Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: HYwrYzUaqFU94r2L223c8IBLVMHUXpYo2FKAEvBXg/Y=
Subject key identifier: 67:CD:C2:4A:61:BF:E1:A3:4C:17:9F:80:CD:B8:64:AA:D1:F8:30:8A
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 01984777DE409B2D0F2B438294634DCC50D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:01:34 +0000
Manifest this update: Sat 26 Jul 2025 16:01:34 +0000
Manifest next update: Sun 27 Jul 2025 16:01:34 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: iZOcvP8PSr6OX1UCxMRsf0KyN5NXYCD15DKk7ILDTgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:de:40:9b:2d:0f:2b:43:82:94:63:4d:cc:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Jul 26 16:01:34 2025 GMT
Not After : Jul 27 16:01:34 2025 GMT
Subject: CN=67cdc24a61bfe1a34c179f80cdb864aad1f8308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:9c:57:9e:42:05:b6:69:44:cc:63:2b:ff:
d1:5c:5f:b2:9c:6f:b5:b1:1e:12:49:18:92:75:cd:
4f:cf:b8:3a:14:1c:2c:39:e8:7d:4d:8f:d4:59:b4:
43:44:0e:97:53:41:4c:44:eb:c4:96:f1:df:7e:c2:
e7:57:b2:c8:18:07:d2:4f:8b:4f:81:5c:c1:8a:3e:
16:e5:ba:67:bb:3d:6e:f7:e9:a5:b4:68:63:89:a8:
cd:eb:df:32:dc:76:fa:97:e6:f8:4e:cb:48:e2:8a:
a4:18:29:ca:e3:29:e5:26:65:3d:b6:78:45:fd:a5:
c7:42:1d:73:7f:81:29:5c:29:18:2f:9f:48:d1:3c:
cc:79:b5:b6:da:7c:99:cc:a1:57:3c:6b:5a:0f:c0:
d4:7f:b1:7a:ec:fc:69:af:46:4f:2d:d0:ee:b2:f8:
e0:7a:21:0a:b6:1f:ce:c9:9e:f1:9e:bf:90:a3:a2:
2d:81:e8:ef:19:94:39:10:04:a2:07:a5:09:bc:5e:
0d:5a:6e:73:79:23:40:88:d8:da:e8:5f:6a:0d:0b:
65:90:cf:28:a2:69:07:0b:dc:d7:66:35:42:d1:3f:
b9:96:a4:d6:be:a3:4a:bd:13:95:6d:95:ba:27:33:
c3:c8:13:7d:60:4c:79:44:d7:35:31:6c:9d:a2:a8:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:C2:4A:61:BF:E1:A3:4C:17:9F:80:CD:B8:64:AA:D1:F8:30:8A
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:2d:6c:0f:7a:51:83:7e:a4:bd:7a:ce:a7:87:fa:20:0d:
2b:2f:b4:10:97:c2:be:f5:8a:60:8d:8e:eb:20:f2:5a:08:ed:
83:3f:77:ec:68:99:b7:e9:08:a6:cc:b4:0b:34:b8:93:72:91:
c1:2d:7b:2a:38:04:91:14:1b:78:7b:67:49:d4:b4:90:b9:8d:
2f:f1:3b:1a:bc:e2:ef:4e:6f:39:cc:96:8f:69:de:86:88:d2:
28:4a:01:ab:2d:26:dd:22:5a:0c:84:5c:01:c5:fb:e4:f3:e9:
f6:bb:a1:bf:16:20:93:5c:c9:b0:e5:53:3b:c9:4c:ce:7e:d6:
93:f5:9b:e2:ac:fe:44:83:f6:f8:bc:67:60:85:16:be:6c:db:
f9:9b:41:50:83:e6:e8:d5:b7:bf:1d:20:28:76:c5:b8:be:bb:
cd:03:3b:db:75:31:41:9a:22:ef:7a:86:25:a2:d5:4e:4b:2e:
a2:7d:51:a6:a6:1a:9e:e4:6b:e3:d6:c4:03:c3:32:8a:af:e1:
e4:89:cb:86:79:c6:7f:65:2c:66:58:8a:16:e8:a9:8e:e7:f0:
51:e0:41:3e:9e:82:52:8b:0e:7f:6d:1d:0d:d6:6c:e6:81:14:
b2:c5:3d:9d:9f:97:fb:06:fd:8b:4b:61:95:24:12:38:72:b8:
cd:b9:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:52 2025 by rpki-client