Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: IK2sI0wFdLB8kBXaqhHN4dw+aG26yqn5f6B/0sxwJgI=
Subject key identifier: 81:06:44:E5:C1:45:03:63:6E:95:3E:E1:84:CB:67:C9:2D:B2:97:EB
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 0198D54E34F36DDF3A08E43B3D7804175DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 03F8
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: YIcS1YK8CLBZnnp8vhPsq2DYPjS5YjZfdF+C2vuffSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:34:f3:6d:df:3a:08:e4:3b:3d:78:04:17:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=810644e5c14503636e953ee184cb67c92db297eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:01:6e:f5:26:ae:66:9b:4e:88:69:c6:48:
54:22:d4:2c:11:b2:19:ca:0e:42:ff:d0:14:00:b2:
40:ce:f5:f0:dd:6d:91:b1:9a:2d:14:4e:18:5b:9d:
18:fe:56:71:c2:c2:86:f6:3d:43:17:c9:33:1a:8a:
58:ac:56:13:19:c3:86:56:18:af:a1:c2:39:ff:5d:
40:e9:0a:92:1c:d8:7b:6e:63:8f:5f:a3:2d:2c:55:
b5:79:62:fc:9f:bb:25:f7:44:5e:52:17:0d:0c:b9:
5e:2c:2b:4c:cb:3c:75:8d:32:80:b4:c7:5e:17:38:
01:e0:0d:14:a2:d8:7b:c7:d2:9e:99:69:c9:07:6d:
23:66:88:8e:6b:50:6d:7f:ff:76:25:79:65:49:1d:
58:45:99:8e:92:fc:ff:cc:fc:37:a4:84:34:b3:fa:
52:c2:dd:f2:2d:ef:76:42:69:b7:e3:81:ea:e6:c6:
35:d9:c6:2d:0d:04:80:02:53:02:ae:80:72:2f:f8:
ec:7c:ae:e6:fc:da:e0:0e:03:b0:0a:38:12:a1:56:
3a:76:03:a5:ab:02:ce:a5:6c:29:81:b4:0f:d4:4e:
8f:94:d9:9d:f6:de:81:3a:f5:67:0b:a4:2e:bd:fa:
a7:7c:e3:54:1f:35:14:17:17:12:0c:19:a0:09:99:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:44:E5:C1:45:03:63:6E:95:3E:E1:84:CB:67:C9:2D:B2:97:EB
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:f2:f8:06:e1:7a:69:f4:34:56:c8:49:e3:3b:98:aa:4a:
bd:3a:00:6f:5e:19:e1:9a:b0:a4:c6:d6:b9:67:d2:6e:87:5f:
00:c2:b5:a9:69:d7:d0:ac:5e:21:32:05:c8:22:26:eb:cb:96:
f1:78:87:d3:bc:6d:da:8b:6f:08:35:0f:8d:59:e9:f7:22:ff:
53:c1:ea:aa:9c:55:59:7f:2e:89:c0:eb:13:98:14:3e:87:79:
9d:f0:88:31:f6:9d:6f:c5:10:8b:34:32:fb:d3:a9:ac:49:e9:
1d:d3:ad:31:0b:8a:20:ab:d9:87:23:7e:4b:30:a9:94:b6:e8:
74:09:c9:4e:7e:59:7a:28:21:c0:95:8c:c4:96:ee:54:99:c4:
27:9d:72:ee:2b:12:ce:6f:81:31:71:38:52:35:e2:17:eb:b7:
b9:6a:7b:29:d2:6d:69:c2:66:48:4d:8d:52:68:fc:f8:a3:a6:
c7:02:75:18:64:31:5a:18:18:b3:f1:0c:43:fc:d0:f4:89:81:
e3:d4:b5:ea:e4:f5:c3:73:e1:36:9f:46:e3:c1:4e:93:0c:b3:
8a:2b:0d:34:2e:d3:02:04:41:76:c6:69:0a:90:9e:c1:c1:dc:
97:60:b1:0b:e7:36:67:9f:62:8b:97:c4:09:26:b5:08:d3:fd:
82:12:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:13 2025 by rpki-client