Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: DTJIurxuFC88KQi4iDaRU5NC+pSi2Ev63iXPmNfjcOY=
Subject key identifier: 0C:BA:6D:82:6B:16:9A:17:AF:3E:A9:98:24:37:91:6D:F6:A8:9D:01
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019849D319D2014342FB81EE5C5DED51F1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:28 +0000
Manifest this update: Sun 27 Jul 2025 03:00:28 +0000
Manifest next update: Mon 28 Jul 2025 03:00:28 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: v+Spb+DkflOdRSEcW61877qfaHXI5vYCS0xUtFBd9TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:19:d2:01:43:42:fb:81:ee:5c:5d:ed:51:f1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Jul 27 03:00:28 2025 GMT
Not After : Jul 28 03:00:28 2025 GMT
Subject: CN=0cba6d826b169a17af3ea9982437916df6a89d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:1c:4f:c3:9c:a1:66:e3:54:60:92:c4:ee:
cc:70:ea:a0:19:78:74:2b:ea:4c:f1:52:ef:0c:18:
1a:aa:66:86:97:7d:78:4d:61:8a:73:bb:a5:1b:ea:
05:64:d2:3f:af:65:a6:c4:85:43:9c:36:4b:48:e1:
66:af:a0:e3:11:8c:ac:1f:bf:1b:2a:e9:2d:8c:8d:
ea:bc:0d:97:7b:e2:ec:ff:c0:eb:bd:d5:f9:aa:92:
34:bb:3d:52:99:94:ff:ba:a0:1e:26:10:2d:a2:cf:
fd:46:fa:12:d2:31:1f:ac:2c:e3:8b:a0:8c:68:0c:
54:0b:80:64:10:2b:92:f5:a9:79:7b:c5:15:cf:66:
54:66:da:e7:90:db:e4:e9:f3:57:19:3e:3e:6b:45:
45:93:ee:e5:bc:85:6e:4f:70:3f:14:8f:ff:d6:a1:
b8:8c:16:b2:10:5b:79:3e:bd:34:68:1d:52:d1:f1:
ae:67:ea:bc:2e:c9:76:36:3d:8e:98:25:1b:18:b1:
4d:8c:e3:44:92:1e:81:54:64:2b:e7:a3:35:4c:90:
93:f6:40:e5:bc:21:7a:c1:50:a2:b8:54:25:c2:e7:
e5:e7:0e:e7:c0:b7:bb:20:76:64:33:4a:9b:8c:ab:
b0:a9:44:e6:e7:21:bd:44:01:b7:3e:51:a7:e2:c3:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:6D:82:6B:16:9A:17:AF:3E:A9:98:24:37:91:6D:F6:A8:9D:01
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ac:88:59:4a:cf:4b:8c:0a:c6:a3:31:60:77:64:65:15:b9:
66:57:8f:85:b9:5e:cc:f2:61:16:ad:f7:f8:eb:ff:46:2c:80:
22:d1:fc:25:66:c5:54:cc:4a:00:77:da:62:d9:02:ab:51:74:
0a:dd:4d:bd:41:4e:82:99:6e:b6:08:9e:b8:7d:6a:bf:ff:52:
0c:da:80:0c:2d:a4:4b:75:af:fc:d8:89:4f:ab:01:9f:e4:e5:
6a:c3:18:45:4f:90:fc:6a:9f:5a:e8:9a:fe:cc:ca:ec:3c:ea:
58:64:23:a5:c6:57:2a:45:21:1b:8b:6b:00:e5:2e:f7:8e:d7:
ab:6a:46:d7:e4:ff:df:9c:ec:0d:3e:5c:80:44:90:b2:1c:93:
05:32:b7:a4:67:38:fe:ab:93:d6:c5:a9:cd:46:3f:8f:fc:95:
53:da:30:3c:f0:bf:44:d1:66:c0:d2:9f:18:e2:a8:b2:8a:be:
38:74:51:19:40:93:0b:d2:4b:b1:20:7c:35:fb:cb:ce:27:51:
9e:a9:e6:d3:a2:d7:c9:91:2b:a0:c4:92:9c:41:db:16:37:bd:
bb:da:b1:54:d9:7d:22:7b:f0:37:b7:04:ad:62:80:1b:fd:06:
e7:75:d5:ab:15:58:e5:8b:f2:c8:5e:a4:0d:2e:82:c4:9a:d8:
27:39:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:05 2025 by rpki-client