Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: 8uGga1Sw4TTQcG+KNoe/jQVDoQkLALtoD9Yb4jmXemw=
Subject key identifier: 07:05:CC:68:7D:F0:81:AD:75:FF:11:61:C8:85:B3:64:09:42:57:A2
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 0198D7A8C91BBBA03B17783FAAB9ED420010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 0840
Signing time: Sat 23 Aug 2025 16:00:19 +0000
Manifest this update: Sat 23 Aug 2025 16:00:19 +0000
Manifest next update: Sun 24 Aug 2025 16:00:19 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: 6ZqgsLFnUtK12jWU26TKY9hNY4q5ppHEl6VIn6WG0Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:c9:1b:bb:a0:3b:17:78:3f:aa:b9:ed:42:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: Aug 23 16:00:19 2025 GMT
Not After : Aug 24 16:00:19 2025 GMT
Subject: CN=0705cc687df081ad75ff1161c885b364094257a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:c4:b3:bd:43:13:14:af:1d:cd:3d:08:27:
05:3f:37:0e:e8:b2:6d:80:2b:e6:82:1d:58:6a:52:
54:b2:9c:5a:00:8a:00:84:f6:c4:9a:d7:11:45:ba:
43:0f:46:b2:d5:1d:c6:e3:a2:d7:d0:6e:71:a6:5e:
e4:ea:ba:50:d6:41:15:1c:08:ae:dd:24:9d:3b:eb:
6a:64:e6:7e:4b:85:6c:91:34:d1:ba:0a:c2:20:30:
2e:8f:dc:3a:ad:5d:39:ea:e3:10:1c:dc:54:d8:73:
ed:a9:cf:31:82:46:51:e6:27:27:06:0b:9f:1c:9a:
72:af:2e:c0:9b:67:5a:7c:7f:c4:69:47:3c:75:a1:
d4:a1:84:73:f4:00:e9:59:80:b9:f5:fd:17:e6:52:
12:2b:16:91:70:7e:46:8d:79:dc:14:d9:b8:ce:23:
3a:db:2d:00:27:a4:67:dc:85:ef:cd:43:b2:6e:f3:
2f:cf:00:70:a1:11:08:bd:37:82:15:cc:62:84:b1:
aa:f4:07:fa:a9:5e:56:e8:01:63:56:46:e4:12:b8:
e5:d9:ca:df:b2:9b:ed:7a:1a:01:85:49:cb:81:12:
72:ca:57:fe:d5:23:f8:fc:36:a4:27:f4:fe:12:52:
41:c4:ca:b0:2a:11:cc:12:38:7e:ad:06:2c:b1:6c:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:CC:68:7D:F0:81:AD:75:FF:11:61:C8:85:B3:64:09:42:57:A2
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:27:cd:cf:6c:74:37:28:6a:78:10:c8:f1:59:e6:de:08:21:
45:49:0a:bd:ef:1e:fb:98:34:3b:39:0f:2a:87:3a:10:10:44:
a9:ea:cd:6b:6c:8d:c6:29:db:a9:60:52:3c:43:72:b3:be:11:
25:b4:e0:a4:3d:24:b3:aa:3c:62:a0:22:fe:05:e9:82:8a:df:
3e:03:ca:5e:ed:21:a4:35:8a:99:03:50:d0:1e:cb:4a:aa:f2:
2b:a5:52:3b:c9:c2:c8:d0:76:a2:41:23:f6:bd:c6:7c:10:32:
95:6e:fb:85:28:f5:da:b2:96:6e:42:4d:c5:aa:f8:06:45:c9:
44:a2:f7:a3:a9:6b:00:b2:da:1b:52:63:f0:d5:db:21:4a:9a:
83:aa:85:a8:29:44:20:60:0d:9c:7d:02:4f:79:e0:9e:09:af:
60:64:cd:d7:ad:df:70:7d:11:41:39:71:cd:2b:e9:96:8c:57:
7f:7c:5e:50:e5:05:bf:a7:48:22:0d:7f:36:b8:c6:6d:7b:3e:
8e:3e:6c:8d:05:45:f8:6f:89:73:2f:79:fd:07:b5:c2:3e:58:
1c:b3:37:75:ba:b1:88:33:d7:64:c9:f0:83:f3:9d:9f:a3:ca:
84:93:4b:42:b7:09:99:d7:8e:71:5d:92:50:8a:4c:d4:d0:e0:
fd:95:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:56 2025 by rpki-client