Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: giTMsKhsMcFU2QsfiwPvto5j/3h6LlAXZirZSBEAajU=
Subject key identifier: 57:F9:AF:3C:6C:35:F6:55:BE:6A:F3:A6:87:E4:D8:1C:45:F4:41:03
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 0198745045A34D3D01602353B3DB81F6999B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0AA5
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: y2hndftIltjkPFhrXGwPuVhmgVDhsPPNn3bf1Jc8Gx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:45:a3:4d:3d:01:60:23:53:b3:db:81:f6:99:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=57f9af3c6c35f655be6af3a687e4d81c45f44103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:fe:d8:53:d4:70:89:14:e7:97:cf:7c:f3:
78:e6:d3:0f:63:74:42:07:eb:26:5d:70:17:5d:12:
e7:6c:3e:1d:06:99:77:dc:e9:36:65:90:27:a6:80:
9a:6d:d7:9c:48:ed:26:68:7f:ba:62:de:d8:ff:14:
1c:c1:72:8b:f3:7c:5f:bc:4a:09:9d:5d:83:0e:39:
a0:ed:75:38:59:b6:d6:65:3d:42:73:a1:2a:3b:55:
92:84:dd:2f:55:62:f3:70:5c:6e:39:25:f9:1b:d8:
5d:83:92:49:82:ed:60:5c:40:05:fd:a5:ed:af:dc:
e8:b7:fb:7f:1e:2d:64:31:93:8e:87:c4:f0:ae:2e:
84:82:0f:94:1f:b9:7b:72:d4:8a:80:38:2e:1b:e9:
da:1d:c6:f1:72:36:72:4d:fe:10:2e:a7:1d:96:73:
b4:e0:b0:25:83:fa:4c:61:1a:ad:ba:03:cd:60:2e:
9c:3d:31:a7:89:30:60:0d:8b:84:58:65:c8:a9:ce:
6e:ec:fe:93:4a:1a:19:d4:9e:8b:9c:10:3f:02:2c:
9c:36:9b:a1:67:f5:1e:e3:cf:f3:0f:8a:8a:6a:ae:
31:18:0c:14:71:91:32:ca:e0:61:72:74:51:b1:dc:
ad:da:d5:fd:e7:88:d7:71:8a:46:67:14:4e:95:09:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:AF:3C:6C:35:F6:55:BE:6A:F3:A6:87:E4:D8:1C:45:F4:41:03
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:0c:a9:6c:dd:bd:dc:90:5f:bc:1e:36:18:7b:24:14:33:
1c:99:a0:cd:a1:12:01:3f:ce:c7:f3:42:b9:28:a8:2f:86:23:
00:15:2c:6d:cd:c7:87:e4:0f:e3:59:a7:42:39:26:1c:95:f9:
b3:ac:ad:99:5e:94:a3:43:2b:03:7f:5d:c7:fd:b3:e0:74:99:
7c:66:d1:8f:c1:58:db:f6:06:12:13:e8:03:dd:19:f3:20:de:
03:72:63:ae:e3:0d:3b:16:58:5f:37:18:f8:e5:86:da:e8:33:
08:36:e8:56:19:9c:ca:35:7b:2d:44:ba:01:01:18:e6:46:59:
db:ca:cb:c4:37:b6:6c:ac:a7:69:a2:2e:cb:47:be:8a:f6:28:
9c:46:38:b5:fb:33:56:44:fa:5b:a6:0b:be:11:8d:74:b3:8c:
17:51:5e:e9:83:2d:11:ef:bc:db:40:c9:95:42:cf:c5:f1:1b:
c3:db:aa:a7:cb:21:23:bb:7c:af:60:6e:ec:03:2f:cf:13:a2:
02:1d:3e:c3:a8:ee:de:24:22:cf:f7:f4:3d:d8:c7:fe:68:29:
8d:a9:c0:22:f0:53:fb:a5:47:57:e9:25:fa:19:b4:2a:a6:24:
44:3c:c1:79:b2:da:f2:5f:a8:23:4a:bf:89:ad:5b:46:8f:0c:
b1:bc:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:26 2025 by rpki-client