Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File: fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier: xVV/sELc7vLZD4QGcd5XcxeEmDjT6yRZnZ/bcjJr0d4=
Subject key identifier: DA:D8:FB:ED:C5:CA:BA:B6:66:91:65:38:85:FA:06:95:C8:BF:0E:FB
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer: /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial: 019897EEEE4AA2B720F8AF59041674EF25AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number: 0439
Signing time: Mon 11 Aug 2025 07:01:14 +0000
Manifest this update: Mon 11 Aug 2025 07:01:14 +0000
Manifest next update: Tue 12 Aug 2025 07:01:14 +0000
Files and hashes: 1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: 9QwETx4Wgykeb6GOCmiwwwwC7bjVpRotouCTybeswy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:ee:4a:a2:b7:20:f8:af:59:04:16:74:ef:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Validity
Not Before: Aug 11 07:01:14 2025 GMT
Not After : Aug 12 07:01:14 2025 GMT
Subject: CN=dad8fbedc5cabab66691653885fa0695c8bf0efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:f5:0b:9f:6d:e6:36:32:ad:78:51:dc:ab:
b4:ed:87:b0:ee:45:13:1c:51:25:c2:2e:1f:52:ae:
3b:d6:cc:d2:2f:4f:dd:90:f6:76:7d:70:47:d4:1d:
ed:a2:8d:10:5d:af:e6:f8:98:38:65:57:88:af:1e:
8b:d7:f9:95:69:24:b0:a1:f7:b9:01:ce:0d:6c:d3:
fe:71:04:44:34:5e:e0:cc:15:bf:a9:16:e5:02:35:
ef:ed:92:7b:4e:9f:69:4c:d1:b3:4d:5c:5e:cc:c0:
7c:f0:71:ca:ec:8b:d0:cf:96:95:da:45:7b:0d:41:
90:89:bd:40:a6:d3:a2:1a:e5:8f:4a:71:f8:d3:c4:
0c:52:83:bf:67:69:5e:74:6f:dc:4d:c5:f2:6c:04:
65:a4:6a:16:b7:e9:38:31:a6:a1:9a:d3:2c:a5:1c:
6e:d5:66:1c:b9:00:73:15:29:2a:5c:14:18:95:18:
30:36:ce:dd:db:f9:ae:16:d5:5b:66:e7:4f:b4:03:
f9:53:8a:12:67:98:63:c9:92:5c:24:aa:cc:77:30:
43:c2:83:68:2b:d5:0e:fb:2c:ce:34:c2:e0:8f:08:
31:c0:32:f6:62:a5:0c:76:5f:f9:4f:de:cc:6f:ce:
4b:6d:25:a3:d8:08:8a:3f:4a:cb:24:c8:96:11:b6:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D8:FB:ED:C5:CA:BA:B6:66:91:65:38:85:FA:06:95:C8:BF:0E:FB
X509v3 Authority Key Identifier:
keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:53:b2:bd:da:e3:55:14:25:cf:fc:ce:0e:72:65:16:72:
2b:04:67:0b:46:58:2b:6e:ba:f4:a9:81:6b:4c:1f:cb:3e:e4:
fb:58:58:b5:4b:9e:6e:8e:e6:ed:02:73:00:9b:fa:45:69:97:
4d:77:56:ec:24:14:59:84:60:ea:f3:d8:0f:3c:6a:8e:fa:ae:
39:24:0f:b9:b5:68:14:87:98:b0:43:4f:8c:37:bc:47:0e:c4:
69:5d:d8:c1:8d:55:65:4c:ed:b9:80:08:07:ff:1b:b4:0d:94:
35:2d:a2:cf:f8:ed:f4:a6:4d:a8:77:2b:b0:69:db:00:3e:2a:
d9:e2:5a:ca:53:70:bb:9a:9c:77:46:0e:37:80:25:98:58:15:
4f:d2:61:ed:46:6f:20:26:d9:bf:e5:e2:5b:e9:0f:c1:45:d2:
3b:6c:f8:4d:63:8e:95:49:2c:ae:16:cf:f9:6a:52:3a:2a:0b:
1e:67:94:90:63:e4:1e:8b:43:6a:6e:d5:88:5e:43:32:33:66:
53:96:8c:1c:fd:72:30:b4:74:c5:dc:e2:0c:a3:81:d9:e6:7c:
60:a6:cb:f9:3c:46:ea:69:be:57:a1:4e:f6:4c:cd:f9:8d:e5:
19:fc:cb:9f:3b:2d:52:b3:c5:b6:4f:87:c5:07:95:b2:17:85:
51:05:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:46:59 2025 by rpki-client