Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: 7vXBAemSAZzeB1XhR0qgoLqsuyoPLZ8VSVv65cUqQjQ=
Subject key identifier: 22:75:E1:D2:C1:02:6D:06:F1:F3:35:24:55:B0:47:48:D3:31:35:9D
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 01988DD8DE8C339D1D0BED90622FC46D0E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0403
Signing time: Sat 09 Aug 2025 08:00:56 +0000
Manifest this update: Sat 09 Aug 2025 08:00:56 +0000
Manifest next update: Sun 10 Aug 2025 08:00:56 +0000
Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: +Bl4QvGBhedtTgUS+GuITAaqkZTfv3qOe0JQr8FgSX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:de:8c:33:9d:1d:0b:ed:90:62:2f:c4:6d:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Aug 9 08:00:56 2025 GMT
Not After : Aug 10 08:00:56 2025 GMT
Subject: CN=2275e1d2c1026d06f1f3352455b04748d331359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:89:8a:27:ae:81:88:7a:ca:24:ad:24:5f:
22:31:89:1d:85:17:1b:19:41:66:5e:b9:7f:a1:04:
ad:3b:41:dc:77:ee:4c:4b:2a:9c:50:3c:a1:92:fc:
5e:7e:60:5c:03:b6:ed:47:d2:bd:5a:88:ca:9b:f2:
a0:3d:9e:fd:36:5d:19:03:4b:7b:12:5d:d8:0e:9c:
c3:5d:b3:8a:8d:5c:2c:c9:ec:5d:b4:7c:05:e8:3b:
27:2a:28:17:ec:0b:ad:13:90:d1:06:f7:b6:b3:52:
77:3f:6d:a3:1a:d6:cd:19:0a:2f:7e:21:b4:3e:b8:
ac:bc:76:e6:9e:f2:2d:99:d3:24:bf:f6:c7:c6:d6:
3f:16:5e:42:8c:9a:43:8c:66:58:e9:8b:86:db:d3:
9a:c9:15:de:b3:d6:e8:5d:0d:1d:60:0a:9a:5e:d7:
f9:78:43:1b:4f:6a:82:18:22:13:4e:cc:48:74:4d:
42:24:60:7c:9a:d0:e9:09:be:ca:f0:c1:61:f2:6c:
5e:df:1c:70:36:c7:b6:c6:8c:ef:34:d9:9f:da:70:
fd:cd:65:bf:64:bd:6f:a8:d8:05:5e:dd:6b:91:eb:
78:c5:79:0c:33:e1:8c:29:cb:cb:58:c9:3c:3e:24:
7e:10:4b:bd:2b:a3:b4:7c:9e:f0:e7:9d:b8:06:33:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:E1:D2:C1:02:6D:06:F1:F3:35:24:55:B0:47:48:D3:31:35:9D
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9e:b1:5a:80:d9:3c:bf:d0:06:d6:27:3a:3e:07:b1:f1:0f:
85:7f:b0:59:b4:7a:af:6c:d4:38:d0:db:f6:24:3f:d6:c2:54:
fa:2b:dd:b9:ce:01:50:ff:47:d4:06:e7:fc:cf:d0:64:21:1d:
b2:13:f2:f7:65:a0:f6:32:d4:24:ff:55:35:a2:74:dd:f7:18:
44:cd:2e:b3:7e:93:85:09:82:47:0f:db:d4:10:7e:ff:73:85:
c1:83:bf:42:73:b2:eb:be:2d:95:ff:7b:65:43:1a:68:58:85:
5d:f9:e1:80:9a:be:51:8c:2e:76:7a:48:bd:6b:51:46:30:6a:
9e:70:16:54:cd:7c:86:6f:46:bd:4e:9a:88:ff:6d:5c:3d:65:
90:b1:c7:36:99:fd:78:21:c9:8d:b9:88:7e:6c:45:8e:33:c1:
04:87:9f:a1:fb:52:7e:49:1f:d4:ae:59:61:0b:0d:83:04:f0:
2d:28:b6:f7:7b:02:45:57:f0:84:f5:e0:ed:f3:8a:39:0d:ba:
5b:50:8b:40:f5:b5:df:27:76:7a:4b:77:d9:97:26:06:3f:48:
68:09:f3:90:17:8a:0d:ac:9a:b4:56:41:3a:95:d6:fe:8e:e1:
c9:54:52:30:18:dc:04:bc:5b:d2:62:74:1d:ec:a3:73:d2:f3:
66:6a:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:58 2025 by rpki-client