Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: ybl56Gf3CldzTRvWkmWFRdBNO+12rbnfDlyds92b7pE=
Subject key identifier: F8:35:97:43:07:C2:DF:25:7B:C3:58:92:58:51:3A:43:04:3F:9D:B7
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019849D3489B5CCBBFDB0B07C90A5AD30343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 03:00:40 +0000
Manifest this update: Sun 27 Jul 2025 03:00:40 +0000
Manifest next update: Mon 28 Jul 2025 03:00:40 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: JPQytmMqOFtAjKHGrgo7VPjNanqMyKNWwP/CvPvT8Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:48:9b:5c:cb:bf:db:0b:07:c9:0a:5a:d3:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jul 27 03:00:40 2025 GMT
Not After : Jul 28 03:00:40 2025 GMT
Subject: CN=f835974307c2df257bc3589258513a43043f9db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:43:e8:b1:10:5d:0d:ed:ac:6d:68:84:92:
ab:f2:69:31:f2:05:cb:b4:9d:20:43:92:d6:55:67:
b8:80:ce:39:02:3c:c1:6e:d3:27:40:47:f0:67:11:
3e:25:fe:17:a9:8b:b3:22:81:be:b0:9d:1f:67:59:
6b:bb:98:90:a3:61:55:4d:fd:11:da:60:86:48:bb:
18:21:e4:f1:08:a8:ee:e9:31:ca:e4:c8:77:12:52:
2f:9b:bf:22:d1:40:8c:b0:8e:5b:f7:f5:85:f4:2a:
8f:d7:43:6e:56:35:e4:62:e7:bd:fe:2a:e1:80:69:
00:47:f1:cb:39:85:0f:06:00:25:26:f5:30:34:61:
24:59:f4:0b:5c:8a:b7:11:27:d1:d8:68:ec:21:e8:
68:35:b1:79:ef:c8:32:32:23:48:65:c5:39:96:2b:
a4:92:9a:1e:e6:88:ba:02:9b:c6:b0:63:7f:0a:20:
2e:84:ac:96:92:99:c8:55:7f:1b:de:50:26:1c:ba:
d1:ce:0c:b1:51:98:cc:8c:d9:bd:4a:31:cc:6f:f6:
d8:1a:8e:e2:73:10:6e:4b:71:9c:eb:c2:b6:af:61:
e1:5d:c9:bf:4c:84:fb:ed:16:06:79:89:c5:e2:a6:
06:20:7e:a0:79:73:e7:b8:81:4b:6c:07:fc:af:00:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:97:43:07:C2:DF:25:7B:C3:58:92:58:51:3A:43:04:3F:9D:B7
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:72:96:1a:27:75:f5:30:e9:d0:24:33:66:2b:6a:bc:91:
6c:01:48:ea:41:53:e0:58:4f:5f:91:dc:48:cb:70:34:65:27:
bd:7e:07:6f:24:92:e4:49:60:93:3b:b5:d7:14:4f:eb:6f:b6:
ce:73:c1:cc:f2:1d:6f:c1:5d:08:d4:ce:14:15:6a:0a:7b:45:
06:19:1e:bd:89:23:29:20:5a:85:e4:e6:c8:d7:47:b2:44:3d:
4d:64:df:74:07:cf:54:df:44:05:0d:c1:0a:de:ca:33:67:ca:
c1:da:93:9e:a9:a2:24:63:35:6c:45:cf:4a:81:06:3f:61:d4:
e0:a8:8c:83:16:53:65:ce:60:81:b9:91:af:4f:bf:ea:9c:bc:
bf:5b:be:1b:37:be:38:e9:9d:e1:45:8a:93:d8:57:70:7c:ff:
58:c8:54:dc:bf:6d:8a:3c:86:7f:c7:e0:98:ae:0c:bc:ec:e5:
14:ad:37:b3:a2:ff:b9:a2:32:28:2d:92:8d:3b:d0:b5:b3:3f:
25:15:0c:ce:a7:97:b7:d0:12:46:cf:43:dd:08:a2:79:4c:22:
ca:72:1d:15:4f:a7:d2:e1:e6:cd:27:7e:79:15:25:c0:eb:9a:
83:d5:a3:5c:31:f5:8e:0a:0d:ca:99:95:c5:39:72:e8:54:cb:
d1:c0:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:41 2025 by rpki-client