:74:84:19:e7:ee:9c:d7:99:f6:b3:fa:74:
47:16:46:48:d5:92:ce:3c:78:d7:92:98:ca:90:c7:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:F0:03:4A:AF:26:27:20:B2:55:6C:5C:3F:FA:83:0A:66:CE:BA
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:a8:25:26:0f:9d:99:b5:7b:56:8b:6f:24:cf:5d:d6:20:
cb:94:bb:5d:57:81:c6:c7:5c:33:ec:60:73:b0:14:76:8f:9e:
4b:37:81:c1:f0:93:9e:fd:62:d6:73:14:94:01:07:3e:31:c2:
a3:0b:30:01:51:c9:70:b3:18:0d:c9:c0:13:e2:87:9f:88:77:
4f:e8:86:74:fa:72:5d:57:3a:b1:a1:3b:18:59:d4:f1:2f:75:
cb:a9:6b:6d:ee:ee:a4:c7:18:6b:42:47:de:c3:bb:18:0c:7c:
38:d0:5f:65:d8:9d:e4:35:99:81:38:0b:4c:1a:a1:a7:67:38:
fe:98:8a:ab:d3:e3:33:b5:0e:1f:4b:e3:c1:d9:d0:83:df:04:
39:be:43:55:5a:f5:4a:7d:c1:b8:c6:cd:33:e6:31:c6:84:ec:
54:cc:84:d3:c7:3d:bf:07:12:5a:8c:57:e4:70:6a:52:70:6e:
47:28:b7:92:79:d5:9c:76:25:56:04:b3:08:d4:1c:a0:45:ef:
e8:5e:93:69:42:ec:f4:a0:15:eb:cc:ab:e6:69:9d:ab:60:72:
27:a9:99:cf:4d:13:09:74:89:ed:df:9d:03:75:eb:d8:82:28:
65:d8:18:f9:ca:7a:3f:2d:c7:61:2f:35:4a:ca:6e:39:bd:15:
df:15:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:03 2025 by rpki-client