Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: jUWEoBlODfDj5BIrli2uP7dxlnUj5+LMxC6RJ9niEJ4=
Subject key identifier: A4:CE:14:EB:5D:5A:3B:14:CD:EC:D1:7C:3E:9A:C8:CA:4E:9D:9B:ED
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 01988EEB0AE8DA3DA5BA743DD3F19E7A0B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 02B8
Signing time: Sat 09 Aug 2025 13:00:25 +0000
Manifest this update: Sat 09 Aug 2025 13:00:25 +0000
Manifest next update: Sun 10 Aug 2025 13:00:25 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: WD4Qaa3gx8oqz2kyIFa+c3KAcbNLquzuOYvJvHk3SfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:0a:e8:da:3d:a5:ba:74:3d:d3:f1:9e:7a:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Aug 9 13:00:25 2025 GMT
Not After : Aug 10 13:00:25 2025 GMT
Subject: CN=a4ce14eb5d5a3b14cdecd17c3e9ac8ca4e9d9bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:26:dc:13:9a:45:08:f1:f8:d0:af:69:17:
34:d1:12:bb:66:8d:4f:fd:13:32:ed:72:e6:5c:e7:
45:3e:65:51:96:8a:87:09:4e:4e:96:dd:5a:e3:a2:
f4:df:38:00:b3:68:86:59:d6:4f:20:de:43:e8:37:
72:16:bc:3b:16:84:b3:b8:73:26:f7:a4:ed:f8:53:
69:69:5e:92:f9:ab:60:2b:91:f7:f8:ad:73:f6:75:
f3:e2:39:27:4b:7a:6a:81:0d:16:30:df:00:f7:ba:
f0:40:f0:95:3e:ad:d7:fb:b5:3b:a5:2f:1b:ae:d5:
d7:ce:04:ce:76:e2:66:b9:f9:e2:af:44:58:9f:00:
91:d4:c1:b5:98:f5:3f:5f:8d:95:88:97:ec:7b:04:
fc:7f:70:09:55:7a:1a:d5:97:f9:a2:40:fb:ad:a7:
c3:b9:53:8d:12:66:a8:b0:82:c1:c2:3f:b8:1b:59:
2d:bf:a5:fc:9b:b2:a9:b4:a8:b9:fd:1a:16:33:2e:
60:29:4f:1e:68:8b:d3:8b:e4:f2:eb:4d:5e:82:ec:
ba:63:a1:f4:d1:5a:f6:45:d9:24:ce:97:31:15:fa:
70:dc:74:34:85:1b:87:f6:12:39:5d:a8:55:25:09:
63:9f:33:85:33:51:ae:d3:8e:35:11:26:a2:38:df:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CE:14:EB:5D:5A:3B:14:CD:EC:D1:7C:3E:9A:C8:CA:4E:9D:9B:ED
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:41:15:56:ff:b9:3b:77:3b:3d:f5:e7:88:12:8f:dc:1b:23:
02:3a:36:ba:03:5a:65:5c:77:5f:54:da:b3:7d:5e:f7:bf:80:
68:14:8c:c3:28:85:70:d6:04:f9:81:9e:2c:95:01:df:c4:3a:
36:5c:d1:4a:37:73:5b:9e:5b:47:18:1f:fb:66:2e:f6:be:d6:
f0:a0:a5:cc:e9:98:74:7c:ea:91:1d:f3:7c:14:20:9f:a1:39:
0e:5f:72:ab:07:9f:89:af:5d:84:fd:1d:a8:41:02:57:c4:d5:
a3:eb:cf:7b:d9:6e:de:6d:92:d3:c9:68:8a:46:30:3d:60:16:
84:4a:f1:c7:67:ee:38:88:eb:99:30:6a:57:d2:13:57:34:ae:
29:32:26:41:45:a8:e5:8d:8c:c7:ed:cd:45:e0:5a:bf:ea:36:
7c:31:4d:39:be:de:5d:97:5b:ee:3e:77:29:00:77:f2:80:4d:
96:08:1c:67:67:45:56:65:86:d4:9b:5c:02:b0:7b:79:97:89:
a4:11:70:cc:f2:f7:fb:e7:c3:18:15:a6:ea:48:2d:6e:4a:0c:
cd:bc:a5:42:16:e4:9e:6d:17:42:a1:bc:23:23:3a:5c:5e:35:
03:53:9b:2e:24:4d:b5:a2:33:78:38:ab:80:44:1a:52:19:a9:
ef:da:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:35:32 2025 by rpki-client