
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File: F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier: Z3ORg85MNkxUZq1IOF+qBcBIpk/FUujruEyAX18Dzbc=
Subject key identifier: 64:7E:3C:BF:B7:31:B6:7C:41:B1:15:FA:26:56:DA:6C:04:3B:B5:25
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer: /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial: 01987CE51357B8EFC7C4B178523ED6EEE369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number: 34
Signing time: Wed 06 Aug 2025 01:00:44 +0000
Manifest this update: Wed 06 Aug 2025 01:00:44 +0000
Manifest next update: Thu 07 Aug 2025 01:00:44 +0000
Files and hashes: 1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: sSbuulB0qiZFC1GpQIRyPljmtkqhjph5z4jQ5qHTow4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:13:57:b8:ef:c7:c4:b1:78:52:3e:d6:ee:e3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Validity
Not Before: Aug 6 01:00:44 2025 GMT
Not After : Aug 7 01:00:44 2025 GMT
Subject: CN=647e3cbfb731b67c41b115fa2656da6c043bb525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:c4:a0:f9:82:f7:fa:23:7b:90:19:2a:25:
a5:9e:b2:e7:ba:90:62:c9:58:b2:9c:3a:57:78:a3:
c0:39:54:53:c2:d0:99:e4:2f:54:35:98:1d:c1:a2:
69:6b:ef:9b:07:2e:f5:4e:f2:31:d3:04:b7:c8:36:
af:30:35:ab:cb:a5:a4:51:4e:dd:e3:b7:71:b6:b1:
67:d6:2c:35:1f:ef:a7:81:08:15:0c:39:f8:d1:ab:
ec:9b:8d:83:cf:c3:a3:dd:b3:90:4e:77:0a:0e:39:
2f:da:d0:97:2b:21:4f:ca:b3:a1:19:6d:01:5c:ea:
00:b5:90:52:4e:c3:a6:c2:bf:a5:c4:69:a5:ee:88:
89:38:26:2e:48:97:14:42:8e:d5:86:4c:db:39:85:
04:22:fe:fd:bc:65:6e:91:69:8b:de:44:49:c8:20:
86:c9:1f:6e:b3:7e:74:f1:59:6b:6b:8b:5c:3e:7c:
72:70:f2:8d:d3:30:e3:2f:59:01:5d:3c:2d:60:f2:
da:53:07:28:93:c3:47:9c:11:b2:c5:0f:66:63:9d:
1f:7c:e6:81:c7:8d:ee:20:49:e5:4f:5a:c2:4f:0a:
2c:e1:2f:fd:3b:59:95:7f:07:b1:44:85:36:bd:db:
82:25:20:65:64:c5:76:e5:00:72:a4:e9:23:24:77:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:3C:BF:B7:31:B6:7C:41:B1:15:FA:26:56:DA:6C:04:3B:B5:25
X509v3 Authority Key Identifier:
keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:20:6d:57:7b:7c:c7:33:12:ac:d3:11:37:7c:6b:39:f4:
9d:71:db:5c:5d:b6:03:56:27:6c:30:4a:04:74:c9:2c:b4:34:
9c:35:86:3e:b7:ed:aa:93:62:df:d2:a6:87:aa:ae:d7:98:ab:
41:32:1a:4d:95:f6:ad:57:a7:a1:04:bd:b8:bb:4d:db:22:9f:
09:9c:9f:9a:47:93:bf:29:9d:c2:97:c0:f9:0c:5b:10:04:d9:
2f:f5:18:bf:2a:d9:cb:e9:1c:8f:26:88:84:d3:2a:26:61:fd:
cd:7a:e5:a3:48:56:55:86:78:3c:e1:46:a6:7d:03:99:2e:0e:
2b:8b:a7:98:eb:64:06:d1:f2:dc:9f:5e:7c:5b:83:e2:ec:7a:
02:44:aa:f2:ae:13:5b:c8:30:12:95:10:5b:08:3e:8c:58:b8:
c4:af:64:3f:37:73:85:99:47:dc:a4:dd:c8:99:cb:94:fc:7d:
cb:fc:43:a0:07:a9:ce:a5:7b:1c:71:fe:db:d7:87:9b:3f:24:
e2:99:c3:af:60:88:19:f1:25:26:65:94:e4:10:05:0d:06:c5:
52:82:51:c9:33:ea:4a:fc:03:30:8e:39:17:c8:19:7b:17:8d:
b5:0e:88:a0:19:e6:7a:18:6f:51:0b:8b:93:e1:92:27:4d:fb:
83:85:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:24 2025 by rpki-client