Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: Tm17q5lE/verERjLz8YeYp26G18w5CwSsrzah7kmvQ4=
Subject key identifier: 57:92:5C:B8:29:65:1D:DD:2A:6F:A5:8A:3B:DA:C2:2C:84:22:4C:D5
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 019897810B489DC531FE3FF2036E5B3A2E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 1340
Signing time: Mon 11 Aug 2025 05:01:13 +0000
Manifest this update: Mon 11 Aug 2025 05:01:13 +0000
Manifest next update: Tue 12 Aug 2025 05:01:13 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: jIjra/SDEPhi9kOr9uV5Hh39rlz/vSzTtN3pwh74LPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:0b:48:9d:c5:31:fe:3f:f2:03:6e:5b:3a:2e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Aug 11 05:01:13 2025 GMT
Not After : Aug 12 05:01:13 2025 GMT
Subject: CN=57925cb829651ddd2a6fa58a3bdac22c84224cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:fb:3e:6e:54:fb:9d:b2:0c:1b:6a:3f:9b:
1c:13:f5:98:66:0e:3e:a4:55:aa:ef:9c:7b:f6:72:
f2:75:9f:29:ed:af:c1:83:3f:5f:8b:2c:2d:eb:9a:
f9:bf:33:80:c1:6d:df:a5:b4:2f:3a:90:8d:fb:3a:
eb:0a:c5:c4:3b:e0:44:e9:69:3e:b0:ca:48:11:bb:
a4:1a:ce:fb:ff:ee:69:30:42:da:00:e5:f6:d2:d1:
71:e0:90:17:d1:df:7a:c0:49:f4:d1:30:d0:ee:6c:
0d:3b:37:1c:51:31:e9:47:7d:32:40:fe:a0:46:75:
1c:3a:f7:a5:bb:61:00:91:ec:ca:b4:f3:26:52:84:
62:11:66:4c:87:a7:86:7c:e1:a6:5d:75:00:61:c2:
e8:00:3d:5a:21:c6:58:b8:e9:4c:f1:be:2e:56:83:
2c:f5:a5:8d:fa:96:1b:50:a3:d2:30:f7:b1:48:c4:
7d:5f:bb:e7:d2:d7:37:b1:58:63:6c:ba:93:ce:a8:
a5:38:72:7a:60:f5:7d:28:47:f0:9d:dc:d0:43:fd:
8b:33:72:e6:9d:bf:66:b7:fa:69:b0:37:4e:4c:c8:
8a:42:54:23:13:b7:7b:b9:b1:0b:25:64:fa:ce:bd:
f6:29:94:8b:19:3e:cb:bf:06:fa:b2:4f:c9:ad:05:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:5C:B8:29:65:1D:DD:2A:6F:A5:8A:3B:DA:C2:2C:84:22:4C:D5
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:2b:78:d6:dc:d4:be:18:6d:44:56:f4:dc:7d:18:b1:24:
66:d7:82:51:d2:c6:66:c1:52:4e:64:dd:3f:f3:4a:59:92:b8:
f2:20:d0:38:af:3c:f0:3a:94:54:de:4c:1c:a2:05:e6:f8:c6:
8b:73:66:c8:0a:15:66:c9:91:96:56:b8:11:65:0a:b2:64:40:
ee:93:9f:e4:82:96:c9:61:44:7a:c5:5d:7c:d8:f0:d8:3f:39:
11:23:5e:d4:4c:56:41:9a:2e:1f:e6:49:23:fe:de:cd:00:d3:
f1:e8:93:cb:1d:09:e7:8f:89:dc:92:81:52:6b:6a:14:04:9b:
00:3e:44:d8:dc:66:89:09:7f:6b:2b:06:0f:d9:4f:d5:41:05:
8d:b7:dc:37:fb:e8:68:3a:dc:28:53:7c:7e:91:7d:11:6c:af:
6b:d4:09:db:f4:84:5c:51:42:d6:d7:be:56:ae:0d:12:66:3d:
d4:69:bf:6f:b6:6d:74:ad:2d:65:2d:b6:93:72:1c:59:d7:2a:
d5:42:7a:c3:c2:49:d1:30:ad:16:37:0c:8e:ce:43:64:b9:28:
48:9e:fe:aa:60:56:44:77:2d:f4:61:08:d0:a6:bb:db:af:64:
73:95:bd:ee:ce:95:07:fd:ba:47:db:da:c8:bb:65:14:7f:26:
b7:1e:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:24 2025 by rpki-client