Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: r/4LiXYbRu7h/Qp7YpVwHqK9j9imFFMQHWEM1Z47+BY=
Subject key identifier: 67:DE:F7:E0:F9:07:A9:45:AC:0D:AF:D6:F4:F9:6C:F0:2E:66:21:42
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 019849D338FFFB2DFE92748B782452D3DE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0E69
Signing time: Sun 27 Jul 2025 03:00:36 +0000
Manifest this update: Sun 27 Jul 2025 03:00:36 +0000
Manifest next update: Mon 28 Jul 2025 03:00:36 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: PWRmy1Qo1EoF2VaYBaM79sBAIjCTbbBFhIITY93mzpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:38:ff:fb:2d:fe:92:74:8b:78:24:52:d3:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Jul 27 03:00:36 2025 GMT
Not After : Jul 28 03:00:36 2025 GMT
Subject: CN=67def7e0f907a945ac0dafd6f4f96cf02e662142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:e7:df:2d:0a:05:af:a9:39:ea:66:aa:23:
8c:72:6b:44:84:35:f5:d9:16:55:67:5c:59:ed:b0:
92:17:1c:2c:91:26:07:de:f3:e3:95:64:5e:85:bf:
4b:ab:79:54:e7:8d:cc:06:7c:08:8b:f7:3c:f7:f7:
7e:7c:b3:92:2d:1d:6d:15:19:3b:41:8e:89:50:90:
e1:cb:6f:65:23:4b:88:03:19:59:d7:4a:c4:4a:6f:
06:05:d7:6c:8a:c0:d5:ec:3f:39:b2:69:90:72:73:
3b:54:25:de:76:e7:ee:6c:c4:c1:3a:c7:57:8a:31:
20:ce:36:33:3b:34:99:db:71:e5:bd:9d:d6:97:30:
25:dd:95:ce:1e:02:5b:51:aa:64:2e:21:2f:57:2b:
a4:8d:75:71:94:4a:1d:66:c3:c2:39:aa:06:2b:e3:
7f:6c:cf:9b:f2:13:74:c6:12:c8:fb:f5:89:b5:84:
1f:1b:49:8a:dd:6d:e0:9f:60:f9:2e:3c:1f:a5:e2:
1a:ff:d9:d9:40:4f:33:34:9b:ef:d3:33:1e:c8:ef:
b4:35:aa:eb:9e:b7:9a:f5:7c:54:46:80:38:bf:4e:
65:42:51:fb:70:b8:02:b2:57:ba:03:df:d9:ad:6d:
c7:c0:f9:92:42:6e:6c:03:2e:70:1e:0e:0a:80:2a:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:F7:E0:F9:07:A9:45:AC:0D:AF:D6:F4:F9:6C:F0:2E:66:21:42
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c7:1b:9d:08:42:0d:9e:2d:f6:d7:42:25:cc:65:bb:cf:85:
44:d8:c9:3d:2c:e9:ad:37:96:94:8c:ac:b6:1d:1c:02:35:ce:
e6:aa:d1:c2:91:34:20:37:b6:cb:86:24:d5:54:0f:b7:92:7b:
ad:e5:c3:fe:79:c7:a5:28:40:00:84:8a:04:dc:db:dd:5e:f7:
70:ce:db:bc:4d:ee:66:22:ca:5f:64:e1:4b:d4:84:ad:27:33:
ac:3c:b0:6e:0b:9e:8a:a7:65:7d:b6:e2:38:27:94:6d:10:fd:
fe:d1:c9:4f:eb:b5:c5:85:c4:55:67:60:ec:0a:04:ce:16:3b:
d2:58:9d:6f:b3:64:f0:7b:dd:30:ca:f7:91:4b:52:60:50:63:
fe:91:85:a0:86:3f:99:a8:9f:95:6c:f5:a5:d3:8b:56:88:ec:
3c:93:14:f1:72:8e:20:3b:c3:5f:31:7a:c6:38:f0:c3:48:26:
78:1a:26:57:c8:4d:e8:29:71:53:7f:69:7f:be:39:a8:51:6f:
b9:77:16:3c:3a:97:e4:d2:56:e5:aa:eb:09:11:4e:3d:82:a8:
fe:a4:82:c4:e3:a5:49:d6:1a:f0:2b:e9:78:fe:72:c6:c7:84:
df:ba:9a:b1:91:f0:1f:69:4b:4a:93:2f:7c:8a:94:ee:23:59:
d9:2c:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:01:33 2025 by rpki-client