Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: jo6L0R4nOXM/97eYRwdVX0SPF2LQExR6mYPsbZT1kJU=
Subject key identifier: 37:60:C1:6A:86:8A:85:C0:AF:46:D5:12:71:BA:76:84:6A:C2:5E:98
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 01989F3A50404A94E68B955B390CF706CA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 057C
Signing time: Tue 12 Aug 2025 17:00:55 +0000
Manifest this update: Tue 12 Aug 2025 17:00:55 +0000
Manifest next update: Wed 13 Aug 2025 17:00:55 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: FC9wmpGe+CHHj5paAhCX1GgYWtYwSZLITBuW6rvxZTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:50:40:4a:94:e6:8b:95:5b:39:0c:f7:06:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Aug 12 17:00:55 2025 GMT
Not After : Aug 13 17:00:55 2025 GMT
Subject: CN=3760c16a868a85c0af46d51271ba76846ac25e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:df:6f:f1:24:cd:34:6c:d0:0d:83:fc:b4:
5a:bc:e4:b0:95:59:ba:4c:8b:dd:7a:64:98:4f:f0:
c2:f4:25:e8:15:2e:58:67:d9:6c:97:a6:3f:87:62:
35:2f:a3:23:5b:2a:3a:50:99:f1:68:e2:48:40:a7:
de:7e:ba:d3:ef:e0:f5:2e:ba:8c:f8:0a:d4:bc:56:
b6:46:c3:f1:01:16:18:7d:32:c1:bd:80:99:4f:43:
c9:2e:86:64:07:4a:d5:fd:9b:95:d6:5f:84:7a:07:
cc:4c:93:cf:ac:28:d0:6d:30:0d:15:1f:90:a6:c1:
9f:98:89:33:b8:c5:4b:84:35:25:ca:f0:bd:42:ae:
2b:77:df:d7:61:d2:5f:07:86:16:1e:f4:27:1a:44:
1a:e6:38:73:d5:ee:d7:c0:f5:48:ff:27:1c:45:54:
de:36:3f:8f:04:04:1c:11:53:9b:63:ec:09:61:83:
8b:88:0c:1f:5a:37:21:4e:a4:24:77:99:69:c5:69:
ce:f7:d9:25:36:c0:b1:f4:21:35:04:51:37:75:ae:
2d:c6:ae:29:9d:d3:90:2e:1e:fb:7c:e3:9f:e4:24:
50:7c:88:c9:af:79:bd:e4:b0:b4:65:b4:7f:f7:3a:
81:fa:f8:5b:24:fc:d3:44:e8:fa:83:04:18:9f:0c:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:C1:6A:86:8A:85:C0:AF:46:D5:12:71:BA:76:84:6A:C2:5E:98
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:54:f8:4c:c9:86:60:9e:50:2b:0b:d3:c6:c1:4e:ff:ea:92:
59:cb:c8:35:a9:e2:56:e9:e3:f3:85:6b:66:e2:21:8f:14:c6:
eb:cf:19:50:50:18:e6:f9:de:a9:fe:d5:5f:57:0f:5f:57:ab:
1e:6e:cf:2c:9c:d9:e5:52:6c:1a:e7:28:36:09:53:05:3e:82:
79:d5:b6:14:53:21:86:f5:a4:f4:6c:5a:b6:c3:e3:30:bd:5f:
eb:b8:da:53:38:3f:7e:bd:f5:70:69:07:4c:3a:2b:92:2c:f1:
7b:1a:33:e4:62:36:d5:b5:54:1d:ad:c9:29:70:ec:fb:c6:c3:
4f:64:31:36:ef:11:f7:c3:b3:69:e7:f1:29:de:9b:f5:66:c3:
af:2d:7b:a8:28:ee:61:47:a8:c1:2b:e6:7e:4e:0e:07:c2:46:
67:7f:c0:07:ee:df:f4:86:14:91:9d:37:8b:e8:25:b4:08:29:
a3:76:72:7e:0d:7c:fe:dd:3a:ba:62:49:4b:98:82:27:1d:fc:
80:d7:35:6e:dc:74:2b:30:b9:02:0c:d0:54:e6:a3:71:30:52:
f9:33:9f:3e:65:d5:2d:43:52:73:b8:71:79:94:9a:f1:d0:b5:
17:5f:66:c3:bb:62:09:87:d1:32:ce:e1:4c:2e:55:56:6b:f6:
c1:2a:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:38 2025 by rpki-client