Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: RiIe48Ly6PRp9fMoOV7RPsxOb4qZ9kjJbOFbslbRy/M=
Subject key identifier: DC:F5:4F:AF:11:78:DF:2D:00:8E:42:C6:A7:FD:01:8B:37:39:D1:64
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 01987E65DCAD28DA5DDB57117F6753D8BDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 41
Signing time: Wed 06 Aug 2025 08:01:01 +0000
Manifest this update: Wed 06 Aug 2025 08:01:01 +0000
Manifest next update: Thu 07 Aug 2025 08:01:01 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: HuAxBUX5k009E7Wb32k5hqyLmtUj+KK3vpX2sXjW8eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:dc:ad:28:da:5d:db:57:11:7f:67:53:d8:bd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Aug 6 08:01:01 2025 GMT
Not After : Aug 7 08:01:01 2025 GMT
Subject: CN=dcf54faf1178df2d008e42c6a7fd018b3739d164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:4c:aa:f6:df:ed:5b:12:06:b4:bc:31:c6:
e3:aa:36:f3:e7:08:35:b3:5f:64:a6:f2:03:96:49:
1d:28:ab:cf:84:40:d4:86:77:fd:37:64:c4:10:b0:
97:8f:4e:f5:aa:c5:a1:96:c0:65:ff:38:54:96:cb:
c1:7e:e9:0b:fe:d5:cc:97:c6:e9:89:df:e5:7a:f1:
af:5d:c5:3d:c8:de:f6:6b:44:cd:e2:6c:74:ad:2e:
2c:d0:b4:9b:a9:e2:ce:c3:8d:c4:cd:40:38:39:1a:
26:72:00:04:1e:75:fb:d5:18:2e:c2:80:83:88:1a:
db:b6:35:f4:da:49:48:98:43:79:73:ce:b8:69:94:
65:2b:94:19:ee:3f:5d:6b:43:a4:0c:b5:52:ec:4a:
11:cd:5c:af:df:c2:05:a4:3b:2f:94:e3:04:bc:00:
6c:8a:00:fb:6b:49:99:cc:83:a5:96:80:a1:ce:ad:
cf:95:57:82:b1:ed:1f:35:74:45:f2:f6:f4:91:37:
42:5a:85:a3:c4:39:c5:8b:50:22:6b:ea:ff:29:96:
06:04:d4:66:da:c8:8b:5e:f8:d2:a6:5d:da:47:7f:
35:90:a9:48:c3:c8:cf:0d:d2:f1:9d:a6:14:52:33:
9b:a7:dc:3d:3d:cf:9c:b2:f6:74:cf:c9:ca:b1:aa:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F5:4F:AF:11:78:DF:2D:00:8E:42:C6:A7:FD:01:8B:37:39:D1:64
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bd:ac:70:c3:94:ce:25:e6:c7:7e:8d:25:e5:fb:a9:1e:09:
70:35:2d:f7:d0:0a:34:6e:1e:34:3a:ad:fd:4e:95:33:35:71:
55:4a:8c:9e:7c:e4:fa:fa:d4:f7:40:24:52:cc:d4:59:ba:95:
98:3b:cb:e5:79:0e:e9:12:59:ce:95:6e:8b:4c:c3:4c:11:b2:
4a:b1:3b:0d:b5:25:90:1f:f1:44:ad:ef:5a:4e:81:4b:12:2d:
ef:c0:12:93:e0:f7:e1:87:b1:2c:6b:b7:02:b5:f1:a6:e5:69:
4f:6b:c6:3a:82:37:05:fd:e9:04:a0:4b:cc:66:f0:b1:e3:dd:
c2:a8:7e:e5:6e:b3:94:55:c4:68:6a:38:98:1d:0b:48:73:62:
41:3e:22:07:64:72:48:95:a5:70:00:64:f0:1d:82:67:7b:fa:
71:6f:81:78:55:3d:56:81:98:ee:bf:1a:06:9b:a9:c8:26:d7:
f4:52:14:cf:1a:74:6b:91:ee:2e:15:cd:af:f0:dd:14:e0:00:
bd:59:9b:7c:dc:5a:b2:2e:45:97:2b:df:d5:17:78:0d:91:5c:
24:dd:57:ce:47:13:b3:75:d1:b2:3d:6f:cc:0b:f3:9b:56:18:
20:1a:0a:c9:a2:68:01:61:c3:a6:05:6f:2b:b1:7b:ed:ae:b3:
26:52:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:32:33 2025 by rpki-client