Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier: StyXSmBpE4fT8Dp+cHI43eOf8gi6KbKOAdNZMICIsqw=
Subject key identifier: 18:4B:E2:65:DA:6A:8B:C7:B0:5B:24:73:66:E6:36:C5:6E:5E:77:99
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial: 0198E6418E691BB39A572C28791712EA958F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number: 15E1
Signing time: Tue 26 Aug 2025 12:01:52 +0000
Manifest this update: Tue 26 Aug 2025 12:01:52 +0000
Manifest next update: Wed 27 Aug 2025 12:01:52 +0000
Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: FbB0zxF9YGSqCD2Odl9QL2GUMS1YYSc283oLPy8NUpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 12:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:41:8e:69:1b:b3:9a:57:2c:28:79:17:12:ea:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
Validity
Not Before: Aug 26 12:01:52 2025 GMT
Not After : Aug 27 12:01:52 2025 GMT
Subject: CN=184be265da6a8bc7b05b247366e636c56e5e7799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:0d:49:8e:e2:6a:1a:37:d3:02:02:7d:38:
f3:f5:83:e1:25:94:d9:84:e7:61:f7:81:7b:2e:15:
77:4d:70:33:ba:7c:4f:64:3a:e6:c6:f3:d8:d6:6d:
96:03:7e:0a:7e:92:ee:8a:34:2e:93:10:14:2f:46:
c8:02:94:c4:1e:dc:15:f9:c0:d3:6f:b5:d6:16:f8:
b7:f9:c9:d0:44:d4:0d:b4:25:2c:8a:cd:22:43:81:
cf:fd:54:64:ad:62:a3:57:ba:4e:02:e8:de:3f:e3:
dc:4f:09:5a:0b:24:f3:4b:d9:26:53:5b:e4:3b:89:
05:e7:a3:f0:f4:2c:cc:82:68:6a:3c:8c:62:0c:74:
ee:c0:ff:16:ab:1e:7a:21:c8:68:79:bc:6c:ec:e2:
3a:c5:73:f4:f3:b4:09:94:95:3e:07:2e:76:70:0f:
9a:3b:7d:bf:b1:a7:88:c2:1c:58:0a:e0:d9:c1:65:
77:c8:e6:ac:2b:9d:ab:a2:ce:4c:66:74:90:84:88:
0f:fa:83:63:2d:a2:04:41:dd:5a:7b:62:fc:a4:20:
8b:2b:e0:6a:b8:6c:5c:f9:77:9e:b1:d3:e2:6d:76:
58:48:32:bb:02:cf:43:be:f0:57:fc:9b:2c:f0:cd:
3e:87:d5:24:6e:7b:25:bf:70:f5:54:02:4a:7f:b6:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:E2:65:DA:6A:8B:C7:B0:5B:24:73:66:E6:36:C5:6E:5E:77:99
X509v3 Authority Key Identifier:
keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:3d:a3:5d:8c:e0:c6:8a:87:f8:58:6e:4d:fc:10:a0:69:
bd:6e:68:97:cc:75:76:e6:fa:69:e0:22:b1:9b:bf:38:c7:d6:
0b:1b:84:52:e6:1e:ba:36:b0:35:a4:c9:83:79:db:28:ce:23:
2c:4f:40:95:0b:85:b0:15:d8:4b:d1:f3:c7:fd:57:1a:b6:56:
0f:e0:df:15:10:ae:06:f2:6c:93:2b:af:3b:fc:41:44:ec:88:
5c:6d:5c:ff:46:76:2d:d1:16:a3:f3:5d:82:8e:f0:67:ff:fd:
3f:c2:9e:e8:e0:3e:e8:87:6c:03:21:2c:10:f0:fd:fa:d0:f7:
04:b3:ab:0a:f4:89:90:04:1b:8c:be:8e:0e:e3:cc:13:37:4d:
e4:5d:06:51:cb:70:2a:21:ca:a5:60:d2:05:28:80:8c:83:ab:
07:6e:6f:3d:79:2c:51:c9:25:b9:a8:29:6f:c5:d9:16:3f:53:
cd:36:fa:0f:b6:eb:49:b5:d2:4d:e3:5a:88:b1:8c:f3:5a:9a:
0d:0d:30:8a:3b:06:f8:b5:ff:a5:bf:8d:26:4f:3e:fd:5b:35:
7c:ae:ea:87:7c:04:29:6d:95:47:2d:f5:fd:d2:84:26:a7:2d:
3b:01:f6:ee:dc:65:43:e4:a1:1b:91:7a:99:9d:28:f5:69:60:
88:cb:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:47:50 2025 by rpki-client