Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: DcTUa6y76FEQs92RsLipzs6VhRqLAYf0pXk/1mBOR1E=
Subject key identifier: 35:57:4D:A4:E4:B0:7A:3A:BE:C4:7E:2D:ED:34:B0:A5:DE:FE:3B:B1
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 019896A512BC8D78A95D537A5A34E6AF934C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0DB6
Signing time: Mon 11 Aug 2025 01:00:57 +0000
Manifest this update: Mon 11 Aug 2025 01:00:57 +0000
Manifest next update: Tue 12 Aug 2025 01:00:57 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: JAyp/mrEUt5UmhkOxddUmazh161K7HTZF+/rHDO1St4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:12:bc:8d:78:a9:5d:53:7a:5a:34:e6:af:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Aug 11 01:00:57 2025 GMT
Not After : Aug 12 01:00:57 2025 GMT
Subject: CN=35574da4e4b07a3abec47e2ded34b0a5defe3bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:99:d1:04:af:1b:f7:e7:3e:ef:16:94:51:
c3:5a:84:19:12:72:11:c1:6b:b5:20:a4:0a:47:a5:
b5:86:39:d2:c2:90:36:eb:cb:03:95:d0:00:b9:c3:
32:da:7e:9c:94:e5:a8:e5:d5:cf:d8:d9:4a:bd:0c:
c1:2c:d4:62:4b:e7:22:9c:f5:49:3c:7e:e4:12:32:
ef:9c:7e:12:0e:81:e1:c5:2d:79:67:01:d6:a2:52:
83:32:e9:04:58:05:dd:d0:17:93:fb:78:5b:d1:95:
81:9b:2d:15:a9:4a:89:8f:c8:e5:5e:e7:69:2a:4c:
00:f0:21:c4:d7:55:6c:68:f8:60:37:01:1a:72:02:
b3:92:ea:a6:fd:69:5f:ff:da:60:de:4e:fe:17:85:
b5:fa:d4:a2:e3:e5:b0:2c:43:ce:1b:42:86:6c:3a:
d5:07:f1:27:61:26:ec:6f:8f:f1:e9:81:04:27:2f:
40:dc:37:5c:9c:52:a1:8d:a4:3d:28:75:35:da:66:
fc:53:75:dc:d3:13:39:6b:26:4b:96:0e:8a:cb:f2:
48:88:5f:19:ad:d4:da:13:62:3a:f0:ab:6c:7c:4b:
59:a0:c9:32:cb:1d:41:61:5e:21:c2:d5:f8:3f:1a:
0d:46:dc:a8:43:0d:3b:ed:c2:65:69:49:47:53:e9:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:4D:A4:E4:B0:7A:3A:BE:C4:7E:2D:ED:34:B0:A5:DE:FE:3B:B1
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:36:17:1e:b2:21:86:de:92:cb:6b:6d:db:46:de:fc:7e:
6f:0c:9c:1f:5f:76:41:38:66:64:5c:f6:c2:a7:dc:7d:f6:82:
40:cd:bf:0c:d6:4c:47:9e:09:6c:35:40:d5:53:6c:a1:c5:ee:
21:54:b5:9a:85:3f:64:1d:4a:8b:c5:19:21:d0:51:7e:44:9a:
32:2b:24:75:59:0d:7b:0f:b3:98:b1:be:6c:cc:ed:32:2d:09:
b5:03:af:07:bd:a8:ed:63:01:13:f3:04:53:67:de:90:76:ae:
fd:ea:7a:d7:9d:a7:8c:d8:be:c2:f6:da:d8:c3:b0:c2:c6:c9:
c9:fd:e5:c9:c2:da:1d:e3:15:56:05:ea:59:e6:73:bf:a5:66:
5a:a4:6c:a6:c0:93:be:51:1d:f0:a5:4b:64:77:ed:9d:b2:55:
92:06:b7:fd:9d:76:91:41:10:21:85:ba:53:84:eb:5c:44:5b:
86:dd:ad:69:25:a9:ab:8a:ad:0b:59:4d:98:5c:1e:56:5b:59:
bb:20:6c:22:c0:e3:98:f4:e9:68:aa:7d:0b:f3:63:b6:ea:d9:
24:21:53:8e:90:6e:c1:a6:14:15:c6:04:e2:22:5a:ab:57:d9:
9f:a4:df:f2:10:80:0a:39:f2:34:1f:1e:06:b2:e0:a6:54:5a:
68:06:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:18 2025 by rpki-client