Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File: fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier: yKiPKVCZ6cdJ84Hu4rzzZ8ceBirzv9zYzGqNcbpq/LI=
Subject key identifier: CA:03:E7:71:45:F9:21:EF:21:9D:9F:1B:58:5B:49:09:89:16:01:15
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer: /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial: 019893A38AE7F4E143F93A788510EF4D2895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number: 0A4E
Signing time: Sun 10 Aug 2025 11:00:25 +0000
Manifest this update: Sun 10 Aug 2025 11:00:25 +0000
Manifest next update: Mon 11 Aug 2025 11:00:25 +0000
Files and hashes: 1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: HomrZzbRk2oRUJfLdCQgREBxyWeMiv5UG2nGkJj1VHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:8a:e7:f4:e1:43:f9:3a:78:85:10:ef:4d:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Validity
Not Before: Aug 10 11:00:25 2025 GMT
Not After : Aug 11 11:00:25 2025 GMT
Subject: CN=ca03e77145f921ef219d9f1b585b490989160115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:6a:c9:e8:e5:7f:68:f5:71:98:fe:b3:6f:
00:42:13:a4:41:92:be:fc:ca:72:70:a3:65:d4:d9:
1c:be:ee:32:d8:40:1b:80:bf:b9:4e:91:fc:a8:5b:
9e:df:2e:35:ab:f1:60:11:cb:76:12:82:46:c1:3d:
32:7c:9c:79:7c:ec:69:63:d8:95:db:8f:d1:73:ae:
a1:8a:2b:b2:9a:f1:b6:80:38:00:0d:5a:15:32:0d:
d2:e2:8b:a5:76:39:26:f7:7d:fb:0e:99:d9:cb:57:
6b:d5:ec:21:8e:8d:19:c8:67:b5:3c:a6:34:57:49:
24:50:48:97:8d:82:73:10:8d:81:98:7f:49:13:85:
1d:eb:e8:af:77:78:65:7e:93:53:51:f2:4c:1c:24:
43:b5:f8:cc:9f:b2:c9:3b:10:0e:ef:58:99:b4:a9:
9c:1c:79:ef:cf:9e:a5:48:0c:86:2a:e8:34:da:7c:
7d:c7:09:ee:49:29:2d:08:91:78:7c:ca:ad:a6:fe:
4b:c3:50:80:31:71:53:38:bf:f7:07:fc:08:d5:f6:
0d:4f:a5:4a:6f:7a:c6:e5:a9:f4:fd:8f:26:38:9a:
04:0b:88:41:1e:5f:73:c1:8a:da:c8:54:b4:c4:02:
7f:ac:bc:c8:7c:17:6e:6c:21:4a:47:b9:e0:c7:32:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:E7:71:45:F9:21:EF:21:9D:9F:1B:58:5B:49:09:89:16:01:15
X509v3 Authority Key Identifier:
keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:30:4f:bd:1f:9c:95:6a:e3:ad:fc:b0:c2:7b:21:d2:0a:4a:
69:4d:2d:86:5e:6a:37:e6:19:db:01:cd:b4:79:f9:0b:34:21:
8a:03:08:d4:4b:d8:49:48:56:78:b5:6d:1e:f7:6d:be:fe:d5:
72:64:39:96:be:c6:80:4f:7e:60:63:e2:9d:ca:da:64:f2:73:
aa:34:5a:ba:da:8a:b9:58:7d:5e:ae:84:7c:d4:4d:07:70:df:
a8:d9:60:45:bf:e5:a8:81:dc:a7:b7:2c:be:aa:ef:2d:29:c1:
08:28:d8:ba:04:c0:c9:8c:51:56:e2:5e:12:6e:2f:95:0f:e7:
91:ff:b3:8d:51:63:42:43:01:0a:e8:38:2f:00:a4:c6:38:88:
3b:5b:ff:1f:81:10:76:b8:4c:26:ff:ff:57:53:9b:11:b8:c0:
95:93:7f:f1:cc:02:df:80:c1:3b:fe:a8:e8:87:27:64:5c:a4:
32:b7:2b:e6:a9:a5:54:23:82:e3:27:4d:a5:99:b1:5f:be:35:
7f:88:8d:f6:3e:ac:5a:fd:02:f7:f0:9e:84:56:14:45:1e:ff:
47:76:ed:02:cc:29:5d:4b:96:52:5b:8d:5a:77:af:24:34:cc:
ca:84:61:c0:a1:51:69:9b:9e:ee:a8:f2:23:5d:c2:59:d6:14:
1e:c1:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:27 2025 by rpki-client