Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: pyjcT9MZyHaPI0D8H40pWpRQHmsss8CdkfsGcu6/WME=
Subject key identifier: 25:C8:30:0E:D4:D4:BD:2B:C6:67:FA:BC:5E:B4:0E:CD:23:72:B7:27
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 01984475A9C217F87B02E4CA7399D8B3B9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 03AD
Signing time: Sat 26 Jul 2025 02:00:18 +0000
Manifest this update: Sat 26 Jul 2025 02:00:18 +0000
Manifest next update: Sun 27 Jul 2025 02:00:18 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: fSsZdzNcYJzjf+0v1Wv9+jYmXD3omXgzMxgOJgLoZEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:a9:c2:17:f8:7b:02:e4:ca:73:99:d8:b3:b9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Jul 26 02:00:18 2025 GMT
Not After : Jul 27 02:00:18 2025 GMT
Subject: CN=25c8300ed4d4bd2bc667fabc5eb40ecd2372b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:82:79:f4:2f:50:30:ea:d1:f0:a3:fc:08:
61:bc:9a:3c:61:8f:86:f9:90:3b:e2:03:0a:0d:5e:
f8:2f:80:15:ea:ca:06:c6:bf:bb:b3:6f:a3:6a:d8:
db:3f:59:c4:99:3d:bf:66:a3:a1:34:bb:06:f7:29:
3f:45:83:55:42:68:56:41:b1:c2:6d:ee:ac:b8:7f:
b2:ae:e9:7d:3b:84:f0:b2:d4:c0:d1:7a:44:a6:4d:
98:3f:d0:4a:11:2c:45:0a:78:8a:76:29:bd:b9:ac:
55:2f:03:bc:99:02:09:fd:5e:d7:f1:3e:d1:75:04:
d8:12:35:fa:8b:3c:2b:aa:0c:32:b7:94:15:58:23:
4d:83:d0:f2:71:5b:df:b6:43:ce:f9:52:69:e9:3c:
12:d5:74:e4:17:53:fd:22:79:97:4b:91:cd:d7:7b:
15:77:5f:a8:de:6f:da:1a:ba:72:6d:9f:d3:81:08:
a9:77:1a:6c:6a:9e:f2:6c:3c:30:d8:f1:fd:a8:16:
69:c1:5e:a6:e4:4e:73:0b:b1:56:0d:ed:d6:fc:3c:
fb:c9:9e:ba:a2:2f:da:a7:69:44:6b:10:7c:26:2d:
d1:a7:63:e9:ae:ab:30:8f:40:7f:6a:3a:03:ad:80:
0e:b7:47:85:fc:2c:eb:c4:b5:d8:18:0c:0e:33:f4:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:30:0E:D4:D4:BD:2B:C6:67:FA:BC:5E:B4:0E:CD:23:72:B7:27
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f2:a2:99:41:7d:cc:ea:64:30:91:58:78:61:f6:64:6a:d5:
b5:43:37:8b:a6:1e:ba:ea:68:92:16:13:9f:d9:4c:f2:0a:b7:
fc:1e:ae:eb:93:c9:d0:c4:25:ad:1e:61:87:39:78:3d:23:5b:
01:e0:80:30:c8:f7:93:e7:9d:e4:ac:cb:1f:2f:b0:a9:0f:e1:
f7:e5:f6:40:16:3e:15:61:31:e5:2e:b6:9c:e7:12:2c:a8:cd:
3b:40:b9:42:b6:e9:a9:eb:0d:24:b7:b7:ec:4c:f7:1d:9f:bb:
52:86:e9:aa:d5:60:3f:18:d3:59:9b:bd:ba:d6:33:cc:9d:ef:
90:6d:66:9a:ad:9f:ed:17:8c:92:f4:f9:5b:a7:db:f4:7f:d4:
c8:fc:85:0d:4e:1f:f2:ae:31:c6:18:36:76:af:4b:2d:13:80:
8e:be:be:e1:48:9b:ad:05:ec:23:36:d9:38:ac:27:00:f8:64:
9d:27:21:2c:a6:b7:c5:c2:f4:54:3d:78:6d:f0:19:6d:d8:79:
8d:0e:8c:c0:c6:30:7c:55:8a:42:6e:ff:39:f5:2f:25:f7:cb:
a4:76:40:fd:9e:59:ba:ef:9f:53:ce:31:af:7e:bd:ed:61:d8:
85:2f:31:19:d8:d4:0f:b5:8f:63:0c:6b:af:0b:6a:7b:70:8c:
06:c8:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:29 2025 by rpki-client