Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier: NpnOxo3cbWd/Dp/bzBDulTnQJLxT5CmhBXJ75iilGoY=
Subject key identifier: 72:33:71:78:51:6D:02:42:B0:CB:50:C5:98:7E:20:FE:FE:0B:E6:B5
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial: 01984965083AFFF2F13F54E96612693BDD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: ttZwmizUW0THR8NRec3RTS3uFxS8IuDyu33msiRglJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:08:3a:ff:f2:f1:3f:54:e9:66:12:69:3b:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=72337178516d0242b0cb50c5987e20fefe0be6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:7f:10:14:7b:f0:5d:a9:e0:15:5d:fd:70:
d3:aa:a5:7f:d3:34:be:55:77:52:4b:c9:84:d2:ed:
3c:f5:7d:df:0c:02:d0:85:a4:c2:71:9b:d1:6e:a8:
ec:20:5a:0d:31:49:63:46:d1:ac:1a:5b:d8:0a:44:
e3:8d:5d:5d:b3:29:1d:5f:75:7c:ff:cf:39:b5:8d:
b1:10:7e:09:b1:4a:ce:0f:11:de:72:e3:07:89:48:
6f:6c:31:38:cf:cd:bc:ff:84:a8:13:d8:a9:58:16:
51:47:53:c7:df:6b:0d:2b:79:98:07:07:74:e5:a4:
dd:30:2b:63:f5:95:6a:d9:e8:b4:a5:f6:13:f0:8d:
2b:9a:95:51:d0:79:7f:56:e1:1b:88:0b:f3:96:a5:
cc:6b:b0:5f:47:fc:6e:2c:af:b6:84:ec:16:9a:e9:
e8:d6:c1:fc:10:24:4c:a7:6e:5e:4b:13:a4:2a:cc:
58:77:76:61:ad:37:fa:85:a9:7f:a9:07:4d:a9:fc:
8e:eb:18:cc:ff:d0:09:91:3d:ed:c9:63:23:37:99:
9a:5f:7a:f9:ac:57:12:33:a8:9b:72:f1:ef:a3:ec:
41:c4:c2:aa:df:8c:8e:19:f6:c6:66:7e:5e:d9:f2:
03:79:5c:0d:d4:91:43:d0:55:a5:f9:eb:a8:14:29:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:71:78:51:6D:02:42:B0:CB:50:C5:98:7E:20:FE:FE:0B:E6:B5
X509v3 Authority Key Identifier:
keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f8:fd:1d:81:85:c5:65:dd:47:9c:e7:51:3d:f1:0c:58:ec:
98:a4:bf:78:c3:f3:bd:3c:63:1b:92:92:c6:07:57:80:9e:8e:
7e:b5:74:0f:95:bb:36:9a:26:54:f2:11:95:bb:23:cd:f5:b8:
5b:ac:e0:8f:7e:b6:af:51:ec:2a:4e:e1:58:ee:3c:3a:7e:9d:
97:73:7d:6e:b4:97:f4:50:03:2e:2b:a5:23:68:64:0e:17:df:
16:29:18:24:75:92:b4:e0:79:39:c0:84:79:af:5e:fe:8c:db:
70:00:c8:6f:4b:97:f5:cb:dd:5c:27:59:61:c5:eb:ca:8d:bc:
bc:ae:7d:ee:ea:7b:dc:3c:49:56:c3:11:a8:b4:bc:c2:1e:f7:
3d:07:37:30:e1:b9:65:a5:59:eb:23:cc:41:7f:18:39:ed:24:
2b:9f:91:8f:4b:cd:8a:02:6c:c2:c9:70:44:d3:f0:8a:af:4b:
a2:fe:dd:18:d7:ee:ed:14:06:15:2d:a6:82:f5:34:50:85:08:
de:89:a2:7f:2d:46:90:a6:0c:3a:c6:9c:01:0e:8c:d7:eb:67:
fe:c8:35:6e:8e:da:e5:7f:73:3e:92:42:64:5e:db:38:c5:9f:
80:5b:58:7c:b0:c1:3e:69:a3:57:d6:15:7f:72:10:e0:f8:7b:
f7:a0:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:38 2025 by rpki-client