Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: zr9oZhFpSUPh/vUXbxeKkNTjwF8mwOxPiuOg12FtLhs=
Subject key identifier: E4:84:32:EC:A6:8C:00:DD:65:AE:23:8E:DB:E3:06:FF:AA:40:7C:67
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 019844ACAED989D214EC831994A0C475278D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 0340
Signing time: Sat 26 Jul 2025 03:00:24 +0000
Manifest this update: Sat 26 Jul 2025 03:00:24 +0000
Manifest next update: Sun 27 Jul 2025 03:00:24 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: PVd1S0L5hQ44qbgzty8tbj35itLxkULnpw6FdQL/3fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:ae:d9:89:d2:14:ec:83:19:94:a0:c4:75:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Jul 26 03:00:24 2025 GMT
Not After : Jul 27 03:00:24 2025 GMT
Subject: CN=e48432eca68c00dd65ae238edbe306ffaa407c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:ae:5b:d3:d7:6c:ad:b3:3c:d0:a3:1c:9f:
08:a2:bf:c6:83:32:e3:b1:9a:fe:9e:45:65:ab:38:
dc:55:d3:86:d6:45:63:2f:40:ea:e1:9e:cc:a8:0e:
f0:44:20:01:05:c8:51:53:39:47:8a:bf:5e:30:32:
3b:d3:4f:20:d4:ab:d7:04:21:b9:0c:0d:f6:77:24:
96:47:cb:f3:5e:27:c8:ef:f7:d0:2a:56:fd:b3:2c:
26:4e:04:37:53:b9:9f:33:a0:66:4d:a5:e1:df:a4:
ca:88:c2:d0:da:4e:13:35:12:f8:95:f1:8e:cf:46:
b3:8d:44:4b:24:49:88:71:b5:f0:b5:14:0b:22:d6:
f2:2b:58:70:cb:7a:9a:84:99:43:0c:68:a8:5b:b5:
c3:14:a3:2f:c3:48:2f:de:e6:a2:a6:23:c3:b4:a9:
03:5e:79:5d:88:bf:59:32:d9:47:a9:55:40:92:4e:
2c:db:dd:92:9a:07:dd:1b:4b:14:1d:82:4e:f2:eb:
72:e9:26:1e:66:59:e6:2d:0c:c1:4f:54:00:cf:f5:
fd:e5:90:a3:be:08:02:f0:b4:63:de:69:93:2a:80:
b5:1f:78:91:2c:c7:7d:41:07:23:39:11:c1:1d:97:
db:e1:a9:c5:06:85:1e:84:79:68:d4:f2:bf:55:f8:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:32:EC:A6:8C:00:DD:65:AE:23:8E:DB:E3:06:FF:AA:40:7C:67
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:3e:1d:94:e1:db:21:04:c3:e7:85:e3:08:ce:86:c3:d4:67:
b9:90:29:b9:a2:ef:b9:4d:20:99:57:78:c9:3d:6a:fa:b3:b0:
3e:3a:99:17:54:d6:64:9d:75:34:64:7b:49:d2:53:a9:fa:90:
61:d8:31:06:e1:7a:93:83:82:67:46:33:3d:be:30:e5:b5:50:
79:53:d6:d5:64:b9:13:05:31:d8:c9:30:d8:c3:ef:d8:db:d6:
ce:fb:53:e3:04:e6:c7:e1:df:e8:ff:9e:1f:6e:e0:70:44:df:
50:a1:fe:e6:b5:90:e2:6a:c6:af:aa:e6:31:c0:47:8a:50:64:
fe:4d:81:9c:c0:69:97:87:9a:09:d5:c1:77:4f:f6:1c:79:69:
9f:12:29:3e:22:e1:15:98:8d:b2:a0:a4:50:86:43:0b:92:90:
57:2e:6c:95:1b:4f:1f:87:87:50:5d:8c:53:c9:79:74:38:f5:
fc:b9:cd:f4:c9:8f:ad:44:b6:be:4c:7d:56:0d:c2:f8:ee:11:
97:79:d7:9c:c7:4b:78:c8:f8:3b:59:b9:61:7e:13:b9:a1:a1:
e9:6c:f8:0e:34:aa:64:d3:eb:17:b8:31:32:71:78:ba:95:91:
54:27:02:b9:49:94:1d:7b:67:ca:30:5c:1e:ae:62:ed:92:cb:
54:e6:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:26 2025 by rpki-client