Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: I1fXzYddacurFlaCvjETPI90zD/wgT/OHtwNQnFhcts=
Subject key identifier: 1E:F0:8C:FF:2C:EC:E4:29:52:C9:45:6A:78:CE:BE:4D:80:C8:E0:84
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 0198D73AEC38C7E867A6ED5BFD4576500DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 0919
Signing time: Sat 23 Aug 2025 14:00:19 +0000
Manifest this update: Sat 23 Aug 2025 14:00:19 +0000
Manifest next update: Sun 24 Aug 2025 14:00:19 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: PFXkzyHsNW+n6ZjxHjC+1tvGFH4lHYdHO0ZlLG+brbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ec:38:c7:e8:67:a6:ed:5b:fd:45:76:50:0d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Aug 23 14:00:19 2025 GMT
Not After : Aug 24 14:00:19 2025 GMT
Subject: CN=1ef08cff2cece42952c9456a78cebe4d80c8e084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:85:60:78:58:a5:ee:34:52:b4:08:42:c2:
4b:10:3f:68:dd:e0:c2:61:2d:49:b9:c4:91:3f:09:
40:4f:ad:ff:d9:94:f3:35:e9:03:02:e3:56:6f:8e:
c4:72:f2:75:e3:78:25:30:a3:23:ad:a1:b6:48:a3:
a8:93:df:80:b4:91:94:20:37:4f:5a:38:c6:37:3e:
df:2b:52:96:34:b3:de:94:4e:7d:f2:31:29:84:c1:
b1:7c:db:31:e1:67:ad:fb:75:08:f1:f9:bb:c9:8a:
ba:28:5d:42:62:9c:5a:c3:43:b5:31:68:30:61:b1:
75:0e:b3:11:ec:f0:ce:a5:f5:42:77:81:fc:ff:ec:
a4:35:72:66:47:df:5d:4c:11:cd:0c:b8:06:3e:74:
04:6e:0d:2d:8a:9d:2c:29:01:73:14:1c:4a:6b:55:
fb:09:f0:df:85:3e:b5:7e:01:94:61:1f:cb:8c:af:
b4:c4:1a:b8:ff:3b:83:62:57:39:8e:07:ca:61:2f:
37:e0:02:6d:17:af:da:96:4d:dc:c7:6f:54:f5:b9:
d6:73:bc:bd:36:92:d7:98:25:e8:ab:90:6a:c3:12:
62:ef:58:a5:2a:64:76:72:cf:aa:a9:57:9e:31:fe:
d3:cf:e6:e7:77:2c:34:98:3c:57:94:18:e3:0f:d7:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:8C:FF:2C:EC:E4:29:52:C9:45:6A:78:CE:BE:4D:80:C8:E0:84
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:72:95:e6:cc:9d:70:77:e8:c6:fd:3b:48:fe:f9:bb:a3:f2:
27:0c:56:1e:6a:43:f9:8b:c6:23:21:eb:9e:96:6a:96:b9:de:
e9:0e:ec:cf:4e:dd:0f:51:a7:af:e4:00:01:83:3f:05:f1:59:
1b:28:04:fe:3b:45:86:1b:e8:1d:34:dd:be:1f:79:4e:cb:bf:
b0:46:7b:7a:f0:8a:db:9e:a3:8d:f0:16:af:d1:84:fc:cf:97:
7f:99:3c:00:1f:b7:59:fb:f6:25:b0:ff:69:38:8c:66:fb:6c:
ea:93:32:c8:9f:21:e1:b9:e3:61:1d:ed:19:20:bd:ca:d5:35:
53:71:75:16:1d:16:7a:c8:38:84:9d:ec:fb:6c:7b:43:c5:7c:
93:09:80:85:13:0d:d2:34:b8:e8:e6:f7:10:8d:9b:0c:f2:a5:
49:df:83:ab:3b:70:8a:f6:a7:ad:38:3e:89:2d:14:5a:67:2f:
8c:34:ab:bf:ce:b0:74:32:3c:77:20:ec:40:c5:d5:ac:13:43:
cc:0e:19:dc:8d:71:76:09:fb:4e:17:67:b7:ca:59:35:18:f1:
69:14:ff:5e:ce:c9:8b:d6:80:75:81:3b:c6:9e:7c:e5:9b:3c:
69:fe:c3:32:9b:52:76:e2:ff:5c:b8:51:6e:b4:8a:e4:44:24:
f8:26:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:59:53 2025 by rpki-client