Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: gyAOhhdvbLzhlyxnyXmDAFcIYTwjCh/f9DDSTjEUGF8=
Subject key identifier: B7:1D:FB:9F:D3:FA:99:01:84:54:2C:AD:60:67:2E:3E:81:BC:0E:D1
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 0198D65F0AAE79A109699B710B4F0E04936D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: bFTukNQ4r8W5sepY/vv9fP7+wW68FlvQ09oYqywWlWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:ae:79:a1:09:69:9b:71:0b:4f:0e:04:93:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=b71dfb9fd3fa990184542cad60672e3e81bc0ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:82:a4:28:15:c9:48:59:db:81:b2:67:ba:
02:9b:3d:f9:7b:71:96:ed:96:6d:a4:13:46:f7:24:
9f:a0:0c:2d:b5:c1:dc:be:6b:e8:05:49:00:c8:92:
84:92:8e:a6:fa:62:e7:98:30:13:20:4a:c7:3e:d9:
d4:98:fb:56:d5:94:40:c4:61:23:1b:99:4f:4c:c7:
28:b4:83:41:7d:57:49:af:69:23:08:66:36:06:31:
2b:9d:1c:66:6b:90:b1:9a:6d:9d:56:19:bd:c1:3c:
e3:55:ea:38:85:8a:c8:e1:b5:a0:06:3c:81:b2:59:
78:d5:ae:89:c8:2c:b4:e7:e6:bf:ad:40:40:c7:1a:
6b:78:69:b9:e3:a9:9b:c3:0e:c1:bd:81:37:9b:78:
2b:fd:6e:85:08:b5:3b:c3:69:d2:3a:66:7c:de:6e:
ce:f0:b2:96:98:07:e0:e6:13:f0:a6:d5:e7:0f:e9:
e6:f0:fa:b9:70:d4:f4:f6:94:c4:99:f8:73:53:2e:
9d:13:54:d5:ca:eb:8f:95:e7:db:5e:1e:c4:e2:71:
ee:08:31:68:16:fe:d4:80:a1:c9:3b:d8:72:74:19:
f9:dd:84:9c:48:93:00:58:0c:8a:1a:f2:28:56:73:
a5:f1:96:db:a4:85:af:e7:0a:b2:21:5b:4d:83:b0:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:FB:9F:D3:FA:99:01:84:54:2C:AD:60:67:2E:3E:81:BC:0E:D1
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:f9:e4:57:cc:ab:e9:d0:99:93:98:c4:7d:b1:5d:8f:5d:
e4:f0:4e:1a:9e:59:b9:2b:37:91:2a:af:ed:ab:7f:4f:e3:51:
8e:1b:c3:26:98:d8:20:bf:95:d1:ce:d9:ca:51:30:36:c8:c3:
6a:96:b7:ed:58:0f:a0:0b:12:10:7c:37:ca:5d:b8:0f:c7:08:
9b:69:7c:66:2b:82:58:67:c7:8a:f6:94:26:0d:42:93:68:dc:
93:53:27:69:55:76:fa:d7:a9:ba:2a:40:a8:87:48:6c:c9:02:
11:61:00:1f:9f:0c:ba:92:7e:5d:97:81:7a:19:52:88:81:08:
63:eb:d5:58:49:58:df:f9:ad:75:8e:d1:ec:13:94:91:b2:7e:
ba:45:a1:8a:13:ec:ed:ec:61:0f:8f:7e:d7:18:7b:ce:dd:7f:
1e:a5:9f:a1:48:bb:27:f4:d4:d7:ed:c3:17:52:73:52:13:fe:
a8:6f:22:cc:4f:54:ce:37:9d:2a:33:f4:ac:a5:16:ea:f0:87:
5b:b5:7f:f4:a5:c2:b3:fa:9f:34:3e:04:6a:97:f9:c6:4d:ba:
cc:86:b9:be:8a:00:3a:58:bc:99:18:ee:2a:f0:3b:c3:91:69:
27:95:48:85:27:c4:96:c3:fd:c3:6f:5e:80:9b:c2:8a:7c:b3:
2d:b0:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:06 2025 by rpki-client