Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: NHVU0R+eribIKeAHttB2RepxzUAKGjG7IYPM2GDv+6A=
Subject key identifier: 6E:C2:F1:CE:4F:5F:9C:CB:A7:FB:B4:A6:FA:AC:48:45:8F:3A:62:0D
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019873E2F9C3FBBF42D9914E3C1A17B18BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0D26
Signing time: Mon 04 Aug 2025 07:01:51 +0000
Manifest this update: Mon 04 Aug 2025 07:01:51 +0000
Manifest next update: Tue 05 Aug 2025 07:01:51 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: n0xgSysX8z+URKl14FwPLzF4Gy/+JHy6zsOEcOFj6PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f9:c3:fb:bf:42:d9:91:4e:3c:1a:17:b1:8b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Aug 4 07:01:51 2025 GMT
Not After : Aug 5 07:01:51 2025 GMT
Subject: CN=6ec2f1ce4f5f9ccba7fbb4a6faac48458f3a620d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:85:02:f7:cb:ec:e7:a7:87:0b:0f:37:ce:
56:f2:fc:d4:79:96:b6:66:01:63:31:ff:fd:f4:f0:
4d:76:c7:3c:27:74:ab:a2:91:91:5b:e5:fd:b9:4c:
01:f6:76:f8:1b:17:0f:39:c8:08:9e:f9:4a:c6:55:
73:e2:c2:f2:8f:e1:2b:45:33:f1:64:ea:98:cb:1b:
4b:49:46:53:4f:54:f4:d0:e8:12:89:39:95:9c:7d:
6e:fd:e3:58:00:58:93:c1:a7:b4:a3:00:2b:20:24:
78:93:a6:a5:58:48:8c:e7:6a:d4:31:79:af:c7:80:
aa:a2:e2:11:4d:ca:6d:79:b6:9c:0e:39:49:79:30:
0b:2e:87:88:65:ab:d2:09:3c:fe:90:e8:3c:ce:1f:
7e:fc:74:47:76:47:e5:a3:c7:22:5b:fc:97:67:f4:
43:17:bd:6e:79:39:29:5d:9c:32:68:e3:d6:47:b3:
cd:7c:26:66:cc:91:3d:25:24:b1:41:f3:b8:5b:e5:
d1:2f:05:c2:ae:90:06:a2:bc:b4:75:1f:13:e7:17:
68:4d:23:bd:eb:d8:e6:32:12:b5:e7:10:46:3e:a4:
d8:b2:05:e5:2c:44:d7:4d:9a:e8:6b:74:4f:55:ad:
ac:43:50:81:b5:a2:88:b6:02:47:9c:98:1e:7b:d2:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:F1:CE:4F:5F:9C:CB:A7:FB:B4:A6:FA:AC:48:45:8F:3A:62:0D
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8d:99:70:15:51:b9:5b:6a:f2:53:00:e7:f5:9e:d6:df:24:
01:13:40:5c:82:8d:86:ca:bd:b2:ad:e3:95:42:bb:2f:34:52:
fd:85:82:ef:fc:80:66:67:8a:ec:d0:ce:b2:8d:c1:31:12:18:
aa:0e:ef:cb:1f:f8:5f:50:65:35:3f:35:ff:17:3c:aa:ab:6c:
b1:df:56:dd:48:3e:14:36:6c:98:39:86:ba:0b:c8:6b:0b:85:
06:8c:c6:c1:a7:41:07:a8:c7:c6:d4:c1:6d:48:30:75:93:e9:
d3:79:9d:fa:d3:60:80:77:e5:a5:cb:31:68:ec:0a:8e:f0:53:
52:a0:7d:2c:28:2d:67:58:ec:f0:d1:ff:a0:01:72:0b:9a:29:
94:1e:1d:7f:95:d5:27:f8:2a:70:7a:ee:29:f3:8c:67:a1:8f:
d2:48:35:78:bc:17:06:b0:1b:f7:26:46:44:2e:83:fd:9e:10:
13:92:52:e8:a4:75:a3:20:b0:fa:eb:bd:b7:95:f8:65:7e:9f:
af:da:c0:d1:05:0c:cc:14:86:b0:a4:d2:be:4e:fd:0c:0d:43:
a3:4f:fc:93:a6:f5:ec:1b:42:42:3c:51:e5:17:db:95:dc:f7:
eb:8d:cb:7e:23:85:7d:7b:25:bd:8e:8b:62:2f:cf:f1:12:61:
95:41:69:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:47 2025 by rpki-client