Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: NiaARcRMVMdD3GVu/APJISqdpU39pxVvsvQxDqlIQSY=
Subject key identifier: 36:D2:5C:3B:96:56:61:D0:05:31:1D:EB:76:24:F5:5F:48:11:D9:D7
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 01989F03729647A4E744A87E71C96FDD9B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 04F8
Signing time: Tue 12 Aug 2025 16:00:59 +0000
Manifest this update: Tue 12 Aug 2025 16:00:59 +0000
Manifest next update: Wed 13 Aug 2025 16:00:59 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: yFGIH/ANS/QcaZ0AD3ElDS5HL/eZasCL9t7YEKLd1hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:72:96:47:a4:e7:44:a8:7e:71:c9:6f:dd:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Aug 12 16:00:59 2025 GMT
Not After : Aug 13 16:00:59 2025 GMT
Subject: CN=36d25c3b965661d005311deb7624f55f4811d9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:eb:36:80:8a:67:f6:11:2e:c9:cb:92:bd:
e9:e0:f8:d9:8c:e3:d4:31:58:c7:81:38:3c:f5:3c:
38:33:05:dc:8d:4a:79:ee:3a:19:b9:3f:29:f8:18:
6e:74:fe:17:10:32:78:ba:e7:d7:e0:56:e2:84:18:
b2:6f:a0:8a:10:34:a3:10:21:c6:59:2b:58:49:dd:
fc:0b:3b:bd:02:78:60:80:dc:30:86:25:25:42:74:
10:fd:6f:4f:f1:f6:c4:b9:be:1e:d3:19:a8:a3:f4:
da:17:66:0f:73:8e:d1:e1:9d:53:f9:81:c6:11:57:
aa:08:f6:a3:b5:5b:39:04:38:cf:3e:6a:6b:10:57:
64:56:2d:ff:0d:ec:93:9b:5d:77:4d:ab:07:75:0b:
39:a4:bb:22:f9:2f:bd:f5:76:1b:58:13:c8:e4:03:
6d:ca:4f:11:4d:1d:07:47:1d:5e:61:52:2a:0c:19:
b7:23:cc:21:3a:dc:93:02:bb:6c:3a:60:9c:ff:75:
76:1f:76:3b:82:1d:69:f9:a4:52:14:d3:c0:5f:9a:
b3:ae:1b:7c:10:e8:05:a4:79:3c:5c:98:2c:19:81:
86:b4:1e:66:4d:ce:3e:79:1d:9b:b3:8f:ff:0f:fa:
54:d6:cf:68:83:0f:7e:59:75:24:3c:66:fb:46:60:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:5C:3B:96:56:61:D0:05:31:1D:EB:76:24:F5:5F:48:11:D9:D7
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d7:9b:44:3f:99:b5:0b:50:92:45:22:71:37:51:93:21:0b:
cf:cf:0a:ea:3c:c0:bb:4e:39:4e:30:7a:96:22:f4:19:54:b6:
9a:64:5e:2f:92:76:cd:31:87:cc:c3:3e:59:b2:fd:e6:29:b8:
a8:24:95:9c:57:1b:cd:25:04:1e:72:ba:27:81:98:a7:f0:c5:
45:17:46:77:d5:5e:0c:f0:f6:16:98:f9:ca:b6:dc:94:c0:d2:
1e:d5:8b:7b:7c:ab:54:6c:10:3f:62:1c:22:fc:63:60:1a:19:
e8:e8:88:9c:87:64:5a:1f:e5:25:70:48:1f:df:43:ca:c2:4b:
59:0d:f0:ea:8b:78:91:a2:9f:b6:5a:15:34:8a:91:7f:09:9b:
3c:63:47:ce:28:38:58:f7:25:72:ea:a2:93:30:62:64:2f:55:
01:08:b9:70:0b:4a:2e:b3:e5:07:90:36:43:bc:22:f3:96:33:
3e:5b:96:c5:1a:27:0e:84:63:7c:30:0c:40:be:26:79:6f:8a:
2d:0a:4a:7b:c6:dc:92:5c:a0:c0:60:bb:ce:29:5c:f5:5c:e6:
23:cf:28:f2:11:c7:1c:70:48:e4:0c:cf:4a:a8:99:92:c2:17:
7b:28:63:c0:0e:97:57:e2:23:67:05:ad:39:68:cf:c2:50:ff:
2a:56:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:41 2025 by rpki-client