Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier: oxgBpVhZVz+j+dCa6ZBDtfS9s/GES37nFzM1ceNf48s=
Subject key identifier: C7:D9:BE:3A:CA:8A:7F:7A:04:C2:E9:69:BF:BD:B4:CD:4A:80:EA:E1
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial: 019879AE93CE846654EBB24FAB2AEFB990E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number: 0D02
Signing time: Tue 05 Aug 2025 10:02:20 +0000
Manifest this update: Tue 05 Aug 2025 10:02:20 +0000
Manifest next update: Wed 06 Aug 2025 10:02:20 +0000
Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: mg0Md5gknNB1vmfq+nAnD7ThdHo5GDz/G91xy4KXGQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:93:ce:84:66:54:eb:b2:4f:ab:2a:ef:b9:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Validity
Not Before: Aug 5 10:02:20 2025 GMT
Not After : Aug 6 10:02:20 2025 GMT
Subject: CN=c7d9be3aca8a7f7a04c2e969bfbdb4cd4a80eae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:a0:20:ef:d7:e2:b7:b5:ea:a7:0a:af:27:
bf:69:1b:13:57:4f:70:31:ec:bb:c0:ba:df:4b:fd:
a8:71:89:3a:0f:5d:e1:d7:20:62:b0:53:4f:31:ef:
0b:48:0f:a0:f2:b1:2a:48:6c:94:4f:bd:61:b7:c8:
cc:5b:7b:ff:8b:95:38:c6:70:fd:60:fd:02:e5:33:
42:50:ad:de:9d:93:45:00:a4:6d:80:3d:70:ce:23:
28:14:25:a2:e6:ec:4c:37:47:e1:8b:64:40:11:9d:
91:af:4f:ac:bc:42:01:3c:a3:39:0d:92:2c:be:6d:
6c:bc:d2:c4:9b:c8:61:2b:32:fd:cd:e6:5b:75:2e:
d6:cf:f2:85:92:50:4a:62:11:82:5b:8e:4f:cd:c2:
ff:b7:ff:57:75:a1:2f:82:e3:4c:96:60:b4:7f:9f:
a2:85:d5:b4:6a:dc:fb:f6:ec:93:e4:81:fe:d9:f1:
80:27:27:a7:2a:ad:98:ce:5c:9d:49:28:99:3a:10:
93:7d:aa:7b:2f:b8:cf:b2:c4:2e:c5:da:71:1e:de:
4a:b7:e9:66:ad:04:73:ef:2f:10:c0:99:55:65:63:
eb:f4:6d:c3:02:59:fd:8b:bc:dd:e5:d6:eb:fd:62:
17:74:d7:4e:d5:5b:84:5a:a3:e0:1c:c8:e2:1a:a8:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:BE:3A:CA:8A:7F:7A:04:C2:E9:69:BF:BD:B4:CD:4A:80:EA:E1
X509v3 Authority Key Identifier:
keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:79:39:05:2b:c9:15:fc:72:37:16:1a:1f:3d:66:78:23:
c7:42:d8:75:76:25:fc:d1:51:c0:c4:02:5a:e5:af:c4:ba:9d:
27:af:72:c4:e9:1e:1d:6a:7c:e2:80:6d:ba:40:fa:6b:03:30:
42:8e:1b:47:45:f2:c6:09:90:d8:ed:c4:0c:cb:f7:a1:5c:4c:
3b:d8:55:27:a9:05:3b:4f:40:19:ef:06:cf:93:88:6c:46:4a:
73:95:9a:92:99:33:66:7a:b1:06:c7:86:07:d9:a7:e7:3c:d4:
41:a8:c0:d6:bc:ad:bb:48:2e:3c:37:5d:27:69:f8:19:5a:62:
18:25:33:d2:49:5b:43:3b:e6:58:2d:b5:71:00:df:9e:32:8e:
9b:9b:fa:b9:21:29:74:49:3d:21:4c:f3:5f:d3:e6:4b:c6:b8:
d1:68:70:36:93:ea:3b:6e:5f:32:18:f5:76:82:5f:fb:23:1f:
50:00:f0:ba:10:77:5a:7c:35:f4:a3:e5:c9:c4:28:a5:f1:81:
e5:bd:60:36:97:40:bd:25:f2:47:87:7b:9d:98:88:2a:33:b1:
dc:cb:ee:73:24:ce:43:4c:c8:cc:1a:59:08:d1:3d:c0:e6:dc:
2c:7a:c3:7f:99:2a:c1:72:3a:a2:5a:b0:2e:89:d1:2a:54:ec:
74:fc:88:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rpPOhGZU67JPqyrvuZDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYTQxZGQyZDUyNzVmYjZhNTk2YjI2MWEwMjdjYzhkN2Y5
ZjM0NmMwHhcNMjUwODA1MTAwMjIwWhcNMjUwODA2MTAwMjIwWjAzMTEwLwYDVQQD
EyhjN2Q5YmUzYWNhOGE3ZjdhMDRjMmU5NjliZmJkYjRjZDRhODBlYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5qgIO/X4re16qcKrye/aRsTV09w
Mey7wLrfS/2ocYk6D13h1yBisFNPMe8LSA+g8rEqSGyUT71ht8jMW3v/i5U4xnD9
YP0C5TNCUK3enZNFAKRtgD1wziMoFCWi5uxMN0fhi2RAEZ2Rr0+svEIBPKM5DZIs
vm1svNLEm8hhKzL9zeZbdS7Wz/KFklBKYhGCW45PzcL/t/9XdaEvguNMlmC0f5+i
hdW0atz79uyT5IH+2fGAJyenKq2YzlydSSiZOhCTfap7L7jPssQuxdpxHt5Kt+lm
rQRz7y8QwJlVZWPr9G3DAln9i7zd5dbr/WIXdNdO1VuEWqPgHMjiGqi3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfZvjrKin96BMLpab+9tM1KgOrhMB8GA1UdIwQY
MBaAFH6kHdLVJ1+2pZayYaAnzI1/nzRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYt
ZTBkOTkyOWI4ZDAxLzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYtZTBkOTkyOWI4ZDAx
LzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWR55OQUr
yRX8cjcWGh89Zngjx0LYdXYl/NFRwMQCWuWvxLqdJ69yxOkeHWp84oBtukD6awMw
Qo4bR0XyxgmQ2O3EDMv3oVxMO9hVJ6kFO09AGe8Gz5OIbEZKc5WakpkzZnqxBseG
B9mn5zzUQajA1rytu0guPDddJ2n4GVpiGCUz0klbQzvmWC21cQDfnjKOm5v6uSEp
dEk9IUzzX9PmS8a40WhwNpPqO25fMhj1doJf+yMfUADwuhB3Wnw19KPlycQopfGB
5b1gNpdAvSXyR4d7nZiIKjOx3MvucyTOQ0zIzBpZCNE9wObcLHrDf5kqwXI6olqw
LonRKlTsdPyIgA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:23 2025 by rpki-client