Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: h+QZLsHje2k0GoJovbaFzaXtu30couuejJBF1A8HkLs=
Subject key identifier: D9:9D:30:4A:3A:47:13:36:E6:7C:C3:07:B5:CE:8C:61:FB:C7:74:23
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 0198978067A23B6B15E4D4801B19495AD116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 147E
Signing time: Mon 11 Aug 2025 05:00:31 +0000
Manifest this update: Mon 11 Aug 2025 05:00:31 +0000
Manifest next update: Tue 12 Aug 2025 05:00:31 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: iykKij+YvfTHMhTMuXDTmyIGildZjhLimHjf+3X2LtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:67:a2:3b:6b:15:e4:d4:80:1b:19:49:5a:d1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Aug 11 05:00:31 2025 GMT
Not After : Aug 12 05:00:31 2025 GMT
Subject: CN=d99d304a3a471336e67cc307b5ce8c61fbc77423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:38:21:2f:b1:5e:b4:ec:fd:eb:24:3f:f5:
79:ee:8d:4c:4b:d6:4b:7b:d9:29:2d:c4:67:4c:cb:
f5:8a:8f:6b:f3:67:6e:64:a1:2d:91:71:46:92:d1:
c4:69:f6:f4:ab:0a:ac:77:ad:f0:e2:ec:cc:03:a7:
fc:cc:15:2e:db:7e:53:97:c4:e0:ab:eb:50:52:35:
19:1c:ab:71:b0:43:40:96:3c:2b:28:15:9c:96:38:
a2:58:8c:93:6b:d6:10:87:45:53:f6:8f:82:1c:e2:
0d:01:25:3a:b5:fb:9f:69:a4:9b:d5:e1:59:d7:2a:
78:33:84:6b:d1:6c:a7:58:5a:3a:2b:a4:a8:8d:66:
ac:19:c4:ef:dd:1d:85:e9:41:b4:17:f2:5a:7c:eb:
81:c6:3c:b5:2f:5f:09:f4:23:8f:6f:3a:b2:9e:92:
e5:cc:35:f9:b3:7b:a0:1c:c1:30:e5:fb:42:cf:4c:
3c:9c:02:3b:ff:ef:8e:ac:ab:63:9f:c7:6e:4e:8a:
0a:ef:35:38:97:b5:f0:64:64:1e:a0:87:8f:bf:b4:
12:8b:ea:de:90:4f:dc:c3:74:8e:4b:99:52:a1:ee:
a1:9e:ae:41:8c:b5:6f:fd:62:5c:51:4e:c5:ca:f1:
28:a9:42:b6:31:e1:8f:a8:21:5f:c0:d9:19:61:b4:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:30:4A:3A:47:13:36:E6:7C:C3:07:B5:CE:8C:61:FB:C7:74:23
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:09:e1:05:e4:b9:84:16:18:cc:a7:cd:89:ed:a8:f2:bb:9f:
86:74:51:24:a0:df:5c:93:4d:76:f3:75:75:af:6f:f9:f6:a4:
02:12:37:80:13:3b:21:f8:7d:cc:f9:ce:8c:37:d9:d8:3e:14:
89:b0:26:f4:8f:e2:70:11:54:10:66:89:4e:3f:6d:2b:33:f2:
99:95:b4:62:b9:51:c9:01:4a:d4:3c:8c:56:16:3a:2d:e2:7d:
7d:22:0a:28:dd:41:24:52:cf:f9:0f:72:32:1d:2f:b5:f9:23:
c3:b8:09:68:df:12:09:d1:e9:7d:17:67:7d:c6:3e:19:94:e2:
97:1e:7c:9e:f4:1b:a7:cb:bb:66:53:a8:aa:1d:57:e0:01:36:
43:1f:0b:5d:d5:91:de:82:f0:86:d3:9b:3d:ad:02:3c:69:57:
9e:f7:c9:89:43:d6:78:db:4a:b9:09:84:3a:f4:5c:b9:cb:87:
98:fd:80:77:8d:4c:bb:97:ef:4c:d2:65:b5:6e:bf:a3:02:0e:
d8:e3:7b:cd:da:4c:b3:72:9b:c7:7c:90:a1:f8:09:4f:f1:5e:
7f:42:ad:5a:2c:95:9a:2e:31:7a:e0:69:82:6a:f8:13:34:5e:
21:f8:1d:99:12:1a:54:56:59:e6:71:82:e7:93:3a:eb:e5:88:
02:e3:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:18 2025 by rpki-client