Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: cVSYBb8GeAOZo0dEKn5iPtFOsnnYA5b7duFjN4ash9g=
Subject key identifier: C7:32:1C:3E:1C:50:B4:CC:31:4E:22:59:23:D9:8D:53:0F:BB:24:0A
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 01984B54F7520BA5CB0CF2867CC8262E21A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 10:01:56 +0000
Manifest this update: Sun 27 Jul 2025 10:01:56 +0000
Manifest next update: Mon 28 Jul 2025 10:01:56 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: MLxYemtjwNdYBFn6ja9jJZua1EiL32wy+5t5OkrLEcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f7:52:0b:a5:cb:0c:f2:86:7c:c8:26:2e:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Jul 27 10:01:56 2025 GMT
Not After : Jul 28 10:01:56 2025 GMT
Subject: CN=c7321c3e1c50b4cc314e225923d98d530fbb240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:df:05:54:52:3f:6a:79:f2:57:99:d3:b9:
14:ed:bd:12:bd:8f:b1:17:03:a4:62:65:82:2c:3c:
32:ab:da:85:77:89:a1:08:a9:78:d1:ff:b3:07:54:
87:f2:64:17:c7:10:7f:81:b6:20:da:59:80:06:a3:
de:5f:a7:13:30:78:3b:09:9a:ee:84:cb:cb:c1:cb:
c4:c6:fd:fe:0e:ef:32:16:b1:10:81:4b:b2:58:df:
52:8d:06:3e:e2:ba:ce:99:46:fd:48:ee:a0:c9:2f:
29:a7:f4:84:72:40:ea:a3:1d:d3:1e:04:c3:97:5e:
d6:40:60:80:c8:ff:b8:4b:02:0d:a1:3c:71:f4:db:
97:ea:63:ff:fa:12:96:f3:eb:c4:64:62:f2:fd:23:
7c:3b:5d:20:0a:df:1a:5c:76:ee:8c:37:b2:2b:fc:
63:00:ab:a7:f5:f4:c4:4e:0a:a2:01:11:a4:d1:6b:
c1:59:20:5c:9b:4e:76:55:f7:06:94:ef:dc:b7:2e:
4e:27:94:dc:0a:fc:b4:d3:26:ad:ce:2a:00:91:79:
58:27:86:e2:6b:6e:cc:12:e9:e0:59:12:24:ac:4f:
cf:d5:f9:b8:3d:f1:38:7d:6d:15:f2:97:b6:97:64:
d7:ae:0f:f6:d4:d8:64:51:f9:1b:d3:f0:1b:03:73:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:32:1C:3E:1C:50:B4:CC:31:4E:22:59:23:D9:8D:53:0F:BB:24:0A
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0d:7b:c1:ce:97:db:b0:8a:40:17:47:e4:6f:cb:f8:c3:04:
9c:47:14:fc:cd:a3:42:e7:8a:81:ce:14:6e:d4:49:c9:d1:ff:
e5:f9:be:d7:06:c1:5c:7d:2b:ee:c2:94:c8:4f:ae:38:20:f5:
10:37:a2:52:8b:3b:95:fb:d5:a7:1c:b3:6c:9c:54:83:e9:fc:
94:f0:7e:fe:50:34:93:dc:44:e8:4c:28:7b:4f:35:a2:7d:45:
2c:2f:86:44:82:8e:e8:57:57:ff:a9:bf:57:61:f5:e0:50:21:
94:a9:c2:66:2e:89:e6:d4:8c:99:48:1d:4b:8c:22:7b:fd:46:
17:bd:fd:7f:d0:93:1e:6d:56:70:74:d8:03:c0:48:44:8e:8d:
15:48:4c:e8:e1:8a:9d:52:58:f5:1e:da:af:fc:53:bc:74:c3:
c3:2b:c1:98:bb:d7:d3:33:da:13:03:ea:f8:b8:0b:f2:27:be:
ca:35:db:9f:f2:06:7b:b4:09:9e:1b:6c:a8:99:ba:6e:64:ae:
0f:6c:f8:c6:5e:da:c8:71:4d:05:68:d3:4b:91:e2:a9:99:e9:
4d:06:83:1f:ca:6b:a0:1c:0e:93:69:68:68:0c:87:36:a3:f4:
33:04:52:56:3c:98:ed:db:8a:bb:ba:aa:4c:19:11:82:67:08:
77:b6:95:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:16 2025 by rpki-client