Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: kJOIjTAAvGu3nx38RWiksHjlXzO8wAa5iICcgFwwoFo=
Subject key identifier: D0:38:C2:F4:D4:50:26:97:BD:42:24:7D:EA:80:95:3D:F0:13:B9:EA
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 01988F8FFD7B6FA4D98925B7F782EC389902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 16:00:35 +0000
Manifest this update: Sat 09 Aug 2025 16:00:35 +0000
Manifest next update: Sun 10 Aug 2025 16:00:35 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: cWjKzxAa6Hl4FeYl3Gdm4lLK73AfJVU9avzjSZhr1lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:fd:7b:6f:a4:d9:89:25:b7:f7:82:ec:38:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Aug 9 16:00:35 2025 GMT
Not After : Aug 10 16:00:35 2025 GMT
Subject: CN=d038c2f4d4502697bd42247dea80953df013b9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:1e:59:e9:7e:14:a3:fb:a7:06:c3:3b:7c:
35:26:7a:9b:b6:bb:33:27:16:b9:b0:d0:51:f7:cf:
8e:56:58:55:39:f3:f0:a9:e8:1e:f1:d0:c5:53:eb:
22:81:2b:ef:0b:6d:ee:d4:a7:37:5d:6d:16:33:fb:
31:e5:21:db:52:b3:78:28:96:70:91:b9:61:c5:6b:
59:dc:b9:cf:1f:e4:ed:21:d1:8f:60:0b:18:8b:00:
7c:ce:e2:b4:97:d7:68:dc:6a:a7:19:86:ac:de:e6:
8f:7c:0a:c6:b5:45:14:bb:d9:41:1b:c8:e5:a1:a5:
16:22:e7:c0:74:c4:0a:ac:52:50:e8:39:d2:b0:6f:
b5:9d:98:3f:bc:9d:ed:a9:17:8c:ce:60:2a:c7:3c:
f3:b6:81:f9:90:16:57:72:05:d6:1c:53:88:32:7c:
d8:66:30:80:52:7c:77:2d:e7:53:53:7e:1d:57:13:
6a:70:18:62:0f:ae:d4:38:35:75:92:50:c9:a4:91:
e5:14:ee:51:af:57:02:68:b3:e8:64:8b:1f:3f:94:
b6:e5:ab:ed:2b:99:04:dc:df:79:4b:33:64:d3:a7:
ee:b1:a4:af:49:d6:bc:14:17:c1:8f:98:ab:68:2a:
e2:75:8c:dd:f4:cb:6f:36:67:a4:50:9d:04:de:f2:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:C2:F4:D4:50:26:97:BD:42:24:7D:EA:80:95:3D:F0:13:B9:EA
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:11:c7:1b:78:a7:19:f5:13:79:70:ae:37:89:88:02:0b:c9:
55:93:ad:1f:03:67:70:af:37:25:b4:85:c6:fa:78:ad:0e:95:
c6:7b:ba:67:d6:8d:e8:ff:4d:d3:62:f7:c0:7e:79:90:f3:29:
50:3d:4c:74:e3:60:3a:7f:83:1b:a2:5d:5d:2e:63:5a:3a:1e:
be:84:a1:37:c9:75:fa:0f:99:50:b4:71:e7:65:20:19:78:92:
bc:5f:b1:8a:d0:c1:e2:ce:8a:e1:e4:a1:af:9b:79:13:a9:29:
13:c1:78:9d:75:b0:be:5e:69:68:4c:b4:e4:e1:43:57:eb:12:
ab:11:ea:14:85:6c:85:f2:30:7d:28:19:91:15:aa:4b:63:ea:
dc:cf:16:48:da:bc:c6:29:89:07:23:62:ba:f7:d8:ae:b2:cc:
c5:a6:e1:b2:ea:c3:38:7d:9c:82:a2:3c:f0:0b:c0:c0:96:21:
03:26:fe:a9:8c:35:64:f2:1e:20:6d:53:43:2e:a7:2a:e2:2e:
2d:69:99:b6:ac:ed:95:a4:d7:80:00:de:94:77:b7:fe:3e:36:
da:31:d7:22:ae:7f:ac:b6:ce:f3:71:c7:42:e6:7e:e3:a4:61:
b2:22:a9:1d:c5:26:2c:06:46:6a:b1:fc:78:4b:64:15:08:39:
23:69:d2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:05 2025 by rpki-client