Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: KMO5i4Hq8CIliTjTuBdZC9Ww6MCo4+cHN6U0xq51f5w=
Subject key identifier: 5E:CE:18:17:73:B9:75:CA:A7:60:AB:9E:1A:A7:78:22:1F:A0:3F:41
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 01988E4654DEB6F9F55B8D3CF98865719C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 0235
Signing time: Sat 09 Aug 2025 10:00:30 +0000
Manifest this update: Sat 09 Aug 2025 10:00:30 +0000
Manifest next update: Sun 10 Aug 2025 10:00:30 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: J6IUEkpz0iXYkij4fYlAVXyd2tgPRI5kqABd94HWn50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:54:de:b6:f9:f5:5b:8d:3c:f9:88:65:71:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Aug 9 10:00:30 2025 GMT
Not After : Aug 10 10:00:30 2025 GMT
Subject: CN=5ece181773b975caa760ab9e1aa778221fa03f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:c2:4d:03:ae:00:64:bb:3b:fc:31:c1:f1:
92:67:6b:11:30:a1:f8:3a:13:45:17:30:a6:4a:c6:
b9:a9:bb:83:06:22:07:bb:f5:80:d0:27:3f:18:20:
91:8c:78:1c:d9:5e:30:c2:eb:21:1a:4e:d2:d6:f0:
cf:95:3c:bd:fa:f8:bb:1d:f8:02:31:72:03:f6:4d:
a1:55:64:a6:07:4e:d6:23:59:f0:1e:40:fb:b0:51:
e3:92:f7:73:48:a3:82:84:1c:5e:8b:70:f0:11:e8:
9b:26:e8:93:9f:c2:36:32:23:8f:53:97:38:b6:09:
a5:4c:74:bf:9f:d3:1e:b5:13:e0:b4:78:cd:73:d3:
7e:15:90:32:7c:7f:89:f9:b6:d0:44:0c:06:31:eb:
c5:c0:2b:42:54:93:3c:77:0a:72:fd:af:bb:83:d3:
7d:e6:39:99:11:57:03:47:fa:22:1c:0c:9e:bf:81:
d4:e8:ad:b4:01:2c:f4:2c:69:d2:2a:54:71:83:ea:
34:5b:3a:17:e2:d2:6c:f0:6d:dc:0b:fb:d2:df:9f:
6f:7c:7c:f6:1e:29:a6:93:47:3d:7b:60:7e:e9:16:
60:5e:62:a5:e1:ef:e2:23:8f:b0:f6:bb:3f:63:6e:
6b:5c:c7:b6:93:63:ef:25:99:83:c1:78:b4:e9:97:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:18:17:73:B9:75:CA:A7:60:AB:9E:1A:A7:78:22:1F:A0:3F:41
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:4e:a3:0a:3e:96:14:1d:51:3a:41:a9:4f:9e:5a:44:80:
de:3f:fe:bc:c0:7d:ec:94:49:66:dc:98:7e:e7:83:77:25:b8:
37:ad:e6:54:7f:ec:d6:fb:11:df:01:71:1c:92:f5:6c:89:85:
58:e0:9d:fd:60:d9:df:7b:eb:d3:e8:14:a8:7b:05:a7:a7:d7:
7c:7e:04:11:28:a7:01:59:de:43:66:e3:d9:20:1c:df:33:ea:
5c:26:e8:09:e7:34:a8:ca:a1:ef:ea:b8:82:a6:d9:77:b1:20:
83:6a:3b:9e:b3:28:4e:57:61:31:c7:05:86:e8:3f:2d:ae:09:
11:27:9a:ad:ce:4d:da:8c:e5:1e:06:ed:b4:95:d5:2e:c1:a3:
96:27:14:5c:13:2b:68:58:cf:6b:85:ed:32:40:2c:39:bc:a3:
54:f2:a4:29:ed:fd:b0:ea:12:29:6c:28:30:cd:66:93:38:0f:
0c:a1:3a:22:db:0c:3d:96:ba:de:5a:0e:c2:d6:88:04:80:46:
f0:7a:8e:d7:3b:e5:77:94:4a:5e:d6:3d:f4:62:75:3a:cd:bd:
81:2b:3b:e1:c3:ff:d9:a0:ce:5e:98:d9:d8:49:d8:84:9e:c5:
41:39:b0:a4:3f:06:1a:74:6a:de:e5:d2:e1:5b:65:4d:d0:b8:
97:7c:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:00 2025 by rpki-client