Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: dOjCbeap1ga4OK1NBruF4tMNQ8qGYTCGwuVG67v/lnk=
Subject key identifier: 13:83:E3:92:C1:41:1A:50:AE:C2:78:2C:AB:F3:19:59:F3:4F:22:9A
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 01976DE2577EACAD02D7B0F1A665799AA635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 01CE
Signing time: Sat 14 Jun 2025 10:00:39 +0000
Manifest this update: Sat 14 Jun 2025 10:00:39 +0000
Manifest next update: Sun 15 Jun 2025 10:00:39 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: +bFDTZ/BSAZbvMrR1wRlaAwRYrsnBiTo6MbKMrDvCdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:57:7e:ac:ad:02:d7:b0:f1:a6:65:79:9a:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Jun 14 10:00:39 2025 GMT
Not After : Jun 15 10:00:39 2025 GMT
Subject: CN=1383e392c1411a50aec2782cabf31959f34f229a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:96:0f:7c:3d:65:45:72:62:20:86:c3:b2:
06:df:89:42:b2:24:8c:93:50:40:9d:c4:6e:b5:14:
2a:1d:fa:ec:a6:75:ca:15:26:8c:f8:8a:46:58:5f:
be:8f:72:8a:28:22:e1:07:cc:da:46:56:46:cc:1c:
19:28:a1:ad:f3:61:28:c9:5f:db:26:7b:01:3f:76:
9a:a2:c1:4d:d9:50:39:db:4e:97:70:7d:b0:48:eb:
d7:80:30:a5:47:7d:dd:f2:83:55:7a:81:48:3b:c9:
1f:70:8d:8c:ec:68:e1:43:f7:05:15:55:38:0a:2a:
9b:1e:c3:08:1d:23:3c:4c:ad:1d:02:35:b1:fa:c4:
41:10:bd:05:87:6f:d5:ad:9d:ce:21:ad:72:4d:46:
56:5b:7d:fa:ca:05:b7:2c:36:64:1b:c6:85:79:9a:
ce:96:8c:d8:62:e7:df:d2:dc:47:22:80:69:6f:40:
fc:dd:98:01:56:cd:fd:a0:9d:e6:71:88:b1:f3:55:
46:1f:c8:6c:bd:2b:78:d5:fb:78:13:07:55:74:00:
a4:0c:44:88:40:65:09:c9:14:84:4c:15:bc:3d:f5:
34:13:7d:ac:8a:e2:54:48:55:26:79:99:97:9b:43:
eb:de:bf:28:76:ec:d7:aa:c2:ec:85:26:87:ce:7e:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:E3:92:C1:41:1A:50:AE:C2:78:2C:AB:F3:19:59:F3:4F:22:9A
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7c:bb:25:92:2a:63:7c:37:9c:d4:7f:58:bd:02:ae:2e:bd:
e2:88:a1:f0:cb:a4:99:30:f8:e3:fa:aa:11:61:d1:87:db:0f:
e7:81:ed:5f:e9:b3:cd:aa:ca:e3:a6:1e:7c:d6:23:ad:45:35:
f2:07:73:79:5f:7e:56:94:dc:17:a9:d5:7e:30:bd:2e:6d:78:
ec:5a:9f:28:96:93:85:8a:8c:d3:61:e9:df:b7:5a:7e:47:23:
f1:a9:48:10:94:31:d8:fc:99:1d:ab:24:73:c3:91:8c:cd:53:
ed:85:1c:9c:c3:fc:03:2b:57:96:68:16:25:45:c3:de:5a:7f:
d4:08:35:dd:3f:0f:74:23:2e:6b:21:b7:f4:c6:29:e9:95:2e:
e8:94:c2:3e:c6:97:1d:28:a0:48:62:ea:2c:d4:ce:3f:4e:a0:
bf:7f:0b:d6:58:f1:e8:8d:ef:62:0c:74:da:cf:ce:89:65:21:
22:06:f4:f5:32:00:93:be:d7:f8:4a:0a:b2:3d:ef:7c:0a:75:
f8:ad:3d:c3:71:39:31:61:cc:5a:3e:bb:59:a8:dd:07:c7:76:
04:ee:62:ed:58:c6:14:73:99:50:56:2f:30:0e:94:2b:ef:99:
ca:bd:38:97:a2:24:cd:9f:c6:c0:a6:71:f6:34:e7:f6:45:ae:
20:76:e2:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4ld+rK0C17DxpmV5mqY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk
MWUxNzgwHhcNMjUwNjE0MTAwMDM5WhcNMjUwNjE1MTAwMDM5WjAzMTEwLwYDVQQD
EygxMzgzZTM5MmMxNDExYTUwYWVjMjc4MmNhYmYzMTk1OWYzNGYyMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1riWD3w9ZUVyYiCGw7IG34lCsiSM
k1BAncRutRQqHfrspnXKFSaM+IpGWF++j3KKKCLhB8zaRlZGzBwZKKGt82EoyV/b
JnsBP3aaosFN2VA5206XcH2wSOvXgDClR33d8oNVeoFIO8kfcI2M7GjhQ/cFFVU4
CiqbHsMIHSM8TK0dAjWx+sRBEL0Fh2/VrZ3OIa1yTUZWW336ygW3LDZkG8aFeZrO
lozYYuff0txHIoBpb0D83ZgBVs39oJ3mcYix81VGH8hsvSt41ft4EwdVdACkDESI
QGUJyRSETBW8PfU0E32siuJUSFUmeZmXm0Pr3r8oduzXqsLshSaHzn6rLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOD45LBQRpQrsJ4LKvzGVnzTyKaMB8GA1UdIwQY
MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt
ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx
LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHy7JZIq
Y3w3nNR/WL0Cri694oih8MukmTD44/qqEWHRh9sP54HtX+mzzarK46YefNYjrUU1
8gdzeV9+VpTcF6nVfjC9Lm147FqfKJaThYqM02Hp37dafkcj8alIEJQx2PyZHask
c8ORjM1T7YUcnMP8AytXlmgWJUXD3lp/1Ag13T8PdCMuayG39MYp6ZUu6JTCPsaX
HSigSGLqLNTOP06gv38L1ljx6I3vYgx02s/OiWUhIgb09TIAk77X+EoKsj3vfAp1
+K09w3E5MWHMWj67WajdB8d2BO5i7VjGFHOZUFYvMA6UK++Zyr04l6IkzZ/GwKZx
9jTn9kWuIHbihA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:39 2025 by rpki-client