
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: kCmNjEPPoLXe6yEiNBXEcJLWvo5TSFNFhM/yWbb30dM=
Subject key identifier: 2F:64:67:E9:C3:1A:C3:CA:C9:30:61:FC:F4:67:E1:D7:26:77:5D:14
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 01988B0F3F691E5C055A9B8F4E8DDE6C60B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 11C6
Signing time: Fri 08 Aug 2025 19:01:28 +0000
Manifest this update: Fri 08 Aug 2025 19:01:28 +0000
Manifest next update: Sat 09 Aug 2025 19:01:28 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: PssLEDi6HubN6PHMm6vulYABu8B3MQfKGYaqzpNZFic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:3f:69:1e:5c:05:5a:9b:8f:4e:8d:de:6c:60:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Aug 8 19:01:28 2025 GMT
Not After : Aug 9 19:01:28 2025 GMT
Subject: CN=2f6467e9c31ac3cac93061fcf467e1d726775d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:f2:ba:72:db:cc:b5:f4:fa:fb:a8:3f:d7:
ff:e8:57:52:b5:9f:94:0a:90:e8:b1:a0:cf:8d:f2:
d8:67:84:99:2b:8f:85:60:51:28:42:f9:87:79:6a:
ba:90:df:aa:49:61:b0:d6:8d:83:6f:59:83:5b:97:
86:72:6b:e9:7d:3e:f2:39:50:8f:25:bb:93:c8:59:
da:5e:51:02:c1:82:78:08:82:8c:8c:f1:bb:2c:e8:
79:6d:02:74:ee:c9:9f:46:a2:cd:4b:c6:27:3c:4a:
38:4b:91:66:05:11:98:08:db:73:67:b9:c9:cb:ad:
57:eb:8b:c2:83:1b:93:22:a9:7d:a9:9e:f4:c1:9d:
c3:bc:88:3e:1c:53:8d:bc:78:4e:0b:10:73:f5:97:
78:de:39:fa:cc:e7:20:71:6e:38:be:04:fe:b2:ea:
58:fc:97:79:61:ea:04:79:ee:77:49:e5:3b:3d:7e:
e3:68:04:a4:d5:93:25:d2:3c:1a:2f:5c:b4:1c:96:
e5:4f:37:bb:f0:43:98:86:2a:5e:16:6d:f3:3b:f3:
ea:7a:3f:0b:5f:0c:32:8e:2e:64:f8:eb:19:b3:08:
8c:89:aa:86:e6:59:fe:ea:3e:53:9e:9e:38:85:7b:
54:c1:7c:fd:76:ac:41:94:ad:fd:f1:04:6c:cb:27:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:67:E9:C3:1A:C3:CA:C9:30:61:FC:F4:67:E1:D7:26:77:5D:14
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a2:bf:90:4a:2b:47:71:2f:92:d8:48:b6:44:2d:92:8d:02:
01:0b:72:26:f5:4b:28:f0:5b:06:4a:51:10:db:d1:9c:d8:39:
77:b1:5c:c9:59:91:04:7f:a2:4f:f6:e2:53:0e:5a:e9:7f:3e:
b2:a1:61:35:2f:5a:83:4b:cb:7c:34:d8:f4:3b:ed:0a:6e:cc:
5b:4d:4f:dc:c2:c6:48:de:31:45:83:fc:06:6a:0e:c0:06:c8:
6a:d4:72:12:41:70:f8:8b:75:d8:8c:a2:8a:12:8a:2c:54:73:
f3:e6:57:f3:cd:e0:fe:f8:60:d1:ea:b0:22:9b:6b:0f:41:59:
2e:73:ba:2a:b2:e1:1f:75:c3:98:fc:3a:15:30:20:85:8b:2e:
02:7a:f4:f4:d3:12:07:f5:5d:32:e2:dd:a0:61:b9:ac:24:ab:
be:05:83:cc:e5:1d:2d:e6:b5:48:2c:80:00:6e:26:a5:cd:02:
b8:66:18:8c:bc:1b:cb:b7:fa:ff:0d:c2:ed:cd:35:fc:98:5e:
6e:2a:68:9e:2c:df:6b:be:1c:a9:4e:4e:32:41:05:e9:d6:68:
f3:5f:ad:47:b7:16:c4:1c:82:3c:b0:7d:c9:2d:71:76:51:50:
60:60:95:83:61:3e:f6:13:f8:b4:82:af:f2:c4:75:f9:22:ba:
38:a6:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:07 2025 by rpki-client