
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: 3HYd9ohe0f/FmOOu1wlbiO64sitZigNl5zqS5h/f+Zs=
Subject key identifier: 7C:0C:EE:0B:C3:8B:F2:01:BE:0B:2F:9A:37:24:8D:95:7F:67:E9:9F
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019883567F5B0C96EF85361CDAFC039932A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 0280
Signing time: Thu 07 Aug 2025 07:02:20 +0000
Manifest this update: Thu 07 Aug 2025 07:02:20 +0000
Manifest next update: Fri 08 Aug 2025 07:02:20 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: yS4mpUW0ZmvOd+6/pKAAXVHH/Ld1CSP3eRlkA4SpDh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:7f:5b:0c:96:ef:85:36:1c:da:fc:03:99:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Aug 7 07:02:20 2025 GMT
Not After : Aug 8 07:02:20 2025 GMT
Subject: CN=7c0cee0bc38bf201be0b2f9a37248d957f67e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:58:d8:e0:50:68:67:dd:4f:fb:e6:2a:00:
35:98:ba:e9:8e:7c:96:a6:1f:81:84:a4:05:d4:6d:
95:53:01:ce:73:26:0f:dc:f1:92:ed:3e:f1:21:ed:
c8:a5:a5:4e:1f:13:a2:8d:1e:34:6e:da:fa:2b:fb:
c6:72:78:08:69:7d:37:a9:2d:a9:9e:e0:82:6d:80:
d3:a1:7f:01:28:4a:1f:41:c4:8a:71:6c:d6:3f:ae:
4f:59:36:4e:18:a0:b4:8f:3d:56:62:a2:a6:fc:f2:
33:76:bf:f2:d9:ae:88:14:13:f1:da:42:93:52:a4:
bd:c5:24:c6:a4:7d:82:56:a2:ee:d5:c3:42:85:f8:
5f:75:08:ec:0d:32:70:88:e6:4f:4a:48:8e:d6:18:
d9:65:06:b2:e6:9c:66:ed:68:4d:0a:6c:c9:ca:2a:
a6:ea:9d:7f:39:9d:91:d9:9d:5b:89:96:b7:fc:0a:
f0:b1:45:e1:c3:d8:b0:8a:11:bd:cb:3a:0b:6e:64:
b8:7c:b7:ad:8c:82:22:33:d2:79:44:59:0b:c6:bc:
f3:49:dc:d4:88:c1:03:e1:b7:eb:1f:9a:cc:92:57:
55:c3:ec:c5:20:79:28:37:07:5a:49:17:70:24:e2:
0d:a8:95:61:8e:9f:42:ca:23:32:0d:1e:d3:bf:54:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:EE:0B:C3:8B:F2:01:BE:0B:2F:9A:37:24:8D:95:7F:67:E9:9F
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5b:11:ef:3c:1d:51:99:82:f0:f2:66:77:f9:8b:c0:3a:26:
b1:dd:51:40:4d:9a:ef:e9:87:c8:fd:18:06:47:9f:73:b9:d1:
88:23:cd:6f:12:7f:28:5d:d6:04:50:f2:f9:36:38:44:b0:d6:
4b:58:6e:9a:05:1f:f6:6b:13:1b:41:f8:94:a1:f3:5c:4c:ae:
07:d4:44:fd:ea:d5:89:7e:a8:60:c6:f6:45:e9:82:a5:c8:52:
3f:37:e4:25:66:13:5e:ca:e2:0b:84:12:7d:e4:29:0c:d3:f6:
45:2c:6e:b0:81:e9:4c:10:31:49:a7:f0:62:ea:dd:80:13:a2:
9a:fb:6d:b5:d3:ca:42:5f:50:bb:77:77:50:59:ca:4f:e1:d1:
ab:23:98:59:0d:3b:0c:f3:97:1e:bc:4e:5e:14:a2:33:81:5f:
1d:59:b7:ed:08:0e:a0:73:7c:23:f9:a8:5b:81:2b:9a:ae:aa:
89:b7:77:b5:e7:8d:72:ed:14:0c:22:a7:18:65:76:46:56:e2:
da:7f:5f:9f:5d:69:3d:13:5e:84:8e:64:c6:6d:cf:42:e3:6a:
fb:bb:3c:d6:51:df:ae:9a:c5:92:d8:32:12:25:fb:9e:f6:5d:
5f:e6:12:15:f8:a5:91:26:82:5c:55:da:73:74:a5:0a:c5:08:
4b:1e:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:04 2025 by rpki-client