Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: FaJBrNI7iTXZgMCY8zWinzLcfSk8hd3yd4wfYLOuD6k=
Subject key identifier: CF:43:7E:B1:BC:DC:A9:25:3E:0B:9F:04:DC:1D:88:AD:EC:A7:91:46
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 0198A0BAC7EC955DB12ED2D02ED30F839841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0E96
Signing time: Wed 13 Aug 2025 00:00:52 +0000
Manifest this update: Wed 13 Aug 2025 00:00:52 +0000
Manifest next update: Thu 14 Aug 2025 00:00:52 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: JVs5LUe4rEfaBE+KBCSDRKhQQUGTKi21t8EwVVzbcqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:c7:ec:95:5d:b1:2e:d2:d0:2e:d3:0f:83:98:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Aug 13 00:00:52 2025 GMT
Not After : Aug 14 00:00:52 2025 GMT
Subject: CN=cf437eb1bcdca9253e0b9f04dc1d88adeca79146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:94:4b:5c:8e:61:36:03:3e:a4:74:f5:fd:
09:18:96:66:33:5a:00:25:4f:29:b1:67:a8:2e:e3:
ff:58:1f:5b:03:cd:a2:4a:2e:1a:c4:ac:9b:37:b4:
9e:ea:3b:51:c2:8d:d7:3d:d5:4e:6b:72:9c:bf:5f:
b7:72:50:a2:2c:6c:fe:5d:70:ee:7e:93:55:ce:30:
78:b5:43:4d:7e:e7:b4:02:39:63:4c:ff:60:83:ee:
75:22:1b:6c:9b:3b:b6:fe:dc:3c:52:05:57:d5:2a:
47:7f:9b:70:e9:13:42:de:27:0f:5d:46:0a:33:2f:
e1:2d:7f:2d:95:f8:83:c2:46:ca:3e:81:21:fb:8c:
0d:71:d0:fb:df:aa:12:05:6f:80:8e:b1:fe:11:ed:
df:78:d8:fa:cc:5b:e8:b1:ab:27:84:29:33:d1:2d:
ac:62:32:2c:a8:3c:64:9b:86:53:34:0a:f8:f3:99:
a3:9d:1d:f4:9c:40:20:0f:98:b5:e2:05:59:e1:5d:
b0:00:e1:91:b2:2e:aa:33:54:87:9b:41:83:b1:e0:
86:5a:b6:30:8e:ec:59:03:75:91:c8:c6:d1:6b:e8:
5b:92:ed:8a:b3:21:86:56:ca:3f:ae:aa:bb:34:e6:
e6:9a:c6:24:c7:aa:87:8d:65:a5:20:43:62:6f:f8:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:7E:B1:BC:DC:A9:25:3E:0B:9F:04:DC:1D:88:AD:EC:A7:91:46
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:7e:d4:1c:e6:02:be:bd:00:16:59:d5:23:66:58:ee:d8:
6d:d4:af:37:74:b0:a0:e8:92:db:08:5e:c4:ef:79:99:d1:ec:
cf:45:ef:eb:b9:77:6c:1b:89:64:4f:8c:f5:60:37:8e:2c:c3:
82:bf:f6:9c:36:a4:01:cd:1f:6d:47:64:91:d1:77:d2:78:08:
73:c4:e0:ea:4b:28:08:d8:2c:d5:f0:20:45:69:5b:83:08:07:
50:f7:14:a1:16:b5:b1:a1:0c:42:75:8e:3f:7d:be:41:03:8b:
6c:e6:04:14:0c:1e:6a:02:fa:4c:6b:e7:f8:34:0e:33:f0:f9:
f1:9f:31:c2:da:46:61:45:39:6b:d4:91:2f:0f:85:53:de:51:
7a:8c:fe:00:84:87:40:3d:22:c9:8d:04:ef:1f:10:6d:7e:49:
7e:55:a1:36:d8:5c:de:a4:90:25:99:de:4b:d4:37:47:70:4c:
a8:4a:55:81:b5:d8:02:23:39:3a:f0:ad:3b:16:a2:f5:be:7f:
dd:c0:95:0a:bc:3d:7c:5a:d0:a2:d2:c7:ff:81:13:e2:88:94:
63:c5:48:87:de:17:f8:01:11:0d:bd:f4:79:20:38:89:d0:8e:
5d:9a:be:06:6f:6f:03:44:96:67:c2:dc:5e:3e:e6:a4:be:1c:
13:0b:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:27 2025 by rpki-client