Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: SSZ6Bv/0v5E31dNljzUDRvOBuC+H/dwIsj49UDgL/2o=
Subject key identifier: 45:71:66:1D:36:C3:94:75:63:BC:77:C8:C7:0E:41:CF:C3:70:64:FF
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 0198D54EA15DCAFA2A48BE5D0947C4891915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: viGtAK9zQ6qtU04JgIjvHnk6/fHeo9qRDgfbC6zL+zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a1:5d:ca:fa:2a:48:be:5d:09:47:c4:89:19:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=4571661d36c3947563bc77c8c70e41cfc37064ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:61:6d:4f:66:b4:89:99:40:d1:4b:57:9a:
dd:e8:4d:2e:c1:d8:6a:25:bf:ed:29:7c:d2:1c:aa:
f9:00:66:45:c0:96:00:fa:4c:16:6f:05:57:d2:3a:
ae:4d:09:22:99:55:03:98:56:68:23:0b:fc:b2:3d:
e8:50:99:3a:70:82:2e:de:34:7c:be:2d:17:a1:97:
d0:7f:10:1a:1d:6e:6b:ed:b5:09:0b:c9:80:a8:cd:
2f:9a:6b:0b:bc:45:75:25:b9:3b:ed:cc:38:e2:7c:
d7:bc:a0:e5:65:0e:d3:e6:be:36:f1:34:77:3d:74:
bc:d0:25:79:eb:d8:79:7f:5c:ee:05:3e:5f:97:34:
5f:1d:a5:44:d4:b9:f0:67:ed:bc:8e:6b:47:a6:78:
1a:bf:f6:cb:96:56:47:46:9c:a9:87:4d:81:1b:ae:
15:ee:8d:ca:84:0f:e3:cc:31:50:77:2a:69:12:f1:
c0:6f:82:2f:8a:d6:39:97:bd:76:0d:79:74:c2:d9:
9a:a0:5a:7f:9b:2b:cb:2d:a6:2b:de:62:32:57:08:
9a:21:c1:bf:7d:85:38:59:12:9b:f0:bb:73:42:76:
58:d4:99:71:c5:43:04:02:b6:99:39:80:47:e3:d8:
cb:81:e8:6c:1c:76:2c:2f:96:ed:60:48:09:c0:32:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:66:1D:36:C3:94:75:63:BC:77:C8:C7:0E:41:CF:C3:70:64:FF
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:c2:5e:5e:81:36:5f:c6:9a:77:12:cd:ee:12:3d:4c:74:7c:
6c:00:d6:30:0f:6c:93:3b:35:9d:25:aa:3a:31:fc:01:30:a1:
d5:34:e0:67:d6:a7:f5:9c:25:60:37:0a:6e:54:2b:98:8b:a6:
cf:6b:29:8f:ac:1b:c1:93:b3:72:35:65:57:e5:58:8b:3a:7c:
6e:d4:a8:02:4c:83:8e:3d:da:54:8e:38:22:4b:2f:23:fd:7e:
cd:39:ad:21:75:84:0c:93:8a:50:79:a2:ef:8a:db:56:78:a7:
38:88:5f:fd:f3:06:22:dd:44:7f:0d:33:e7:94:05:07:ba:54:
3c:36:3e:3c:be:e8:ed:49:ed:3d:27:46:b1:f0:33:e6:f7:5d:
4b:f8:03:eb:08:98:93:2f:96:8f:84:61:83:51:2a:45:da:cb:
d1:cc:b4:86:6b:14:e2:02:69:6d:bb:01:e0:b5:e9:15:23:ee:
b6:f9:ca:bd:e0:df:1f:98:27:3c:bd:f7:54:0c:b1:fe:9d:fe:
6c:bf:9f:89:7e:9b:19:50:a2:6a:9a:83:1b:b1:a5:25:cc:7a:
7e:b0:b9:c2:16:e0:f6:5e:9a:62:fb:78:9c:a1:8f:cc:75:c7:
6d:9f:cf:13:f7:33:6f:b4:23:32:52:1c:f3:cd:6a:a6:ea:e7:
1a:1a:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:12 2025 by rpki-client