Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: AzAxPN3uOJ86JGQMTFDodkXy39t2c3NXw+ZczQWaY7A=
Subject key identifier: 48:5E:1B:D7:FF:F4:04:3E:51:10:B6:A6:3C:0B:8A:55:86:99:B7:27
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0197C9F08A14499D627046D9B1E9EE46B3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 0898
Signing time: Wed 02 Jul 2025 07:01:13 +0000
Manifest this update: Wed 02 Jul 2025 07:01:13 +0000
Manifest next update: Thu 03 Jul 2025 07:01:13 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: SUh2iLT3+lwMtT5fuaOVNCyPWSxHcrhU4EMCkHS/tu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:8a:14:49:9d:62:70:46:d9:b1:e9:ee:46:b3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Jul 2 07:01:13 2025 GMT
Not After : Jul 3 07:01:13 2025 GMT
Subject: CN=485e1bd7fff4043e5110b6a63c0b8a558699b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:53:1f:60:62:04:1e:2f:90:0c:f7:69:84:
02:2c:f2:e9:a9:48:de:75:d4:9a:66:81:dd:43:f9:
3b:5e:c3:47:25:5a:8c:b1:02:84:28:07:09:86:c3:
bc:ef:ef:3a:ac:71:26:b2:d8:a1:dd:16:d2:c5:06:
22:e8:f2:c9:8f:26:7e:75:a6:e0:d9:7d:fd:8b:de:
50:a7:ed:8b:15:3e:a1:39:3a:1f:97:54:c4:7b:f4:
dc:2a:70:4e:dd:b5:e6:a8:36:db:b3:f4:33:2e:c9:
ea:f7:c3:f2:f8:19:aa:2f:cf:f6:23:35:1d:e0:36:
bb:5e:ad:07:ae:b6:70:1b:05:51:56:07:db:6e:42:
63:2f:98:d2:af:53:6f:11:77:e4:5b:b3:d6:c1:64:
b2:dd:18:87:6d:b5:cd:92:2a:a3:00:26:e9:22:08:
cf:e7:e5:bf:c0:eb:ec:1f:78:20:32:ac:a9:c4:ab:
b4:51:ff:14:db:6b:e4:9b:74:26:59:84:1d:2c:e0:
73:99:64:df:f5:e5:54:2f:3b:41:f0:72:de:c4:c8:
ed:25:86:ec:51:55:f9:1c:e8:2d:55:a4:ef:44:9e:
67:1f:f3:b2:8f:98:5c:c8:93:fc:39:20:aa:8e:32:
77:0b:b9:13:33:d7:31:8f:89:49:0e:0f:26:11:a5:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5E:1B:D7:FF:F4:04:3E:51:10:B6:A6:3C:0B:8A:55:86:99:B7:27
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:2f:9f:a1:d6:11:b9:70:b8:04:0e:46:f0:35:80:15:69:
b7:6c:bf:97:a6:8e:56:55:89:63:5b:bc:ab:75:78:59:a6:65:
f2:8c:40:d3:7e:dc:56:9a:35:cd:b6:16:42:34:81:7b:37:b4:
bd:98:8d:2e:92:f8:43:66:c5:d1:91:12:7b:de:49:49:14:fc:
17:61:aa:d1:fc:1b:7f:8a:4e:24:51:d1:b1:ba:b3:2b:9a:89:
a8:dc:c9:a7:a2:b3:df:5c:7a:f4:3e:54:73:5f:21:15:6c:47:
02:1e:e1:8c:63:50:15:c3:4c:35:81:b5:57:0c:cb:2a:ae:2e:
d8:63:ee:ff:05:3c:56:c3:d1:f5:48:39:1f:78:09:6d:c7:91:
27:f8:2d:98:ed:51:26:9c:9e:2f:fb:b0:6c:e0:f9:cf:00:84:
70:84:c7:2d:6e:0a:d3:d3:b1:ab:7d:7b:25:ff:ff:d5:84:b9:
9e:1b:1b:2f:94:25:8a:a0:d7:8d:85:cd:5a:66:97:a1:5d:fe:
8b:74:46:2d:d8:70:2f:86:e4:e1:6d:ce:96:c4:c7:a2:c3:69:
ce:29:0d:6f:6f:34:8f:e5:bf:ab:59:da:6f:0e:a7:f3:ae:e9:
4a:f7:33:7f:b0:d6:e3:d0:a6:9c:93:7c:48:3c:9f:01:c3:9a:
09:d8:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:20:27 2025 by rpki-client