Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: NkTAMBEKFx95hFrVxOxQa+CCSs1y76qdlg3UPX75Vf4=
Subject key identifier: 72:CF:A1:47:71:E6:42:48:37:FC:50:AD:94:CF:E2:F6:AA:E7:2A:78
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 019892233B5AD809966CAA7CEB635F72C0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 081C
Signing time: Sun 10 Aug 2025 04:00:39 +0000
Manifest this update: Sun 10 Aug 2025 04:00:39 +0000
Manifest next update: Mon 11 Aug 2025 04:00:39 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: Yv4L1TIel2onxE/RmF0W9n2pA9tq6eloT8Lyl2yvQIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:3b:5a:d8:09:96:6c:aa:7c:eb:63:5f:72:c0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: Aug 10 04:00:39 2025 GMT
Not After : Aug 11 04:00:39 2025 GMT
Subject: CN=72cfa14771e6424837fc50ad94cfe2f6aae72a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:f7:b6:69:2d:c9:f3:93:65:65:4d:a4:0d:
22:88:44:84:48:17:b1:b2:28:06:1d:6d:4a:07:cc:
b6:73:22:07:3e:09:ac:2d:6b:4a:32:e3:e8:31:b4:
5e:48:55:9b:a2:53:07:e8:75:c9:94:79:82:bc:9a:
82:b5:cd:0b:a5:6f:42:a4:a6:c1:7a:e2:70:bd:fe:
3e:65:18:db:03:38:db:36:f1:fe:8c:8a:bd:97:65:
f0:ff:41:0a:ff:7a:5d:ba:03:b5:20:89:3b:1d:fb:
c5:ac:cc:33:2b:bf:51:7e:1a:95:33:bc:92:d4:9b:
0d:e1:39:41:08:44:8a:34:6f:e5:51:76:12:3c:55:
03:2d:5b:4b:e2:14:f3:f1:18:19:46:fb:37:74:b3:
7d:a8:34:08:d9:4e:ed:ad:6b:34:70:5b:55:a6:ae:
c4:a4:3c:c4:c0:1f:7e:8f:7a:a6:07:b8:92:1b:0d:
55:6d:2c:19:c1:4b:b9:b7:8f:40:8c:58:e1:a4:04:
13:c7:86:df:9a:6a:d4:b1:94:1a:df:f3:bc:09:25:
8e:1a:4d:95:53:6a:f4:29:11:41:af:69:63:c3:12:
57:29:70:8b:27:95:98:34:7e:a8:4a:1b:a8:43:b0:
7c:f8:1c:1f:82:00:2d:c0:da:58:23:0e:49:0d:76:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:A1:47:71:E6:42:48:37:FC:50:AD:94:CF:E2:F6:AA:E7:2A:78
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:7d:50:36:92:73:43:d0:4c:dd:8f:2f:90:07:37:f3:40:
1b:2b:8d:15:fd:11:86:f9:25:f6:99:b1:ae:1e:2e:d5:2b:2a:
d8:11:cc:41:24:ba:30:8c:f4:a3:74:e3:21:d1:da:ed:b6:51:
f9:9b:98:c9:2d:cc:5e:09:54:45:89:e1:23:ad:6f:3a:57:74:
94:1d:82:ff:05:98:af:a0:9b:ec:c8:17:6e:0d:a3:2f:e1:d7:
65:28:c8:ba:fe:b7:bd:73:2a:2b:14:ea:32:c0:04:95:f4:3c:
2f:16:61:f1:b9:27:f3:80:78:ba:19:18:75:50:8a:7b:33:e2:
45:1e:90:81:c8:c4:35:e7:a2:4e:f6:9b:ac:ba:3d:63:19:fd:
7f:2b:25:e1:fb:e1:a3:8c:ed:1d:4b:b7:e6:5e:c9:cc:07:0a:
47:63:58:c6:f7:19:7b:bb:84:ac:97:de:0d:0d:bf:66:a2:72:
6e:03:14:85:b1:c9:48:15:9f:ca:92:b0:e2:2a:c8:12:3c:23:
d4:e5:06:0c:1a:11:c8:34:1b:8e:bb:69:3b:e3:b2:18:74:45:
58:ac:8f:e9:1e:25:0d:97:30:cd:f0:4a:18:b2:67:6f:b8:e3:
31:58:12:56:1a:73:f3:cb:db:c5:eb:90:ff:e9:2c:80:6e:29:
6a:ae:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:48 2025 by rpki-client