Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: +5cAvvx8XRCLWQBYLw1BI/bmaOZNPpwI+G8IU4l4BHA=
Subject key identifier: 51:FC:17:2F:70:33:98:63:45:2A:DF:85:82:66:D2:08:4B:36:B5:37
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 0198A04D71E5C1669C047A4B828BA5297401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0E48
Signing time: Tue 12 Aug 2025 22:01:26 +0000
Manifest this update: Tue 12 Aug 2025 22:01:26 +0000
Manifest next update: Wed 13 Aug 2025 22:01:26 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: hOu4gF67Scm4U3PcwkyivBbIoUDmYSIkyoRw4sJO67k=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:71:e5:c1:66:9c:04:7a:4b:82:8b:a5:29:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Aug 12 22:01:26 2025 GMT
Not After : Aug 13 22:01:26 2025 GMT
Subject: CN=51fc172f70339863452adf858266d2084b36b537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:5f:70:34:33:0d:9e:2f:3a:88:e0:10:c3:
88:90:2b:52:84:fa:f4:ea:93:6b:ae:57:3d:c2:a9:
cb:4b:7d:f7:4a:8c:26:22:78:d0:d5:c3:77:e7:e7:
81:25:d3:40:a0:45:b0:ce:26:79:3c:d7:c8:ba:ee:
c5:b3:e9:a7:66:6c:cf:99:e3:00:fd:bb:16:22:e7:
5f:2b:df:f6:12:1c:dd:23:09:87:09:16:e3:e1:6d:
c2:51:bd:07:ff:80:48:83:47:97:dd:74:75:ad:05:
69:4f:10:91:37:be:0c:37:a5:3a:8f:48:2c:a1:58:
5e:8a:b7:1b:9f:59:c4:f6:94:2b:e7:26:17:08:59:
aa:4b:c0:8d:92:46:bb:df:c7:50:99:51:38:89:1a:
84:32:69:84:65:58:0e:98:03:95:b9:7c:17:fb:4e:
cb:91:03:32:d9:75:b9:f2:01:43:fa:59:06:b7:bd:
43:d3:f3:c9:e2:06:73:fc:cb:73:2f:fd:a7:67:b9:
d8:61:ad:66:44:bc:b1:d7:92:af:e0:63:ee:10:2b:
1c:54:cb:4b:04:fe:71:6c:87:ff:7b:f8:4f:5b:cc:
29:72:cd:26:45:67:2a:cc:02:cf:6e:49:49:ae:f2:
8f:92:06:df:d8:e3:48:7f:01:85:9a:79:59:67:37:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:17:2F:70:33:98:63:45:2A:DF:85:82:66:D2:08:4B:36:B5:37
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a3:e5:29:86:d9:7e:86:77:58:7b:b6:71:9b:64:17:b8:96:
ef:3c:8f:85:3a:ba:81:bb:86:5b:68:b5:dd:1e:27:1a:2a:dc:
d0:12:b6:90:a1:cb:fa:26:f4:1c:0d:04:bc:6e:83:ae:46:c2:
90:14:88:ee:94:27:21:7d:bc:d8:d9:5d:e1:7e:e2:2b:61:fb:
95:3b:d1:67:aa:84:3c:cb:02:8c:5f:b1:1a:5c:d6:11:d4:39:
b6:43:94:12:7e:6a:71:5c:88:14:5f:58:da:2d:56:a8:1b:a7:
e6:f9:7f:4b:9b:d9:b8:99:23:07:1d:02:1d:ed:1f:c0:12:39:
d2:78:0f:e9:e9:c6:fa:b1:f1:dc:0b:59:63:a0:e7:25:b1:4f:
68:3d:60:83:ca:f8:24:e0:ca:b1:54:9c:3f:3d:c8:01:15:1e:
4b:9c:00:03:1b:23:70:63:e8:23:e4:3b:7a:e0:0c:96:93:d2:
2f:44:b5:42:64:bc:39:d3:75:b9:84:e1:fa:04:3c:42:02:13:
c5:a8:82:12:1f:a5:bb:fa:88:b4:c2:bd:01:1c:de:ce:46:ac:
d9:21:c0:a8:98:87:9e:2f:59:8c:e7:1b:21:4f:0c:da:39:75:
99:ff:3b:c3:38:d9:39:ee:f4:33:b9:56:fe:6a:9f:d2:45:6c:
51:fd:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:37 2025 by rpki-client