Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier: S0OjXaxlmK2GefZDSUXheDGEjxOlgc23R0UYeAg1kNI=
Subject key identifier: 3B:3A:F6:F3:DC:0A:2D:6D:6A:C8:97:4B:36:AB:FA:7C:C4:B9:01:52
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial: 019923A07BB46F476EAFCAE12FED611FBB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:23 +0000
Manifest this update: Sun 07 Sep 2025 10:02:23 +0000
Manifest next update: Mon 08 Sep 2025 10:02:23 +0000
Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: KHvz1HRjYj+xu7QQPq0i2uJ2cT1KLjVElDa1+v4zp9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:7b:b4:6f:47:6e:af:ca:e1:2f:ed:61:1f:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Validity
Not Before: Sep 7 10:02:23 2025 GMT
Not After : Sep 8 10:02:23 2025 GMT
Subject: CN=3b3af6f3dc0a2d6d6ac8974b36abfa7cc4b90152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:29:b3:5e:4e:04:b6:e7:53:f5:14:e8:b4:
c7:a1:3c:7c:b1:a5:f0:13:76:9b:32:2f:51:df:18:
64:5f:d4:5c:e7:0f:f4:10:f4:72:ad:bf:ef:33:a8:
b9:48:e9:d0:c2:6f:f1:31:af:20:4d:90:d2:44:ae:
4e:f8:54:5f:aa:a7:75:f8:5f:1e:4b:b6:7f:03:64:
e5:75:fb:73:22:78:39:68:71:87:69:3c:f5:f6:b5:
3c:c8:34:01:fe:de:e0:32:33:f8:ff:e9:f8:74:77:
b8:92:df:09:de:9c:28:5c:31:9a:ad:78:6b:d5:16:
ae:1e:9a:7b:b8:76:00:55:bf:53:ed:b2:c9:88:35:
f7:94:0b:e9:e9:60:5e:56:7e:2f:50:80:1b:1e:f1:
50:41:a9:3e:cd:07:2e:29:c3:90:3f:ca:ed:4d:44:
cc:3f:9d:4e:14:11:1d:ac:a9:7a:dc:c8:8d:b7:f0:
c5:d1:4d:72:e9:81:27:e1:18:c2:f9:f6:0b:71:9b:
04:fb:e0:42:ed:42:71:17:59:99:5e:62:a9:70:ac:
16:3f:f2:ec:f7:ac:8e:74:62:46:5e:fc:60:18:e7:
56:d7:90:60:c4:5f:c6:2c:6e:cf:d2:9b:2c:91:c5:
6f:d4:93:8c:90:b0:fb:49:f0:7e:8f:cc:d5:d9:33:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:F6:F3:DC:0A:2D:6D:6A:C8:97:4B:36:AB:FA:7C:C4:B9:01:52
X509v3 Authority Key Identifier:
keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:ad:12:c7:af:94:e5:66:d7:dd:8d:37:67:57:07:42:44:
60:ce:25:c0:39:02:0b:c7:3a:bc:43:df:d0:30:57:21:1c:df:
99:83:6a:92:e7:04:80:9d:98:96:15:b5:8c:b8:22:ec:54:2b:
19:0f:9d:41:78:06:10:83:70:1e:34:8f:10:ea:b5:eb:f1:8c:
b4:f8:e2:b9:89:12:17:c6:d0:21:5a:89:c2:d3:f0:13:55:39:
3f:49:6e:66:7c:74:70:2c:c2:53:08:13:6a:6e:5d:bb:4a:52:
31:46:33:ef:6d:b0:7c:e7:28:c4:7f:17:69:b0:68:3d:8b:72:
9f:d7:f5:6b:5f:ff:68:7a:e2:6d:0d:a4:45:b1:7a:ed:2e:98:
e1:d6:41:5f:ec:e5:71:04:4e:c5:a4:72:96:d5:b8:7f:4a:99:
85:df:6a:a0:13:e1:aa:c0:46:0c:8b:f9:ab:08:0a:a2:f4:03:
5f:d0:31:68:e3:f9:ca:e3:a5:4a:15:4f:0c:59:8a:7c:29:87:
c5:0d:82:6d:e8:f8:f8:85:c6:92:d7:6f:ef:33:da:38:ef:ea:
ca:59:ac:ea:db:1e:90:ad:ee:d0:82:69:ad:e0:ea:33:95:b0:
74:8a:9e:6a:da:5e:f9:ef:64:0b:fc:63:dd:96:53:2f:33:8b:
35:95:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:02 2025 by rpki-client