Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json)
Hash identifier: VPnnYt5qNiKMvPhr4VGZ74UaneZ0BTZUfW4PHvnvxlw=
Subject key identifier: 4C:00:B2:85:CC:ED:6C:EE:A9:E3:4D:2F:E9:1B:A1:68:B7:84:13:5C
Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Certificate serial: 0198D5BBD1D26CC4A56AFCA4304A0D01EDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
Manifest number: 6F
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: cE0iRT4Pny5QBr48j+wdTcy2d4fOnTg/LtB50SAwvlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d1:d2:6c:c4:a5:6a:fc:a4:30:4a:0d:01:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=4c00b285cced6ceea9e34d2fe91ba168b784135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:d9:f6:ba:54:7f:90:3c:f9:0b:41:9d:4c:
5d:07:9f:ab:cd:73:18:10:b9:b0:a9:c9:6b:73:1d:
2e:70:e1:c7:e8:85:ce:b8:8e:40:8c:e7:15:76:cc:
81:06:fb:2d:d1:81:62:ba:7a:31:1c:ed:b3:bd:3f:
e6:92:f9:f9:d4:53:d0:97:79:e1:ad:cf:09:da:b2:
c0:50:37:2a:3d:fa:5d:c1:cf:50:3c:9e:1b:6a:ab:
c7:2e:ff:4c:cb:e6:6f:85:62:79:24:b5:6a:5b:77:
2e:05:30:ac:d0:e3:1b:c5:49:ce:9e:ac:c0:7b:d2:
35:0c:17:f9:a8:c0:10:43:33:80:7c:52:73:1d:b9:
4b:32:c1:45:8b:6d:66:26:53:6d:a3:d1:3c:df:da:
ba:91:6f:1c:f4:7a:62:14:56:40:03:c8:c0:0d:f0:
8f:0b:34:db:87:93:e5:28:7e:6f:f5:b2:4b:5d:0f:
1a:01:ed:62:8d:11:b1:c9:7d:d7:72:05:a0:da:eb:
c7:ce:a0:88:ab:4a:b9:cf:0b:3f:37:9e:8c:fb:82:
14:1a:5d:45:2f:30:1d:db:df:d6:b8:f0:97:f8:ff:
83:ad:05:09:6e:9d:5d:7a:29:16:53:21:f4:85:8a:
79:61:12:59:b3:bc:b9:cb:42:07:2d:6c:c5:5a:26:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:B2:85:CC:ED:6C:EE:A9:E3:4D:2F:E9:1B:A1:68:B7:84:13:5C
X509v3 Authority Key Identifier:
keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:d0:77:21:57:30:74:1c:90:62:c4:9b:9f:5f:0e:d6:97:
a5:54:69:41:49:d0:b8:d4:69:79:7b:35:54:1f:b7:c1:e9:e9:
f6:64:86:80:19:67:9a:7e:e9:ca:47:a8:dc:89:97:97:2a:6a:
21:ca:5d:57:89:17:c1:b2:ac:86:85:03:2a:4c:69:a3:2d:a7:
73:06:8a:bd:da:df:43:75:cd:10:eb:4e:75:83:10:46:55:ed:
bf:fc:f9:c9:0b:43:b5:9e:6c:5f:c3:ea:6b:90:33:53:1a:1f:
42:80:51:da:b5:25:69:ca:24:de:f8:1b:a1:f6:51:fa:50:9c:
30:85:7c:74:f9:d7:6e:b1:70:c8:8f:2f:2f:4e:95:47:81:94:
07:b9:3c:07:8f:58:c3:00:51:01:24:7e:b6:00:8f:31:11:5b:
15:1f:4c:06:e9:81:f3:e3:3e:bb:1d:f5:24:93:61:7f:c6:7b:
92:81:5a:b9:f4:fb:ff:d2:bd:64:d1:b3:4e:6c:9e:e9:7e:26:
eb:15:bf:85:b6:38:2a:f6:5f:ff:35:35:b1:0e:1e:58:5b:d0:
a9:ff:b3:eb:76:29:35:4c:32:b2:86:4e:e7:9e:8e:58:3d:c6:
38:23:2f:08:71:cd:f3:f2:06:c5:46:46:8e:ab:8c:da:ce:56:
f6:cb:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:06 2025 by rpki-client