Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: l+/2FEEFYuIwoipK4uCi0d8WVXQSzX0tXv5UZA6wEGs=
Subject key identifier: 54:33:F2:34:C8:26:5F:8F:58:D4:74:E9:42:AD:82:97:03:D8:9C:00
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0198744FF220154A568555C083B5EDE56CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 09:00:52 +0000
Manifest this update: Mon 04 Aug 2025 09:00:52 +0000
Manifest next update: Tue 05 Aug 2025 09:00:52 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: x6st8H6WCWSKNBhwTmJzZmRccHOXkacjqBTb6935rPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:f2:20:15:4a:56:85:55:c0:83:b5:ed:e5:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Aug 4 09:00:52 2025 GMT
Not After : Aug 5 09:00:52 2025 GMT
Subject: CN=5433f234c8265f8f58d474e942ad829703d89c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:92:df:79:50:51:cf:da:32:95:15:f4:98:
6c:64:c2:61:dd:20:9b:3e:fb:67:4a:6e:69:31:5a:
d8:b1:73:fd:fb:90:33:e7:fb:43:bd:c2:8b:b1:be:
0b:d9:e7:c8:dc:e6:94:11:9a:bf:f3:31:4a:c7:4f:
ad:66:5e:b3:93:42:d9:bd:05:ad:2b:83:f2:ac:49:
82:62:62:34:3b:29:74:b6:4d:ba:7b:16:8c:60:b3:
10:46:30:12:82:9f:13:e6:b5:85:73:55:57:9d:8d:
50:dc:23:db:b7:97:ab:70:1d:2a:0c:a9:94:8b:4d:
59:6f:82:71:a0:d9:c8:be:99:13:6f:9b:ff:69:19:
1d:8e:5d:5d:28:ea:94:21:13:b6:41:c0:7e:30:bb:
86:c9:e9:8b:34:39:f1:cf:a6:5c:fe:b0:f6:93:73:
a6:41:84:0e:f7:2d:b2:d3:55:30:f9:22:72:59:78:
0b:6e:6f:69:c7:c3:45:21:f2:a4:e1:af:26:20:92:
1b:07:7f:c0:76:35:bf:3c:61:de:7d:ac:d7:86:b8:
57:a5:ba:f6:09:3a:8f:50:13:41:4e:18:89:c0:21:
41:d6:7a:51:78:7c:6b:90:aa:12:d8:4e:31:e0:f4:
ae:15:17:24:b0:bd:3a:0c:23:82:e5:ca:91:e2:e7:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:F2:34:C8:26:5F:8F:58:D4:74:E9:42:AD:82:97:03:D8:9C:00
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:9c:85:56:bb:31:ac:a7:f5:92:f4:70:c7:ef:8d:fa:c9:
67:59:63:ac:79:5e:47:68:9a:e2:c6:66:1c:5e:14:8d:55:85:
71:19:dc:42:38:a3:dc:73:6f:2c:79:b7:fd:0c:0d:c3:b6:c6:
93:eb:92:67:54:40:76:9c:57:7b:60:b9:bf:90:55:7d:76:d8:
59:37:53:05:50:1a:5e:3e:a7:dc:af:0b:2f:84:a9:23:d2:2f:
fb:2f:60:87:04:7e:b2:14:be:0c:58:f7:85:4b:f7:f1:f8:2a:
8f:1d:ee:3f:bf:66:f0:cb:56:f2:06:ca:88:85:65:0d:33:d4:
f1:d0:5e:8c:7b:ce:b4:b2:8b:12:04:07:23:56:80:fe:d2:59:
9a:54:2d:8d:5d:be:80:75:de:bd:60:8f:6c:74:4a:15:c5:d8:
40:98:55:47:66:ae:26:f8:4a:90:c0:fc:a2:e1:eb:1d:ee:8a:
e7:e8:3b:ad:1f:44:46:c3:13:e5:fa:7c:98:23:87:ac:c8:38:
83:6d:5b:1b:1e:48:f0:a5:f4:b0:09:f6:c4:c1:b5:9e:6b:0b:
9a:f0:1b:e3:c1:8c:f3:2e:c6:5b:72:92:69:41:cd:60:86:65:
d3:e4:57:86:2a:03:f0:ce:6e:23:d8:70:07:94:50:4d:f1:bc:
4a:1d:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:34 2025 by rpki-client