Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: n00lQxCV+n34WFwTz9fNunRQDQLVr4fdANWNQY4U8lQ=
Subject key identifier: 59:CB:3A:61:F8:63:B7:69:91:0F:23:67:2B:00:0D:4B:20:46:C6:00
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019A4DE2216E9620553A20EA618D599F92B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 1561
Signing time: Tue 04 Nov 2025 08:00:56 +0000
Manifest this update: Tue 04 Nov 2025 08:00:56 +0000
Manifest next update: Wed 05 Nov 2025 08:00:56 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: Xy51sq23V0E4uN4KnmcMcjteoyoNj4TrfGT5mH43JS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:21:6e:96:20:55:3a:20:ea:61:8d:59:9f:92:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Nov 4 08:00:56 2025 GMT
Not After : Nov 5 08:00:56 2025 GMT
Subject: CN=59cb3a61f863b769910f23672b000d4b2046c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:cc:54:b3:a2:b2:5b:84:53:a4:eb:26:05:
b1:a9:19:a8:16:e4:18:a3:72:0a:6d:74:66:25:8d:
5c:4a:11:a9:86:3d:c3:ca:63:c5:ca:fc:8f:87:5d:
ed:7c:70:d3:eb:60:e0:ba:6b:28:56:c3:b2:d8:a9:
8e:04:25:86:e4:ea:05:7f:d1:a2:c8:22:e8:2f:db:
0a:45:03:7b:fb:1b:60:f2:45:de:f2:c0:fb:e8:e7:
2a:bc:64:91:bb:d8:12:e5:ed:5c:5d:f9:dd:f0:1f:
65:e1:65:51:2a:22:9b:01:54:c4:69:13:d0:4b:04:
f0:65:a9:0e:fe:4e:7b:69:f0:d9:74:3b:43:d7:5d:
01:cd:25:01:da:3f:93:a0:9a:b4:c4:31:c6:67:ab:
6b:bc:48:a2:4b:46:24:15:ba:13:db:28:0a:08:88:
47:c7:a8:cd:f9:e3:be:12:58:db:fb:78:8d:f5:50:
4f:39:9f:6e:6d:37:b8:23:cc:83:ca:1e:52:3a:91:
07:09:c4:3a:e0:ab:a3:d0:0d:94:77:7d:0b:92:e3:
8c:51:14:2d:72:b2:1e:3b:1a:04:2e:28:b8:51:7c:
bb:35:5b:aa:00:09:b6:d7:51:c8:d6:aa:59:fb:4a:
1a:c6:9d:b1:dd:7b:3a:03:09:87:6f:08:86:ea:1c:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:3A:61:F8:63:B7:69:91:0F:23:67:2B:00:0D:4B:20:46:C6:00
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:f4:83:98:0a:63:e6:2b:ec:7e:69:43:62:94:54:95:2b:
f3:7a:99:d2:74:9e:38:bc:dd:15:34:a2:c1:ae:95:3c:a4:1a:
13:a0:80:a0:b0:f7:8c:22:ec:84:3a:af:b7:4b:ac:c0:d8:34:
ae:0d:fa:8c:80:08:16:ea:dd:de:0d:c2:6a:40:cf:c5:e5:ed:
3a:bf:cf:54:7a:41:be:26:fd:bb:0c:7f:5e:7f:e4:1b:01:18:
8a:05:76:7e:2d:4e:ea:fc:f1:f4:5e:84:93:40:e6:b3:33:c4:
83:ff:f6:74:86:8a:5d:54:63:ea:b1:c0:81:de:1b:a9:a1:6d:
4a:89:7e:d0:56:53:ca:9d:ea:2e:80:e6:33:97:6d:06:13:c3:
bd:da:23:e9:7a:6d:75:2f:60:f3:9a:5e:07:33:c7:e5:38:8d:
6a:a6:48:a7:0c:9a:ae:23:34:e2:7b:e8:01:d0:c0:b3:f5:7d:
5c:8f:15:06:00:a3:c9:e9:5f:02:1f:f4:97:f7:93:68:24:3c:
82:13:21:20:51:8a:36:84:51:b7:91:41:20:31:be:c9:8a:95:
78:aa:b3:d0:63:1f:6e:7d:0a:7a:d5:36:6d:40:52:16:78:38:
18:ba:fc:38:ad:4d:3b:c5:ed:13:fb:60:3f:73:b1:15:00:37:
d7:c7:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:29 2025 by rpki-client