Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: Ioh0k8A4XeVsRqE4g2sYp6tjFiH9l5A/uZ5SW7TyawE=
Subject key identifier: 2F:6E:94:91:F8:AA:A0:54:02:FC:DA:EA:A3:D6:4B:A2:4E:E7:ED:29
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 01988CFD78A99CF672554A4A18B94EAEE25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 0859
Signing time: Sat 09 Aug 2025 04:01:18 +0000
Manifest this update: Sat 09 Aug 2025 04:01:18 +0000
Manifest next update: Sun 10 Aug 2025 04:01:18 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: ZvTRDs6KU8zeXS3h6/QPYneh6Xh4gVN0N7CZ1PK1+9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:78:a9:9c:f6:72:55:4a:4a:18:b9:4e:ae:e2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Aug 9 04:01:18 2025 GMT
Not After : Aug 10 04:01:18 2025 GMT
Subject: CN=2f6e9491f8aaa05402fcdaeaa3d64ba24ee7ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:73:a6:d0:69:c8:5c:60:11:25:6f:49:98:
6b:a7:a8:c5:6f:9c:65:3e:1f:e9:b3:37:77:16:e7:
59:cf:52:13:b8:a7:68:23:7d:22:1a:f2:75:47:4d:
ca:f2:f4:4e:bf:24:72:21:2a:f5:c4:5b:7d:4f:c1:
26:f5:7d:e3:ae:84:44:5b:8f:cf:6f:d7:26:c8:28:
0c:5a:c1:ce:6e:3a:e9:0c:bd:fb:83:51:f4:3b:b0:
ed:46:4d:13:74:b3:a1:82:c2:01:69:31:3c:8f:cb:
d4:e4:2c:e1:64:f4:ce:22:00:04:c2:65:37:b8:ee:
db:d8:c7:2f:7f:d5:2a:1f:48:e9:0a:88:68:c2:a3:
30:7a:e8:5b:b8:57:d1:c7:b1:f7:1b:21:50:55:a6:
d3:9a:23:23:31:30:aa:1e:1d:12:f9:61:9b:65:45:
bb:73:f6:3f:24:70:09:13:75:87:6f:58:84:12:2b:
01:ce:8d:7f:d3:3a:d5:85:21:3b:d4:80:8a:88:71:
3f:dd:6d:7f:a0:1e:fa:df:d5:d3:8f:8a:d9:4f:67:
86:ba:06:17:1e:6f:3f:51:cd:39:d6:c7:26:eb:fc:
ab:47:3e:0e:cd:73:5e:86:9e:cf:2b:d4:d9:86:ef:
47:af:33:28:4d:1c:36:74:0c:ec:bd:6e:fc:24:d4:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:94:91:F8:AA:A0:54:02:FC:DA:EA:A3:D6:4B:A2:4E:E7:ED:29
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:28:29:9e:a5:ab:87:6f:c5:a8:f0:9d:68:64:ca:66:e2:d4:
21:9a:4e:10:fb:34:9d:d1:80:6c:79:2b:c1:54:be:f6:ec:bb:
32:2b:25:32:90:4c:7a:06:25:49:29:60:62:f2:79:b5:09:ec:
de:55:05:f3:7a:f1:41:be:88:49:ec:09:2c:2c:81:80:5a:67:
91:dc:fc:55:ff:d7:e9:5c:50:aa:1c:1c:a1:ca:4f:d8:a4:b9:
aa:80:59:0b:6e:a7:d1:be:f8:94:2b:b7:fa:b5:6c:71:5c:85:
a1:8d:d1:5b:9a:a6:cb:12:54:0b:7c:49:48:5d:33:14:d0:3b:
f8:48:e8:d9:13:ae:26:14:6d:55:73:ce:0d:24:7b:34:d9:c5:
72:48:a7:9c:6e:1f:71:41:56:ff:07:f1:a6:56:18:cc:2e:79:
ab:e7:95:09:6a:fb:67:0e:a5:f2:02:28:f2:41:cf:83:0f:10:
ca:dc:dd:cc:3c:ad:4d:ce:77:7f:f3:72:f6:5d:9c:fe:ef:a4:
a4:a1:30:56:20:47:0b:30:ab:83:2a:bc:05:97:aa:84:88:6c:
91:3b:41:3c:6d:d6:e3:7c:96:33:d7:a3:2d:0c:f7:f6:e4:17:
16:b2:4c:71:26:23:46:4b:c8:79:db:46:e6:fd:4e:e2:70:84:
61:dd:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:11 2025 by rpki-client