Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: pVeD/MIXN1Me1q6z2vGQrFuS0R5yhzwCgvqiIdvt2Dw=
Subject key identifier: AE:50:B0:93:CB:21:3B:B4:30:15:C1:C2:71:F0:DE:2A:F9:01:06:82
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 01988EEC5737052BC25645C1AFAB5FBAF944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 08F7
Signing time: Sat 09 Aug 2025 13:01:50 +0000
Manifest this update: Sat 09 Aug 2025 13:01:50 +0000
Manifest next update: Sun 10 Aug 2025 13:01:50 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: YblufWHYb1vpcbdnrloxZY399B3xoAhzSV2ZOqJA28k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:57:37:05:2b:c2:56:45:c1:af:ab:5f:ba:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Aug 9 13:01:50 2025 GMT
Not After : Aug 10 13:01:50 2025 GMT
Subject: CN=ae50b093cb213bb43015c1c271f0de2af9010682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:5a:7a:30:25:a5:ea:31:56:7a:0c:fb:bc:
83:77:88:4e:f4:b5:49:01:91:46:0c:97:64:01:73:
bb:97:b8:e7:d6:94:ee:c6:b2:ac:48:0a:db:e7:6b:
59:65:99:a4:1c:43:15:af:4c:83:24:9e:50:b5:50:
95:1c:ec:f2:df:3d:3c:f4:8c:0f:51:ef:46:10:83:
b7:71:58:37:2c:52:cc:41:75:e0:fa:3a:f8:ad:a0:
8a:3b:da:d3:c0:37:01:ea:f7:61:d4:ec:92:f7:03:
7c:01:c4:f4:1d:c8:be:0b:6b:fa:67:e6:a3:21:ef:
91:01:0e:55:e4:63:43:3f:38:25:16:e4:1d:9c:5e:
ac:b0:53:b5:4a:29:c1:d4:bd:e3:d0:2c:bb:8c:da:
22:ff:88:69:9d:12:8c:d8:39:fd:68:f6:44:55:09:
ff:4d:c4:3a:d1:e5:f4:43:c7:b9:a6:e5:ef:32:e0:
bc:37:82:60:45:05:ab:e4:50:24:07:0a:39:40:63:
4b:17:c4:7e:30:87:98:b7:c7:ff:52:dd:c3:7f:30:
68:f4:5d:d5:45:0c:88:1e:80:58:17:d7:e5:34:0d:
aa:86:71:9c:01:71:08:32:05:92:e0:a7:a1:91:9a:
fd:22:5f:3c:07:93:69:a3:b9:ae:01:79:97:72:cc:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:50:B0:93:CB:21:3B:B4:30:15:C1:C2:71:F0:DE:2A:F9:01:06:82
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:27:8f:67:e4:d5:1b:77:b4:46:23:80:ab:ea:8a:28:70:5e:
60:87:1f:9f:78:e7:14:ea:b6:fa:64:8a:cc:07:cf:6f:6f:ba:
2a:97:55:16:22:e2:3b:6a:93:63:3e:45:bb:9d:f7:92:40:23:
4b:5a:df:d1:3d:c6:6c:b9:77:2d:47:69:cb:64:ca:d3:18:9e:
a9:2e:30:b7:89:ab:ef:3e:b0:67:4f:1a:38:2c:a2:fc:68:9c:
ec:7f:cf:35:23:c3:b8:96:dd:ea:01:94:80:cc:69:5c:88:62:
67:37:1f:e8:93:c2:b0:cc:2a:56:76:0a:e7:53:03:26:36:f5:
6b:da:f6:e2:1b:a5:b1:a0:fc:b7:ae:7f:09:1f:1f:08:59:57:
60:df:cf:b8:ca:5b:93:d1:ba:54:73:6d:75:e5:1d:e3:fc:81:
0d:ae:df:60:1d:b9:5a:39:1f:33:84:28:60:5e:1d:32:89:5c:
cf:ed:be:e8:62:0e:6c:c6:9a:a9:a1:25:63:81:60:a2:2c:e5:
6b:05:aa:60:ec:1c:ba:41:12:3f:f2:0d:27:f3:e9:f8:1d:72:
62:ed:78:b5:17:10:45:d0:f5:ed:d9:e4:46:43:94:81:d6:7f:
35:8d:14:84:86:7a:33:b4:09:e2:79:e7:9b:ce:ff:d5:da:23:
c2:74:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:49 2025 by rpki-client