Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json)
Hash identifier: ZE1dKumXgmqgMDs+Q9CMx7mKoWzjUYpsXRuwa9RGLV0=
Subject key identifier: D4:FF:D0:3B:A5:BD:49:49:1D:55:A8:50:20:85:15:4A:58:A3:85:E7
Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Certificate serial: 0198D66032321F36C6BAB9869A7BC8EF3B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
Manifest number: 097C
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: Ym1xVXetKh2uhqtkoyETXvxAf2ZYAyI8xYLJbgDV/Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:32:32:1f:36:c6:ba:b9:86:9a:7b:c8:ef:3b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=d4ffd03ba5bd49491d55a8502085154a58a385e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:1a:de:f8:30:66:e9:15:0e:a9:c8:59:68:
83:5d:36:18:95:2d:ce:13:34:a1:0c:67:b9:30:af:
be:5c:b9:43:5e:ba:41:4d:7a:d3:8f:16:9d:9d:b3:
27:5a:5d:6b:cf:54:35:d8:ad:06:15:d9:5d:fc:fa:
1e:57:e0:50:68:94:f8:d1:89:ed:a1:2a:2e:6a:d2:
f8:74:aa:41:03:68:96:7b:eb:13:96:75:fb:65:2c:
b1:88:1c:09:51:b9:5c:08:d6:ac:d4:59:da:d8:dc:
55:79:5c:16:81:df:00:4f:e8:b7:01:33:6e:64:1c:
20:ac:e1:be:85:77:e2:4d:16:e7:f7:2f:ef:da:bf:
8e:6e:56:c7:3d:f1:f2:e0:7d:c2:66:2f:2b:de:31:
98:8a:ee:b3:32:d0:c1:c6:10:93:c1:e4:12:bc:7b:
15:ef:41:7f:29:d3:63:e0:2e:e9:d7:93:4f:30:24:
da:d9:c5:3f:ce:c2:61:2a:e8:71:48:c1:3e:19:ea:
3e:1e:ce:20:21:8a:94:91:0c:9e:9d:67:08:dc:2f:
7e:a0:e0:a7:6f:f2:ad:09:a3:3e:c5:9d:24:62:8e:
58:64:ac:21:ee:0d:e5:4a:76:9d:c6:ad:78:49:14:
8f:4f:07:3b:90:2e:76:5b:83:fc:e8:c4:75:c0:cc:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:D0:3B:A5:BD:49:49:1D:55:A8:50:20:85:15:4A:58:A3:85:E7
X509v3 Authority Key Identifier:
keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:11:01:25:8d:03:fd:e5:81:30:c0:e8:1d:2f:60:5b:e7:
bd:bc:5c:89:16:e8:02:e1:f8:cd:a6:67:de:22:99:1e:76:84:
3a:99:4e:4b:eb:c7:69:2e:40:fa:b1:1a:0f:bc:97:a1:3d:ee:
76:b3:3a:27:e0:37:73:f3:76:7c:8a:88:81:5f:f5:79:f0:f3:
23:89:38:8e:db:54:26:e1:5d:36:30:26:1b:8c:85:c0:73:18:
dd:15:53:14:fb:cc:30:70:bc:6c:56:69:73:21:b9:e1:18:57:
b2:0b:36:18:3f:e0:de:d6:65:c9:db:0a:5e:73:8f:c2:c7:0a:
81:c2:2c:a9:49:06:48:64:1e:64:38:fa:31:2c:61:b3:fa:ab:
2b:92:02:84:05:4c:ec:c6:57:83:9b:db:6f:7c:b0:42:65:89:
05:ec:c6:39:87:a1:c1:12:e0:59:2a:b9:c0:88:eb:16:3b:2c:
fb:10:62:59:9a:da:f4:66:57:93:d0:fe:82:1f:b6:fd:38:19:
72:61:61:8a:af:cb:79:61:12:e4:75:60:35:97:3c:56:7d:82:
6f:e9:20:0b:ec:45:ca:d7:50:4b:30:9f:11:df:f8:70:d6:40:
fb:f1:3a:39:3d:98:1c:df:18:2a:7d:ff:8d:c7:dd:16:18:38:
78:8b:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:57 2025 by rpki-client