Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: c8855kmO+I1wrqw8cJs8e3QXaKbsD1c+Kv889mw4nNY=
Subject key identifier: 19:F8:A0:24:3D:07:29:BE:4E:8A:CC:17:AB:2E:76:FA:B5:7B:24:00
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 01989E5E774C956392F0A9FA093743CF7CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0734
Signing time: Tue 12 Aug 2025 13:00:47 +0000
Manifest this update: Tue 12 Aug 2025 13:00:47 +0000
Manifest next update: Wed 13 Aug 2025 13:00:47 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: pk17vyFoOdvix/L+hRd+TP4bJTPun7mVU9FxCLkC1bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:77:4c:95:63:92:f0:a9:fa:09:37:43:cf:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Aug 12 13:00:47 2025 GMT
Not After : Aug 13 13:00:47 2025 GMT
Subject: CN=19f8a0243d0729be4e8acc17ab2e76fab57b2400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:2e:31:a2:6e:3d:19:e5:fb:e6:89:64:b7:
4a:4d:8d:ec:42:36:96:b5:30:50:42:41:4a:f1:bb:
70:9c:74:77:d3:a8:3d:48:9a:3e:4c:66:1d:be:d8:
31:67:2a:72:36:b0:fd:39:c5:f6:41:50:49:57:d7:
47:1e:33:ec:06:41:52:c7:3e:f7:e6:bb:5a:75:5c:
4a:c0:6f:9e:60:28:b0:81:a5:6e:0f:e2:8e:48:17:
29:18:c5:08:36:ae:91:00:f3:e9:31:fd:1b:88:e9:
48:36:ed:05:25:cf:a2:2e:7f:ce:1d:21:81:7d:98:
9a:19:84:48:80:a8:e5:5b:f5:99:5d:f3:21:e1:78:
1f:b3:71:97:35:be:68:09:0d:fa:54:9e:a5:59:c4:
02:f3:41:0f:b0:89:5d:b1:7f:39:3b:2e:d7:34:63:
59:51:13:2f:4a:de:3a:27:93:b0:4f:db:5c:51:92:
22:df:5f:fa:37:a6:7c:ce:f1:0d:00:ae:38:c3:5f:
a6:4b:59:6a:26:aa:a8:69:18:c2:c6:47:ed:78:a0:
90:b1:d7:84:60:4d:7b:0b:a6:f7:de:9d:71:bc:2e:
b1:b8:80:ab:76:b5:db:6b:01:41:6d:4b:ca:de:93:
58:89:7b:0c:ed:7b:90:00:79:94:03:86:bf:46:66:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F8:A0:24:3D:07:29:BE:4E:8A:CC:17:AB:2E:76:FA:B5:7B:24:00
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2c:4b:6d:ce:db:7b:92:d5:4b:0c:03:f0:11:f9:41:33:04:
84:a2:2c:fc:73:cf:39:14:21:6d:5f:fa:a7:0d:92:ad:26:6c:
7c:b3:b9:eb:6a:13:c1:68:68:cd:a7:68:2e:af:00:2e:6d:94:
f7:7d:02:37:56:9d:12:93:02:fc:d3:cf:88:c7:1c:22:f6:9c:
4f:93:b3:37:5b:3a:7c:5c:d3:c7:5c:5a:9c:00:8f:80:f8:b7:
1c:41:1e:85:a2:22:77:a4:47:2c:25:3c:c9:14:56:e2:2b:25:
e5:46:b9:73:06:dc:96:96:19:35:3a:1c:b6:35:18:35:fa:dd:
5d:d2:1d:9b:25:5d:88:97:09:e3:6f:c5:ac:98:6d:da:50:c6:
48:c8:3c:b7:9c:30:d6:7a:38:bf:10:80:49:68:8d:a4:ce:04:
0c:24:6a:78:a9:fb:ae:65:dd:04:a0:97:eb:0e:7a:61:fc:d2:
9d:b1:b3:9f:33:3f:31:ed:fb:c8:c7:74:a3:30:a5:a0:e8:0b:
7e:6e:18:fa:72:97:9a:58:9d:26:3a:fa:94:99:cc:9f:95:ce:
38:96:64:9b:f8:8d:c1:43:d4:aa:77:ea:32:83:a4:87:b2:b4:
dd:3b:02:1a:45:05:0b:30:cb:52:c5:83:b2:63:a6:09:46:3e:
80:61:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:18 2025 by rpki-client