Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: hlwhtz0hwI6AYRAeJzYwQkvbkad/gfzVETAJ9o6nLss=
Subject key identifier: F0:3F:31:60:E3:3F:C9:03:B9:87:CF:24:A2:7A:AE:BD:A2:6F:5F:4D
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 0198D5BBFA03D880597FE03C091FDA3376A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: fhxJkeCsaJ43KpmPGbVIMVwVLDpST8QFOtQiFtyKxXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:03:d8:80:59:7f:e0:3c:09:1f:da:33:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=f03f3160e33fc903b987cf24a27aaebda26f5f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:af:d0:cd:4e:89:66:d3:72:8f:79:7a:57:
9d:38:44:34:f3:70:3e:6d:b7:7c:73:ae:66:5d:7b:
40:fa:96:73:a9:4c:66:e7:d8:78:1c:7a:87:ba:3b:
4b:84:9c:14:b3:b9:a0:21:99:b2:38:81:10:db:6a:
1c:94:8d:5f:99:d1:e2:9f:9d:0a:13:e7:4b:51:14:
26:44:ee:47:ca:da:d1:e0:a9:71:32:87:cb:78:1d:
05:9a:ee:79:d1:8f:74:80:76:31:a8:a1:c4:ac:81:
8a:93:4b:82:63:14:e1:1b:58:5d:74:c5:d4:14:67:
03:8e:4b:77:90:a9:72:1d:ab:ed:3b:06:ca:7c:e5:
8b:3d:e9:0b:64:c4:77:b2:65:74:32:af:1f:f2:5a:
40:ea:42:a3:3d:7a:32:87:54:78:08:1e:1e:88:c8:
0e:d1:8e:8f:a1:72:28:c0:c0:2a:9a:84:8e:0b:2b:
0a:b3:ed:0a:f5:4a:62:a2:23:e9:50:97:e0:f1:41:
3f:d7:37:c4:95:e9:e6:5b:54:9f:87:71:c2:bf:60:
1a:00:f2:a1:01:5d:ba:ec:58:af:57:f9:00:c1:cb:
d2:2c:82:94:ab:b5:fd:15:42:d5:49:d9:14:06:1b:
ab:87:7f:3e:82:33:69:aa:7c:d6:1b:de:5d:2d:77:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:31:60:E3:3F:C9:03:B9:87:CF:24:A2:7A:AE:BD:A2:6F:5F:4D
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:bd:3f:50:13:8e:30:dc:c9:a2:e7:d1:94:1f:7b:dc:eb:
cb:af:fb:0e:07:06:af:1c:51:0f:48:b8:d0:5b:11:b0:eb:ae:
dc:ed:15:37:7a:53:ad:63:eb:84:a8:9e:bc:88:c5:1a:78:3a:
a7:fc:65:cd:22:2e:16:89:fe:02:8e:b5:f8:86:cc:83:66:7d:
84:84:1d:1d:9f:20:a4:02:ba:4b:16:e4:5e:04:17:bc:3f:ba:
b7:be:5f:d0:50:56:91:83:5e:2c:ca:2f:6d:b6:72:01:c9:21:
32:8b:7f:a5:05:a7:c2:e7:98:25:44:14:07:5e:fd:98:68:00:
2e:c1:df:08:86:7d:84:c6:fc:7c:52:4c:7d:04:ba:58:f9:cb:
72:00:08:6a:0f:71:66:db:28:5a:f2:c5:13:d3:8f:9c:e0:c4:
6e:fc:5b:88:46:1e:18:6c:d2:30:d1:af:99:4d:ad:7d:36:28:
ab:ad:4e:32:6a:01:d8:48:69:9a:a9:98:33:64:21:04:d7:00:
eb:30:69:20:fe:af:38:13:4c:c0:ab:76:5d:98:f3:e3:8f:c7:
ff:f6:a0:a2:5e:e3:0d:57:f3:4c:34:df:cd:99:b7:5f:6d:ed:
08:aa:00:20:e9:7c:94:47:16:b8:7f:ce:01:92:dd:58:ae:53:
df:93:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:21 2025 by rpki-client