Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: 9PKZVZVN4IocIzszQcHdOHF+AxKhV30i/+cFOyM+G7c=
Subject key identifier: 3B:8E:2C:60:4D:3A:58:E1:93:51:4E:A6:2D:9A:29:E9:35:03:58:12
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 019894B7C1EA1E290E5FF2EC031CD01FF048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 16:02:07 +0000
Manifest this update: Sun 10 Aug 2025 16:02:07 +0000
Manifest next update: Mon 11 Aug 2025 16:02:07 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: 2bBkOAzjO0unICxxImPKYgkwIVaKDoTflXosgYoTq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:c1:ea:1e:29:0e:5f:f2:ec:03:1c:d0:1f:f0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Aug 10 16:02:07 2025 GMT
Not After : Aug 11 16:02:07 2025 GMT
Subject: CN=3b8e2c604d3a58e193514ea62d9a29e935035812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:fb:c7:34:c1:03:2b:ca:c6:e3:aa:ac:98:
e3:31:25:1a:7a:0b:26:9d:40:f5:6f:e4:db:f7:ee:
f1:c5:8c:03:de:05:1a:41:61:cc:e3:0b:c8:2b:f7:
86:37:be:50:58:43:0f:e6:59:f8:87:b0:8e:1c:7b:
8b:62:11:63:e5:1e:3a:4c:1d:da:64:09:f4:d0:99:
1e:e1:6c:2a:7e:74:bc:2b:80:91:e7:64:a6:2e:2d:
ec:4a:d2:1a:0c:33:0d:04:8b:f5:01:d5:43:81:72:
55:2c:c0:c3:d4:36:53:2c:ea:61:51:76:c5:d7:67:
b6:3c:9c:a6:df:91:1e:e4:05:f1:33:fa:30:30:5f:
12:40:f4:d9:d9:9d:4a:ca:c9:d3:ca:36:91:96:30:
80:75:6d:e6:85:72:ca:ed:b3:26:a8:b7:b7:12:a2:
47:53:5a:f1:70:dc:f9:ed:9e:d9:31:78:0e:cc:7d:
81:bd:ef:b0:56:d4:42:48:55:79:80:7c:b8:e3:33:
c0:d0:06:ce:2a:1d:c7:4f:77:74:bd:e7:bc:f8:ae:
87:b6:61:81:bd:87:a8:01:48:96:75:39:26:49:f2:
89:07:a3:81:39:17:0a:be:94:66:90:a1:20:2f:bc:
cf:33:71:8b:34:fe:17:c6:88:3b:dd:61:89:39:dd:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:2C:60:4D:3A:58:E1:93:51:4E:A6:2D:9A:29:E9:35:03:58:12
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:73:eb:bc:62:9b:83:e0:77:5c:da:b7:1c:69:c3:4e:ad:a0:
4d:ec:ec:35:42:ad:a4:90:d0:41:5d:74:5d:40:c6:a3:a3:db:
59:1f:95:b5:b9:04:dc:ab:61:c8:4e:1d:8c:82:3b:10:89:22:
c3:2c:7b:4a:c2:c0:46:6e:ff:e3:a7:73:a8:0d:a1:8f:1f:88:
8d:01:f4:2c:1a:aa:e3:11:6c:5f:cc:7a:d8:c6:0d:a0:84:61:
cb:e6:d9:c5:ef:56:ef:7b:8c:2c:48:0f:1b:96:8d:ce:ae:e7:
71:fc:e7:13:d8:ad:92:7b:fc:1d:bd:97:52:18:49:9d:74:57:
1b:65:85:e8:e1:9f:0f:28:a4:a3:73:51:11:bb:3a:8f:2e:8c:
8a:b9:e0:03:d4:4c:fe:a4:88:c4:52:bf:a1:57:e4:ac:02:78:
c9:99:65:7a:57:56:f3:3b:12:f8:67:2e:77:f1:1f:01:aa:31:
3e:57:6c:29:0f:4b:4f:76:0f:ad:f7:1f:2e:2d:fc:b7:e3:5a:
18:c7:38:69:48:4f:98:7d:e4:b3:b7:24:36:f0:18:d0:79:6a:
48:93:3f:68:37:4c:04:9b:98:1d:05:29:e2:4a:d5:ee:3b:92:
39:4c:6f:ba:80:b3:1a:e1:2a:84:cf:15:c4:9e:b6:90:0a:1e:
9b:74:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:04 2025 by rpki-client