
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier: 7A97GbU9gdWmQavTzEp/LEIcF3J9YLzp4nZL6/EOfS4=
Subject key identifier: C1:FB:C0:DA:42:0B:6D:13:33:08:20:8D:1B:59:E2:F0:A7:36:C5:C1
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial: 01988B7D2643B82020F017CCDA2757BFF963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 21:01:31 +0000
Manifest this update: Fri 08 Aug 2025 21:01:31 +0000
Manifest next update: Sat 09 Aug 2025 21:01:31 +0000
Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: K+yuMYK7mxW0ikIw4TPgE+1FCQivVAZsf/ogdbFV/io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:26:43:b8:20:20:f0:17:cc:da:27:57:bf:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
Validity
Not Before: Aug 8 21:01:31 2025 GMT
Not After : Aug 9 21:01:31 2025 GMT
Subject: CN=c1fbc0da420b6d133308208d1b59e2f0a736c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:ac:06:16:02:81:02:9c:e7:eb:a3:f7:0f:
40:e7:ca:8d:18:18:6b:12:dc:11:7d:9a:ef:f9:c3:
b0:0e:e7:f4:c7:3f:c1:d1:3f:b3:13:b0:d0:97:e7:
ca:fa:d9:40:d1:87:d7:c2:b4:b9:f1:d6:77:62:33:
39:d1:b5:71:ae:25:b2:e4:40:57:d0:bf:b8:41:7e:
10:1d:1a:a8:47:55:92:ab:60:46:3a:27:b9:3a:d5:
e1:b5:ae:73:20:ed:28:cc:9b:ac:21:86:0c:6f:92:
cf:16:bf:c2:55:d7:1e:31:cf:ee:6b:3d:f6:04:95:
78:9d:d7:ba:12:98:e3:5c:16:96:80:b4:0d:7a:52:
d5:ad:d0:93:d4:cd:e4:c7:82:d5:d4:57:a7:f6:65:
03:b5:89:20:10:8d:6b:cd:d9:64:f5:59:93:59:b7:
b8:fd:2e:34:62:7e:03:36:a9:32:8d:05:a2:8b:e3:
4d:1c:1b:d7:e0:85:dd:bd:3f:8c:2a:d2:a7:b1:c0:
7c:c1:a5:1e:cf:c9:33:75:72:3e:16:64:44:77:2f:
83:c9:c0:2c:ed:6a:fd:ab:0b:96:a9:af:3a:7d:6e:
3b:29:80:0d:54:dd:36:df:f6:1e:3a:6c:02:2b:a2:
09:35:72:05:37:8d:b9:76:19:30:a6:11:a9:bf:cf:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:C0:DA:42:0B:6D:13:33:08:20:8D:1B:59:E2:F0:A7:36:C5:C1
X509v3 Authority Key Identifier:
keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:76:61:5b:6b:19:28:e1:50:b0:34:66:6a:10:97:59:a6:
f0:d8:07:99:04:dc:59:39:5b:a1:d4:76:64:c6:9e:cd:da:4c:
87:27:36:17:9f:42:d2:4b:1d:d8:09:54:00:f3:5b:19:39:3b:
71:2c:22:b5:14:9a:8f:26:5a:ad:db:27:98:f9:8d:b1:e8:a7:
9f:18:66:68:1f:4c:15:e5:88:eb:a5:75:9c:3b:fc:1f:f8:97:
b0:c7:e5:76:d8:52:df:25:fc:03:48:9c:e0:9f:a9:76:94:30:
cf:09:c8:ce:20:2e:e5:1e:ab:a6:4a:fd:b7:d9:7f:37:dd:b8:
90:49:82:29:fd:f3:cc:35:24:b3:f8:e6:86:6c:b8:8f:8e:5b:
ba:0d:57:0f:aa:7d:9a:cc:00:76:ae:60:51:42:ff:fc:77:84:
97:36:c6:71:5e:77:f6:9b:35:ed:50:93:42:38:50:4f:35:f8:
c3:eb:5a:44:a2:08:2f:b5:9b:dc:d3:f5:dd:84:39:1e:4c:a9:
d1:5b:15:69:8e:37:88:be:22:79:5a:99:f1:c3:0a:ab:71:3f:
71:f9:ca:91:f5:a0:23:c3:c2:b1:a7:c1:42:6f:9a:52:4d:76:
ed:bc:d3:98:4b:55:d7:15:5f:dc:ac:0d:43:01:b8:a1:d8:3a:
18:04:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:13 2025 by rpki-client