Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json)
Hash identifier: 5W6ELGl4htbibpr04ntXnPaB56kzF9ZLxv70szPDJQo=
Subject key identifier: 35:BD:0E:3F:EC:2A:B8:8E:90:8A:5A:3B:A4:CB:A6:4A:6D:50:3A:62
Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Certificate serial: 019896A506BEEF0EA16E519E6F7AE3CAC34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:00:54 +0000
Manifest this update: Mon 11 Aug 2025 01:00:54 +0000
Manifest next update: Tue 12 Aug 2025 01:00:54 +0000
Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: KKpZJX1ISg5x7CwS2pBtTco4McfR1trkjcCN7yQ2SjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:06:be:ef:0e:a1:6e:51:9e:6f:7a:e3:ca:c3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Validity
Not Before: Aug 11 01:00:54 2025 GMT
Not After : Aug 12 01:00:54 2025 GMT
Subject: CN=35bd0e3fec2ab88e908a5a3ba4cba64a6d503a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:c3:d5:d5:68:db:f9:92:f7:b9:5c:56:90:
36:3f:e6:05:20:6f:e2:c1:4e:bf:bb:24:cc:54:5e:
5f:60:2a:c5:8c:a5:ec:1c:8e:30:28:2c:b4:b8:6c:
00:0a:f7:95:0a:c6:7b:73:15:ba:64:59:13:a6:d3:
c3:03:39:da:68:69:bc:d9:71:4e:29:02:f8:d0:cc:
52:d9:fb:75:3b:c0:53:95:a1:56:85:25:45:d4:18:
56:cd:62:65:bd:69:b0:88:4b:40:d9:98:bb:d0:f0:
6d:16:a3:47:89:b3:99:fe:ad:46:4b:08:f7:02:d3:
ce:14:7f:43:de:41:e5:5f:b2:94:8a:0c:71:ee:2b:
cf:4f:93:b1:47:ed:83:db:78:fb:ea:a6:cc:11:92:
bb:f4:66:bd:40:97:ca:02:00:e4:d1:31:97:8a:96:
94:77:e2:df:62:fe:40:92:e8:f7:31:3a:cb:8f:fb:
dd:9c:78:38:d0:bf:a6:b2:76:89:7e:29:6d:79:6d:
79:65:9a:42:42:0f:cb:fd:fb:1b:20:a5:d3:79:07:
57:f0:13:59:65:fa:9b:c4:ad:ec:58:ed:b2:28:77:
5d:a2:8d:9f:70:de:29:35:f9:bc:55:c8:79:55:f4:
88:52:e9:e0:67:fe:e5:a5:a1:da:6e:74:7a:99:7f:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:0E:3F:EC:2A:B8:8E:90:8A:5A:3B:A4:CB:A6:4A:6D:50:3A:62
X509v3 Authority Key Identifier:
keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fc:a0:8e:8c:90:c5:37:19:e7:d8:ed:90:74:20:5d:cd:82:
80:b6:d8:15:96:6e:0a:7b:22:01:20:24:86:12:2b:fa:b0:d1:
ee:52:8d:5c:93:fc:5f:0f:72:39:8a:de:48:48:91:50:07:b3:
9e:14:fe:6b:95:99:bc:be:99:25:a8:28:0a:78:99:a6:8b:00:
e9:ca:a9:76:d0:a1:3b:b6:8a:0f:ce:5d:24:4d:83:a5:c9:ef:
6b:60:0a:71:47:06:fc:51:8f:63:07:c3:d1:f7:27:aa:c1:1c:
72:0d:6c:2d:46:a7:59:d5:95:01:5d:82:09:01:5c:85:d9:9e:
11:dc:49:12:dd:db:05:cb:2d:99:5d:f5:d8:4d:f8:1b:35:24:
d4:4c:97:be:61:88:33:9f:29:a3:69:7f:b2:04:2a:d0:85:da:
f0:84:0c:64:a3:98:cd:62:2c:b9:3c:f7:39:a1:b4:8b:f0:c6:
0f:84:15:bc:86:e4:86:1e:ec:b4:9d:b1:21:36:b0:22:4c:6c:
09:2a:82:3d:cc:00:cd:4b:32:21:8c:ab:66:53:e2:cc:7c:98:
c0:94:b2:2e:1d:cf:95:8a:9a:41:4a:54:25:d0:4f:29:e4:f3:
c1:08:62:a7:5e:c1:bc:d2:3f:f0:f3:c4:6b:9e:f4:d3:a6:cf:
57:3a:ef:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpQa+7w6hblGeb3rjysNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDRkZDljODJiMTkxYTVmMDlkNjA2Y2E1NTBjMDE3Nzg1
YWVlYzQwHhcNMjUwODExMDEwMDU0WhcNMjUwODEyMDEwMDU0WjAzMTEwLwYDVQQD
EygzNWJkMGUzZmVjMmFiODhlOTA4YTVhM2JhNGNiYTY0YTZkNTAzYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsLD1dVo2/mS97lcVpA2P+YFIG/i
wU6/uyTMVF5fYCrFjKXsHI4wKCy0uGwACveVCsZ7cxW6ZFkTptPDAznaaGm82XFO
KQL40MxS2ft1O8BTlaFWhSVF1BhWzWJlvWmwiEtA2Zi70PBtFqNHibOZ/q1GSwj3
AtPOFH9D3kHlX7KUigxx7ivPT5OxR+2D23j76qbMEZK79Ga9QJfKAgDk0TGXipaU
d+LfYv5Akuj3MTrLj/vdnHg40L+msnaJfilteW15ZZpCQg/L/fsbIKXTeQdX8BNZ
ZfqbxK3sWO2yKHddoo2fcN4pNfm8Vch5VfSIUungZ/7lpaHabnR6mX8diwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW9Dj/sKriOkIpaO6TLpkptUDpiMB8GA1UdIwQY
MBaAFH4E3ZyCsZGl8J1gbKVQwBd4Wu7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmIt
NTZlNDRmOWY5OTE0LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmItNTZlNDRmOWY5OTE0
LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavygjoyQ
xTcZ59jtkHQgXc2CgLbYFZZuCnsiASAkhhIr+rDR7lKNXJP8Xw9yOYreSEiRUAez
nhT+a5WZvL6ZJagoCniZposA6cqpdtChO7aKD85dJE2Dpcnva2AKcUcG/FGPYwfD
0fcnqsEccg1sLUanWdWVAV2CCQFchdmeEdxJEt3bBcstmV312E34GzUk1EyXvmGI
M58po2l/sgQq0IXa8IQMZKOYzWIsuTz3OaG0i/DGD4QVvIbkhh7stJ2xITawIkxs
CSqCPcwAzUsyIYyrZlPizHyYwJSyLh3PlYqaQUpUJdBPKeTzwQhip17BvNI/8PPE
a57006bPVzrvVg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:41 2025 by rpki-client