Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: fA1pEkDOpsLVd1O+NGYVunZxBNX2dPDaM2Z/5jejdJM=
Subject key identifier: D9:56:35:4E:5F:B5:56:AA:44:7E:0A:99:2D:D5:F5:BA:1F:6B:C2:14
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 0198D4DFD48254FBD37D4DABB90E9C68852E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0AD7
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: f4oIJcgIbqV1J1H3bMHIbnL0UFbVSJd8/syMUsbvJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d4:82:54:fb:d3:7d:4d:ab:b9:0e:9c:68:85:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=d956354e5fb556aa447e0a992dd5f5ba1f6bc214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:92:44:a4:27:83:f0:bb:3e:8f:e5:5a:ff:
9d:47:38:2b:90:ad:c5:d8:62:88:13:af:41:e2:bb:
e6:de:71:6f:86:ae:14:58:e0:df:be:52:b6:dd:aa:
c3:f9:dd:ca:b5:12:e5:3a:2d:54:ba:7f:5f:f9:0c:
5b:16:dd:fc:38:1f:c7:89:58:00:46:b2:06:cb:83:
a0:df:4c:e1:12:0e:3e:ca:16:9f:8b:3e:06:ae:76:
02:a3:e7:9d:3f:92:e4:49:c0:a5:55:3f:b2:79:e1:
a2:40:71:c7:2b:a1:d4:c9:a3:b1:da:ce:93:c8:9a:
23:a1:1d:94:e8:ba:c3:91:c1:a8:13:e2:8e:3d:cf:
b2:23:24:a6:1b:44:b9:45:3b:1d:c4:cf:18:d1:f4:
f9:f7:e7:6a:b1:a5:6c:01:eb:d4:ff:9d:cb:c8:04:
4e:ff:5a:9b:4d:95:09:71:ce:58:ca:f2:63:73:f2:
c2:cd:2e:fa:4c:a8:47:e4:50:08:45:e7:86:97:14:
2f:9e:c0:8f:ca:de:16:79:2a:ac:1d:68:c4:2b:8f:
56:03:72:e8:d2:06:ed:cf:f8:8b:85:3d:5c:1d:98:
af:f8:af:89:84:2f:85:6f:30:0b:49:33:7e:0e:b0:
1d:74:b5:09:9a:4e:23:9f:71:b5:60:01:99:c0:dc:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:35:4E:5F:B5:56:AA:44:7E:0A:99:2D:D5:F5:BA:1F:6B:C2:14
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:08:18:a6:95:e6:ae:5f:75:0d:4f:26:b2:0e:0f:c6:03:22:
37:d4:61:97:6e:15:3a:4e:03:ff:cf:26:ae:eb:c1:dd:00:11:
57:05:69:9d:4e:04:94:4a:64:64:e7:c2:7a:8c:00:c5:f2:54:
79:c8:35:13:67:5d:82:bd:7a:7e:1f:0d:78:36:55:13:93:c3:
29:5d:cf:83:4a:62:6e:15:83:ee:e4:aa:85:16:42:a5:81:0e:
0b:38:39:2f:4d:91:d2:aa:98:46:b9:42:b3:07:53:c4:8d:df:
6c:ad:5e:65:d9:27:ac:f4:bc:5b:2b:72:f0:f7:19:28:cd:46:
c6:2f:af:e5:62:39:8f:ea:65:88:6d:a7:ff:e1:5f:3a:93:12:
b9:07:8c:27:0f:96:fe:22:4f:df:5e:bb:8a:d5:77:53:a4:53:
31:4e:33:b2:f2:2e:6d:a4:2e:c0:2f:f5:82:6d:f2:dc:f6:84:
42:48:85:5c:de:73:40:3b:05:13:4f:30:8b:50:e6:70:c7:ce:
81:da:41:b3:9c:65:5b:49:03:0c:60:d9:21:46:b7:e1:23:3f:
8e:eb:9a:58:a7:0e:ca:82:dc:92:e6:97:6b:ab:07:a3:6b:2e:
5c:5e:6c:dc:3a:f4:06:24:67:a9:e8:4a:fd:fa:e9:e4:e2:98:
59:f7:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:59 2025 by rpki-client