Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: AV9kFnE6dWXbLax8YQWG57XYrYM3c4EkPwNZqMJLFfw=
Subject key identifier: 0D:E8:AF:25:E0:76:AA:C4:18:BB:1F:38:BD:71:E3:AA:37:47:BA:16
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019933803A86A649C4D9F064D94AB1BD8BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 12:01:05 +0000
Manifest this update: Wed 10 Sep 2025 12:01:05 +0000
Manifest next update: Thu 11 Sep 2025 12:01:05 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: AVo6JwTdLBSgmPFu9WWzLapHdO40y8aOnBDrMGVKUJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:3a:86:a6:49:c4:d9:f0:64:d9:4a:b1:bd:8b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Sep 10 12:01:05 2025 GMT
Not After : Sep 11 12:01:05 2025 GMT
Subject: CN=0de8af25e076aac418bb1f38bd71e3aa3747ba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:96:51:c6:04:4f:9a:cb:82:3e:97:3f:7d:
09:ba:56:5d:9d:ff:ca:91:e5:9a:3d:32:ad:e4:45:
2d:8f:b6:a2:a3:4e:9a:0f:0d:79:18:ee:ae:34:48:
93:2b:71:1b:2c:9d:12:74:21:d5:2a:cd:34:22:e4:
53:e4:a7:2a:1b:43:72:8f:20:df:4b:0d:eb:4a:c4:
ed:82:37:f3:45:c8:36:cb:eb:26:1b:64:45:04:94:
8d:a6:cc:db:6b:24:2c:84:bd:5a:c7:2c:d2:d8:91:
e9:a4:6a:8a:b7:a7:4e:14:a6:67:59:87:8b:31:55:
31:ed:df:79:58:49:ca:9e:b0:f1:dd:9a:88:d0:5b:
89:43:4e:7a:04:64:07:36:0f:4c:9e:ea:6a:d4:5c:
85:6f:46:d4:5b:c9:84:e5:14:b1:b5:bf:a7:17:4e:
9f:38:ac:0e:7a:e8:34:5a:76:2d:39:a3:d2:b3:1b:
59:39:26:fd:79:a4:96:ef:b6:8d:66:02:8a:6b:c1:
bd:02:22:17:1f:e5:5f:81:04:d4:95:cc:11:fa:4f:
f4:49:5f:0f:e4:4e:49:6c:0b:fb:57:1f:95:e8:fe:
33:a9:95:01:b9:8e:a9:51:52:7c:c6:ac:76:a8:f3:
9b:e3:00:7c:24:24:0d:74:31:9b:a4:62:68:1e:15:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:AF:25:E0:76:AA:C4:18:BB:1F:38:BD:71:E3:AA:37:47:BA:16
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:15:c2:f5:9d:ee:b1:13:2a:77:91:ed:e2:71:25:64:29:
f2:a1:4d:2c:07:6f:59:0e:32:83:49:c0:f4:18:b9:d9:9a:07:
64:7b:c5:36:5f:b3:b0:25:18:1a:2d:ce:04:96:ce:a0:07:b5:
93:b0:06:cb:d4:b6:85:87:b6:24:83:89:5c:39:10:21:69:69:
4f:77:72:df:21:81:54:32:d4:cf:31:0f:be:4c:01:cd:42:53:
99:fc:d6:27:02:77:e8:9e:76:37:03:8c:52:98:b4:3c:c7:f3:
ff:5a:88:13:fd:1b:ba:79:f9:1c:5b:46:c3:05:9b:4f:b5:02:
d6:5d:13:90:af:95:65:8b:57:9d:99:ab:fe:ca:ae:06:33:5a:
e2:41:d3:6d:c9:20:fc:60:8f:58:18:d3:ec:e6:d6:5b:87:91:
8b:fe:9e:bb:8f:d1:e3:3c:b3:2d:4b:18:14:87:57:55:44:94:
da:ba:20:36:ed:95:e9:70:03:2b:58:31:18:2a:29:05:d5:1f:
a7:53:a5:52:1f:66:06:76:42:dd:64:b1:77:3c:bb:19:1e:86:
1f:61:ed:70:80:54:d6:3c:56:0d:02:9c:2e:ec:d5:69:54:aa:
c2:c4:5f:20:2a:a2:e4:78:2a:18:fd:36:54:03:eb:17:2f:61:
15:88:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:27:15 2025 by rpki-client