Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: 2pB3vZUnMO4xhY+DECI3IX2xq1pNw6iAJIpIbNOInT8=
Subject key identifier: 6F:BF:AD:F8:98:43:18:A3:0D:10:73:4F:E4:B1:03:5E:DD:53:A1:2C
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 01987ED34AE58DC722429F837535B4CE7644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1372
Signing time: Wed 06 Aug 2025 10:00:33 +0000
Manifest this update: Wed 06 Aug 2025 10:00:33 +0000
Manifest next update: Thu 07 Aug 2025 10:00:33 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: bbkUod62CeSFRgoWmqPvRYp3Y50neqkhN9fYBG/WAu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:4a:e5:8d:c7:22:42:9f:83:75:35:b4:ce:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Aug 6 10:00:33 2025 GMT
Not After : Aug 7 10:00:33 2025 GMT
Subject: CN=6fbfadf8984318a30d10734fe4b1035edd53a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:b3:a2:b9:87:fd:bc:9d:80:0e:40:d6:d7:
fc:f3:87:e7:79:f8:8f:06:66:2f:90:ad:e9:87:76:
7d:08:19:24:31:24:10:a1:6d:15:ea:ea:28:ff:cf:
1d:df:6d:cb:ef:01:9d:b6:db:ff:e4:35:b6:41:01:
e3:7f:1b:c6:12:3f:9d:e1:16:d3:d1:6c:db:b1:47:
78:36:db:36:c8:d4:5b:a9:27:ad:34:1e:df:17:1d:
40:32:a2:91:33:62:9a:7c:68:78:82:0c:32:93:cd:
01:4c:ee:07:94:3c:f5:db:8e:e6:11:1d:f3:53:94:
f5:f5:4e:3b:31:82:78:f4:ef:3a:23:bc:84:72:72:
17:f2:5c:6b:31:46:37:cf:74:9b:94:52:0b:27:73:
4a:07:39:8a:b6:72:dc:ab:9d:0a:13:07:24:6e:de:
2a:77:be:cf:98:14:d4:59:e9:a7:a7:e3:97:59:e9:
30:ad:aa:c7:65:63:98:5c:40:d2:45:2b:8b:0f:eb:
d0:29:d8:48:74:9a:af:96:c9:4c:a9:89:a6:c9:45:
82:54:2c:9c:60:3d:83:b0:15:7f:d8:52:de:b0:17:
ce:09:14:f1:28:94:26:f7:bf:50:d2:31:ce:74:b3:
eb:2b:c6:69:cb:54:24:81:39:ae:4b:4d:c9:e0:5e:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:AD:F8:98:43:18:A3:0D:10:73:4F:E4:B1:03:5E:DD:53:A1:2C
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d0:52:e8:b1:32:ee:29:ed:16:9e:f1:6b:4f:aa:77:eb:77:
7f:8f:5b:7a:b8:24:5d:a7:fc:5b:8f:42:87:47:a0:5e:a0:1f:
81:83:bd:f0:97:5f:b1:a0:dc:16:fb:98:c1:b6:27:9f:42:6b:
29:7c:87:76:9a:2f:e6:95:79:75:50:dd:c8:e5:9e:c2:ed:23:
88:4d:5d:3e:37:cb:b5:6a:6c:89:cd:71:80:44:51:04:91:f7:
47:c8:63:e9:ae:36:3e:f7:60:ee:67:33:c1:fb:15:c5:4e:c4:
39:24:fd:eb:6a:ab:a0:2c:2a:2c:5d:24:b6:be:8d:fb:62:d8:
47:f8:5b:38:99:fc:5a:6e:f8:24:05:4c:ac:4d:73:68:a1:23:
67:08:83:3b:68:d0:42:2c:33:1e:f7:5c:fc:72:cf:42:82:23:
2c:2d:e8:b2:d7:d6:34:74:f4:66:3d:48:e3:8e:97:a9:fb:12:
d2:57:0d:04:42:ca:f8:06:d4:6a:9b:d7:f7:7c:a9:e4:1c:17:
4e:6d:02:55:60:f4:37:10:a3:d9:93:51:c6:bb:39:3f:78:9e:
ed:38:a7:88:7d:18:c8:da:f3:08:bd:26:32:3e:66:f3:72:46:
27:25:07:77:68:10:0f:64:8b:b3:0b:09:30:9e:ec:8b:34:e0:
a0:1b:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:19 2025 by rpki-client