Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json)
Hash identifier: u6n0tOvSHKbASJmPmJjJ3B8iBekplLSGgs9XHNmD3Bk=
Subject key identifier: 7F:29:2A:F2:5E:5C:61:48:9C:F7:6C:26:7F:38:9D:FD:83:67:51:13
Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Certificate serial: 019922FA3FB2B8AD86AE07F7DC65E1E87E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
Manifest number: 97
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: 6O8qi9jHgwNHuD6jSofq4b5PWB//aPq/5Zawq1eOqyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3f:b2:b8:ad:86:ae:07:f7:dc:65:e1:e8:7e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=7f292af25e5c61489cf76c267f389dfd83675113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:ce:69:40:47:88:b6:1a:a8:0f:a3:0d:ce:
7b:fe:2e:00:df:30:f5:c2:e4:3c:c7:3c:fa:98:84:
95:31:82:56:be:5d:eb:7a:3f:b4:77:4c:bc:2a:19:
02:df:b8:69:49:a4:23:be:42:71:4c:9b:c2:d3:ec:
b4:44:0c:5b:95:22:b6:c4:6d:3d:b7:ce:c3:b1:a7:
04:50:1e:71:bf:cb:25:53:b9:98:8c:bf:a2:4f:e9:
a9:64:a8:f8:e9:a4:92:c4:1a:5a:c0:23:27:cb:9e:
0e:6f:34:a5:7b:8d:9e:63:62:fc:a4:b1:58:fc:00:
d1:a3:b5:10:73:67:d4:38:3b:52:02:b7:9b:c6:ab:
41:6a:2b:19:b5:88:9b:c7:b3:64:f6:2b:23:72:3d:
4e:5b:5e:45:1b:17:04:87:0a:98:9a:9d:05:0c:f5:
e8:35:53:0a:08:c8:95:79:dd:5c:dd:74:2e:9a:cc:
e7:18:f3:d1:e6:32:0c:9c:b7:5d:88:5a:27:e2:9b:
85:8f:1f:5e:1c:18:07:ad:f2:40:ca:c7:89:34:9c:
13:8b:b9:bb:67:71:ba:d1:aa:08:31:03:5b:2d:92:
8b:82:50:8e:71:7b:ea:00:42:a2:9a:fd:e4:65:e9:
c0:13:ac:5e:19:0a:c4:12:03:3f:0d:d7:27:9c:f0:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:2A:F2:5E:5C:61:48:9C:F7:6C:26:7F:38:9D:FD:83:67:51:13
X509v3 Authority Key Identifier:
keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:51:45:94:c1:0f:02:90:53:0b:87:1b:40:f0:86:62:8e:
3c:67:76:e3:8e:6d:5f:bc:fe:df:00:d4:be:46:59:23:90:73:
9a:f9:fc:32:de:e5:03:a8:ad:4f:e4:88:84:ba:5d:33:aa:a9:
e3:c3:70:45:0d:3b:df:2b:da:ce:7d:45:9a:10:c9:1c:dd:02:
4e:63:69:8d:d3:53:23:d0:f4:9b:70:5a:8d:f3:d6:44:b3:8f:
0b:e9:db:51:d2:6e:b1:df:ea:f8:d5:15:d2:8d:8d:a5:cc:04:
3a:2e:42:e5:2a:09:32:1a:02:56:ef:80:b9:45:65:47:6b:16:
5c:7e:2b:3a:1d:3d:cb:76:4a:70:b9:d7:85:a9:c1:78:50:27:
0b:b0:c9:2f:ad:2d:42:1d:7d:d7:40:9a:d3:e8:5c:09:dc:3e:
27:3c:69:45:25:78:c4:f3:77:d6:9c:20:e6:60:82:ee:87:da:
a2:20:b4:af:76:74:f6:f7:bb:1b:56:58:3b:a9:00:e3:d3:19:
ab:32:da:ba:13:02:1b:df:c9:cc:de:ed:ee:2c:4a:b5:1c:79:
6c:3a:84:9c:62:f4:d2:3e:7d:02:77:4e:44:7d:65:e4:dd:9f:
72:53:6d:b2:9e:5a:94:34:32:ee:dc:96:ee:8e:55:2b:fd:9a:
74:14:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:32 2025 by rpki-client