Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
File: f5kYyrbx817xteWDyyg56bdIsVg.mft (raw, json)
Hash identifier: fIKINQo2SqBNbKa8JT/LiLL3bnkaAFaQjek9yYxFErk=
Subject key identifier: 4D:25:A0:84:2E:1F:87:A8:92:52:49:53:CE:18:00:C3:08:84:8D:D8
Authority key identifier: 7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
Certificate issuer: /CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Certificate serial: 019923A00DDB3C67DE9C6756F1F60CC6308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
Manifest number: 1346
Signing time: Sun 07 Sep 2025 10:01:55 +0000
Manifest this update: Sun 07 Sep 2025 10:01:55 +0000
Manifest next update: Mon 08 Sep 2025 10:01:55 +0000
Files and hashes: 1: f5kYyrbx817xteWDyyg56bdIsVg.crl (hash: S/hs47CJJxFVlS2avFEDmkW0u2syIaqEYD358q1m6Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:0d:db:3c:67:de:9c:67:56:f1:f6:0c:c6:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9918cab6f1f35ef1b5e583cb2839e9b748b158
Validity
Not Before: Sep 7 10:01:55 2025 GMT
Not After : Sep 8 10:01:55 2025 GMT
Subject: CN=4d25a0842e1f87a892524953ce1800c308848dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:e8:7b:dd:77:8a:78:dd:e4:05:1e:37:50:
4e:5e:a4:0b:0a:ba:ae:13:3f:56:f9:83:c7:2b:23:
c9:de:4f:77:25:17:59:6b:f6:f9:ec:34:7e:0c:a9:
37:23:85:ce:9c:ec:f0:07:2f:b9:06:c1:8c:d9:bc:
3a:41:93:17:ca:9e:06:fa:53:a6:8e:67:1f:35:8b:
ec:52:f0:34:91:31:d0:5e:73:67:f8:2b:b7:1c:64:
c7:43:ef:c5:eb:16:42:2b:ef:6f:a1:d4:de:65:01:
a4:e0:bf:97:73:8a:a4:b0:f7:0f:50:1b:ba:e3:71:
d5:95:07:71:85:ee:2a:b0:af:25:57:57:1a:34:f9:
ea:7f:61:c0:a6:ea:26:2b:08:15:0d:9e:56:1e:6a:
42:93:3a:91:32:31:8c:60:52:fc:94:b1:45:d4:90:
33:e1:46:4d:e4:45:2e:66:9a:b6:c9:27:b4:ba:49:
d3:13:ac:ba:7f:30:50:9d:1c:4d:44:28:97:be:8f:
9e:ea:16:43:08:d6:95:77:30:97:01:e7:26:2f:df:
a5:12:86:e3:5b:57:e2:de:74:a3:08:ef:d7:74:22:
60:93:13:e2:9d:94:d3:5a:e5:9c:24:0f:17:ec:0f:
17:cb:4d:f3:28:80:7f:0a:38:70:f9:cd:29:7e:7f:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:A0:84:2E:1F:87:A8:92:52:49:53:CE:18:00:C3:08:84:8D:D8
X509v3 Authority Key Identifier:
keyid:7F:99:18:CA:B6:F1:F3:5E:F1:B5:E5:83:CB:28:39:E9:B7:48:B1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5kYyrbx817xteWDyyg56bdIsVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/df82fa-118d-4219-ba16-1a9683c9d6cb/1/f5kYyrbx817xteWDyyg56bdIsVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:d4:8d:8c:c8:7d:88:7c:b3:cb:1c:af:e8:3c:1f:9d:07:
15:42:74:23:18:19:79:2c:d2:7f:c7:3a:88:97:18:25:1b:22:
aa:96:7a:ac:61:65:67:2d:96:ea:b8:7a:a6:84:b0:48:4b:af:
01:1f:84:70:2b:c6:d0:18:8d:30:62:bf:3d:b4:15:81:fc:f8:
6f:cd:92:be:5e:04:8c:ae:30:8a:ab:aa:f6:bd:cf:04:6c:9b:
0e:3c:07:ec:03:e6:8d:78:df:3c:c7:8a:d6:39:5b:07:b2:bf:
59:96:f4:6e:3b:57:7f:1e:0a:b7:b5:f0:9f:eb:80:74:ea:7f:
37:63:6c:22:57:f8:3b:1b:60:d3:3d:8c:41:a9:69:fd:a4:da:
8b:65:a1:69:13:e4:d5:68:8f:c4:fd:70:b5:bf:af:ad:52:03:
ed:f4:f3:e8:70:cf:9f:dd:37:46:04:d5:61:25:22:69:bc:d6:
4c:97:06:c3:66:9c:37:c1:b5:4f:70:a7:b4:15:18:8d:67:26:
7f:fb:58:eb:d0:71:d3:28:55:12:5c:38:4d:8d:90:f4:5e:a0:
b0:39:75:68:5b:f9:39:5a:b6:10:eb:70:a7:cc:26:5a:52:34:
f3:51:c3:ae:21:31:9f:97:59:1a:80:c3:f2:21:9d:e4:14:1a:
1a:3b:dc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:57 2025 by rpki-client