Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: lea/8oE8ebHMPnaF25lqprM3Cx2PY1chTXcGEFZvUBY=
Subject key identifier: 8C:49:46:A4:DD:A9:3D:C2:DD:52:87:E9:66:47:0B:A3:E2:72:89:38
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 0198A04E3305B0DA2BDDF90F264B6DC701C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0D72
Signing time: Tue 12 Aug 2025 22:02:15 +0000
Manifest this update: Tue 12 Aug 2025 22:02:15 +0000
Manifest next update: Wed 13 Aug 2025 22:02:15 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: 1La2wTiENSCDIT5suCAoVQuHQS1QYGvTQEaAj1NzWMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:33:05:b0:da:2b:dd:f9:0f:26:4b:6d:c7:01:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Aug 12 22:02:15 2025 GMT
Not After : Aug 13 22:02:15 2025 GMT
Subject: CN=8c4946a4dda93dc2dd5287e966470ba3e2728938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:ff:f7:be:25:30:a0:fd:8f:da:ab:aa:2c:
a3:6e:d0:7f:f6:21:2b:a0:fd:35:99:25:55:28:49:
f5:00:51:19:54:d0:98:aa:23:57:97:8d:48:35:83:
0d:e6:53:c1:99:79:a3:ef:6c:28:fa:e7:b9:4b:a8:
22:fe:49:78:b6:87:a3:7c:b9:6e:a8:e8:33:47:fa:
1e:58:73:2d:b5:60:64:c8:62:44:de:e2:af:4e:9f:
95:1f:ba:ee:c8:6b:25:ce:7f:7f:d5:40:cf:8f:3b:
82:ca:56:51:0f:5e:35:57:50:a7:fb:64:04:37:26:
18:a3:53:a8:f1:0e:b0:92:6f:db:9d:d3:02:70:f0:
f1:6a:39:4a:a0:52:a3:66:97:8e:88:dc:1a:85:c8:
0c:8b:17:ab:21:13:58:b8:a2:75:09:78:e1:2f:8c:
e2:27:7d:f2:76:59:dc:75:21:38:c3:03:3c:36:bd:
5a:c6:a3:8e:e8:a0:cb:3f:21:d9:ca:61:22:a6:bb:
e5:57:01:8e:21:d7:92:b8:81:97:96:21:ae:cc:fd:
82:cb:a9:ff:e9:4d:2b:45:ac:cc:73:58:68:50:17:
d8:a2:28:90:25:cb:3c:99:76:e2:c0:b1:a8:23:13:
58:19:15:49:34:07:61:aa:36:17:6d:35:b4:40:5b:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:46:A4:DD:A9:3D:C2:DD:52:87:E9:66:47:0B:A3:E2:72:89:38
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:52:fb:1c:ea:f9:09:93:90:a9:9c:50:21:c9:0d:8f:0d:
77:c6:14:46:9f:9d:56:ad:b2:77:50:ab:5d:87:60:e5:d5:52:
65:f7:2c:3d:3f:91:8f:9a:df:9e:b4:e1:7f:b0:7b:bf:d8:bf:
62:35:29:0e:ed:91:17:ce:38:99:1c:11:9d:54:a8:de:16:0d:
d6:66:e6:40:b5:60:73:b2:d4:61:2c:d8:6e:13:61:18:20:cd:
bd:a2:64:53:fd:77:73:c4:bb:fb:b2:06:cc:ae:81:d9:4c:22:
9b:c7:67:a1:15:9e:51:02:7d:a2:a1:6f:96:5b:00:b1:51:ad:
1a:4c:79:24:8f:38:9e:4b:bf:71:b3:10:40:cd:19:3b:79:5e:
62:c6:49:d5:37:a3:aa:fe:0f:e6:b0:ef:d1:ac:36:2b:49:65:
7e:94:0a:ae:86:7f:cb:1d:b8:d1:16:d7:4b:71:a4:76:8a:4c:
2a:60:a6:0b:6f:fa:f5:bb:4b:41:58:09:de:f1:4b:ef:d3:47:
eb:56:ad:c1:e0:95:82:e4:9c:0b:f4:70:eb:2b:f8:f6:4f:1f:
33:2d:c9:45:04:f5:81:40:86:a3:14:4d:f3:79:7a:c8:8d:1b:
56:7e:23:cb:0b:e0:82:08:21:5e:1f:1f:0a:50:a5:0a:83:a9:
49:ae:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:03 2025 by rpki-client