Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: yFf+UcIx6jHs55wkmNCZ5EDNkLBTSwzgG/0hcX5DsAI=
Subject key identifier: A6:4A:CA:4F:3E:DC:E3:31:1D:34:47:61:1D:2D:2C:3A:31:71:67:CA
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 019891B55A17CF12F701A9E1743E35AED491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0A9C
Signing time: Sun 10 Aug 2025 02:00:38 +0000
Manifest this update: Sun 10 Aug 2025 02:00:38 +0000
Manifest next update: Mon 11 Aug 2025 02:00:38 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: pQereXWxJbsm3B76d6wFjGL3+l08TTMHpyO0u7gUep4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:5a:17:cf:12:f7:01:a9:e1:74:3e:35:ae:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Aug 10 02:00:38 2025 GMT
Not After : Aug 11 02:00:38 2025 GMT
Subject: CN=a64aca4f3edce3311d3447611d2d2c3a317167ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:ec:e2:5a:ef:55:75:02:2b:d6:ed:8a:1c:
6b:d5:ee:71:55:a3:0a:98:a3:31:e7:d0:26:d4:1e:
33:fb:a1:00:cb:4b:6e:b6:84:ab:34:25:e1:0d:92:
73:22:3c:59:b1:39:e4:26:d6:99:90:42:c1:7f:f2:
96:86:4a:63:da:33:8a:c9:24:36:cc:c2:9a:b6:86:
8e:26:d7:0a:74:87:71:d2:50:2f:69:82:8b:e2:db:
2f:a3:05:88:6b:38:16:05:e7:6b:67:d5:e3:3f:f1:
6d:17:d9:4c:86:95:a7:ba:20:23:79:45:5a:31:44:
71:b7:d3:46:70:f8:4b:a2:9a:df:1c:9d:ac:73:e9:
1c:3d:29:81:c6:bb:00:92:b0:32:52:c4:45:4b:1f:
c1:fa:aa:ae:3a:f6:71:d7:ca:78:19:6a:bc:6c:6f:
fa:78:a1:d0:dd:b0:0f:a7:1f:35:d5:80:18:44:00:
46:49:5f:e9:13:d4:35:77:98:b7:36:a2:7d:18:7a:
19:fb:57:af:a6:95:0e:4c:60:d4:50:38:39:8a:2a:
71:ae:c0:58:3e:46:fe:87:31:55:63:db:d8:e1:25:
03:8c:3a:c7:fd:6c:0b:c1:3d:5e:da:fe:65:9f:0b:
30:26:7b:37:aa:d4:bc:85:2c:70:41:5e:6d:01:71:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:CA:4F:3E:DC:E3:31:1D:34:47:61:1D:2D:2C:3A:31:71:67:CA
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6b:78:78:09:bd:04:b6:b0:55:e5:91:7e:57:09:38:b4:c2:
ff:c3:ad:ca:57:ae:53:c9:73:e6:6a:5b:7c:ac:a4:95:98:58:
62:78:1e:8e:de:8d:89:02:a2:13:15:b8:04:65:65:17:89:9e:
c5:80:9f:3f:ae:2b:7a:45:d6:5a:3d:e9:22:c9:18:eb:86:a0:
d0:8e:a0:50:3f:64:6e:63:24:42:6c:8f:68:6b:59:9e:94:d3:
93:31:56:91:cd:6d:05:d7:46:85:fc:34:d1:06:ff:de:1e:1f:
fb:c8:46:1a:24:5a:ae:37:20:fc:bb:26:35:bd:f1:dc:1d:7f:
27:fc:6b:79:9c:f0:cf:3c:26:08:75:0f:6b:a2:a3:71:25:18:
f0:a7:f2:2f:bc:93:ce:bc:d1:ef:d4:23:9c:be:77:53:e9:56:
1e:e2:30:c1:41:65:72:4b:c4:ca:ab:f8:65:1f:76:5c:d3:a8:
1e:f1:10:df:7d:36:a0:d7:f4:7b:27:05:3f:9a:f2:20:b9:fe:
88:4c:84:17:0b:f3:05:33:e6:ae:27:3a:84:83:bf:5c:e7:8a:
40:15:80:b7:c7:df:13:27:6a:a5:bb:66:bd:d0:3d:c4:16:08:
7d:20:77:60:9b:d5:5f:64:ab:6f:19:a9:57:0b:07:b9:5e:3c:
63:62:bd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:23 2025 by rpki-client