Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: pXfaN9gpXZ2gTiDoesfeL5bGHuaoq7NCcm2PJ5oPZGA=
Subject key identifier: 85:D8:4F:64:D0:F1:A1:1B:2B:C8:7C:C5:88:E8:50:80:1B:B0:A7:FC
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 0198D6612E22B173FF35EBE7B1602F1B57B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 011B
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: A/SBQW/CPVK2iDntcNG6OS94saP1sqzeHyV+d3xNRDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:22:b1:73:ff:35:eb:e7:b1:60:2f:1b:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=85d84f64d0f1a11b2bc87cc588e850801bb0a7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:33:32:ab:03:ae:5d:4a:94:f0:a7:19:4c:
98:79:9d:60:8f:7d:36:87:cb:ce:3c:82:33:c9:3b:
6f:2f:bb:4f:80:8b:cd:ef:29:a4:7e:cc:c6:28:a4:
26:b3:4e:49:04:41:e8:a5:a3:e8:62:32:74:cc:b6:
a4:3f:73:1d:18:0d:55:af:77:f5:da:2c:8c:2e:80:
22:39:9e:fa:08:18:86:b8:24:a3:e1:43:f1:09:d6:
22:25:36:47:e3:e1:9f:56:14:b4:83:97:0c:2e:2f:
3d:d1:bb:8a:af:bd:0e:c9:0d:fc:b6:d4:e1:6e:fe:
71:64:a1:8d:71:39:a5:77:3e:a5:94:9f:bb:46:c6:
7e:7b:7f:ea:a9:d7:01:63:60:1f:98:b7:b0:bf:2e:
bd:90:41:8c:3d:3f:1d:e4:03:e8:f4:72:97:e3:59:
c7:fc:f6:7e:19:31:ab:8d:e3:f9:f6:5e:d7:ef:46:
0f:4e:3b:d4:4f:0c:2f:30:0a:85:9e:71:1e:56:13:
2c:3c:fd:1d:bb:ff:69:ec:8d:9d:79:f9:ce:d7:db:
91:ea:35:04:a8:0e:72:16:41:89:fd:f1:bc:ff:d7:
31:29:83:bf:84:17:5b:cc:00:2e:d0:47:0d:89:ef:
0d:79:19:31:49:8b:ac:3c:3e:e5:e1:bb:80:7d:36:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:4F:64:D0:F1:A1:1B:2B:C8:7C:C5:88:E8:50:80:1B:B0:A7:FC
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a3:be:52:84:41:67:ad:ff:20:7c:e5:a6:dd:45:19:88:ae:
71:b2:61:ae:25:2b:d4:38:77:68:46:4f:d5:48:21:cf:7a:0a:
2a:30:2b:5f:34:ab:81:0c:e8:ee:81:66:19:43:12:33:89:d3:
99:13:f6:95:c5:a4:43:f7:41:64:c8:e4:60:df:c8:91:c3:01:
0a:d5:a4:e5:f7:c3:76:5b:ed:72:64:57:66:a4:35:40:62:ea:
47:ba:94:2c:20:08:5f:ad:89:b1:54:26:b7:b4:9b:37:3f:5f:
f6:27:8e:dc:67:37:07:5c:42:c2:c1:7e:fc:5d:62:87:62:b3:
70:fa:95:e5:56:f8:27:84:c1:8d:da:a4:a1:3a:f0:31:82:cf:
ae:8c:6f:4f:bd:dd:fe:a6:f1:12:d6:d3:76:a9:ef:3d:ab:95:
b1:e1:99:ba:57:46:b3:16:f4:89:ef:a2:ac:40:00:c8:2e:22:
b9:a0:22:b4:44:29:75:dd:d5:39:81:0a:0a:d6:3c:46:ce:ce:
db:b7:67:13:85:8e:92:83:9a:13:4e:17:5d:f8:d6:c8:72:91:
c4:57:99:21:82:99:f2:a2:60:c4:ef:b2:7d:c1:07:87:69:5c:
d4:4c:c8:50:2e:76:67:32:7d:b9:e6:46:78:ae:73:c1:04:34:
f7:c0:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:10 2025 by rpki-client