Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: MBJ7pPL6liZV+Q4KWWG7jhTwnhPhplhw2ULp3grlO/g=
Subject key identifier: 51:9A:56:C3:D9:E5:E9:FA:AE:05:89:F9:14:F7:58:67:11:4A:2F:41
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 01988EECC90F655ACD13DD6404B4E1D44063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 0363
Signing time: Sat 09 Aug 2025 13:02:19 +0000
Manifest this update: Sat 09 Aug 2025 13:02:19 +0000
Manifest next update: Sun 10 Aug 2025 13:02:19 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: Ikg00/l0ZGhd2s92dl1/exXMj2WbeP5/M3zubA5WdEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:c9:0f:65:5a:cd:13:dd:64:04:b4:e1:d4:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Aug 9 13:02:19 2025 GMT
Not After : Aug 10 13:02:19 2025 GMT
Subject: CN=519a56c3d9e5e9faae0589f914f75867114a2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:24:b6:a9:28:bc:7e:85:a1:65:fd:fd:b7:
2a:9d:d5:b1:0e:97:a2:8d:e5:ce:6b:01:37:cc:2a:
f3:4b:e3:cf:8a:43:ab:7f:ca:ff:4d:87:8e:a4:bb:
f7:2e:f7:1b:32:a7:a8:5e:0d:71:c3:d0:84:4a:c5:
d7:7d:c0:31:14:3b:81:c6:60:0b:9c:7e:79:1e:c8:
70:d4:20:f3:82:46:6c:09:74:eb:83:7f:d7:db:65:
b2:1d:cf:33:7e:3c:93:b7:20:4d:92:ae:2f:0a:6b:
e4:8a:af:d8:53:bf:69:45:8d:13:e0:f4:84:81:f7:
e1:1e:21:34:f8:15:1e:b6:e1:89:56:a3:af:ac:86:
a4:cb:bf:05:84:ed:60:29:32:e9:e6:5e:13:d6:2a:
11:ea:84:e4:0f:2a:74:84:b8:8d:1f:9a:bf:80:62:
8a:d3:9a:de:0f:de:ad:a5:83:0a:de:11:27:d3:82:
ac:e2:63:e7:38:bd:6f:96:6b:bc:9c:d3:66:84:9e:
b4:88:6b:f8:2b:80:9a:5b:9b:14:b2:b5:53:0a:b8:
29:60:5c:b8:9e:66:20:5f:08:8e:bc:35:a0:3f:e2:
90:f0:0c:66:c3:80:d0:f6:d8:b3:50:58:34:35:29:
3c:b7:1c:ba:03:16:76:e3:05:97:e1:16:11:58:e4:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:56:C3:D9:E5:E9:FA:AE:05:89:F9:14:F7:58:67:11:4A:2F:41
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:93:f8:f1:f8:29:bb:88:26:67:50:0e:14:43:29:45:85:
77:11:db:97:52:2c:a9:5a:e4:33:a6:32:ac:94:8b:bc:29:b6:
f8:10:4d:3f:88:12:99:49:da:81:e0:56:4a:19:03:31:cb:7d:
9f:b1:1d:26:98:de:11:82:96:b0:f7:47:5f:49:d3:6d:17:5a:
e3:bc:62:39:ca:a5:c5:9a:15:3a:31:88:c6:dd:96:f9:06:12:
19:0e:d5:ef:cb:56:17:c5:93:7b:19:41:65:6f:f6:12:bc:b8:
ff:bf:bb:e4:f0:15:32:ef:09:62:8d:00:6b:a4:05:20:61:73:
e7:cc:59:dd:fd:59:a5:0a:9e:1e:a1:86:de:75:03:cb:33:3b:
08:57:25:35:b6:61:ba:ca:a4:b1:75:5d:f5:0e:05:7b:df:e6:
6e:7d:20:1b:32:8a:ae:8e:d8:2b:34:de:05:e7:6c:1f:4c:a7:
82:df:82:24:56:34:1e:6b:2c:ff:19:a9:0d:58:93:88:9c:b1:
a2:01:3f:82:a5:8a:bf:5d:01:50:65:51:fd:5f:a4:39:8b:5d:
e8:7b:cd:b3:1a:33:55:ce:4d:21:be:c1:d8:18:76:7e:2d:92:
96:ae:03:7a:98:a4:33:3d:1c:9a:2b:d6:ef:ca:14:89:bb:d2:
e8:c3:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:23 2025 by rpki-client