Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: PsmbisBiG2Njs8MlAFJFbAKu7Ynh0sg5bHle5Jv7qnE=
Subject key identifier: 98:A1:59:C7:0F:B5:28:69:B9:22:3C:DD:C3:77:54:50:11:A1:4F:46
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 0197CB3A120E730515DFE6F5AED4F4D0B532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 07B5
Signing time: Wed 02 Jul 2025 13:01:09 +0000
Manifest this update: Wed 02 Jul 2025 13:01:09 +0000
Manifest next update: Thu 03 Jul 2025 13:01:09 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: GXFPcMo6oC27YBnKbbtyvhs5W7H774o9ISKfdJLfps4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:12:0e:73:05:15:df:e6:f5:ae:d4:f4:d0:b5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: Jul 2 13:01:09 2025 GMT
Not After : Jul 3 13:01:09 2025 GMT
Subject: CN=98a159c70fb52869b9223cddc377545011a14f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:f1:ed:2b:ef:f6:00:a1:e9:06:67:39:54:
15:9a:ed:8c:04:66:d1:4c:94:38:59:19:1c:d7:fd:
33:af:5f:8d:07:7c:2d:57:89:5c:10:31:5d:ae:8a:
73:0b:c8:64:49:53:f9:f9:a2:2d:a1:57:dc:1c:c7:
76:9e:02:46:4d:1f:00:a6:0c:45:36:43:65:d2:3d:
87:c5:b6:71:cc:4c:c2:b2:a8:cf:40:2d:18:a7:e4:
b6:42:5c:48:21:ee:12:46:f5:ea:9a:fd:cb:62:73:
75:f5:91:cf:28:12:b3:39:40:e7:88:48:c7:ae:fa:
63:69:59:a8:dc:ee:11:3a:ed:09:92:ec:84:a2:04:
48:72:d8:1c:2a:26:5c:9b:b7:98:f5:89:a0:fc:04:
d1:9b:4e:5c:86:6d:39:92:68:8e:67:38:97:e8:49:
0f:8e:be:29:b7:8c:8e:46:ed:53:1b:d3:81:52:54:
6e:9b:b2:b2:f1:b7:87:c1:60:7d:da:e3:a4:bd:55:
27:0b:9c:24:23:88:e9:3e:b8:f7:6e:fe:c4:df:e7:
5f:35:ad:c8:d8:fd:fe:c6:a7:13:1f:4a:c5:e0:8d:
95:f5:73:e6:aa:c0:56:0a:10:07:44:3a:9c:56:e5:
10:88:cd:0a:a5:a2:f7:90:e9:f9:ae:2a:47:76:45:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:59:C7:0F:B5:28:69:B9:22:3C:DD:C3:77:54:50:11:A1:4F:46
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:fe:5b:4a:69:be:b4:c8:54:2d:68:0b:f1:9e:3f:7a:0c:
df:c4:f4:6f:d8:fb:b7:99:e1:04:21:0b:9b:4f:f0:70:c5:ea:
a9:33:39:1a:5c:92:79:d8:a2:1b:09:0d:80:3c:d4:9e:99:a4:
3f:72:5a:94:3b:22:bf:8b:d9:35:0d:dc:5f:62:41:d4:ed:72:
fb:74:13:02:5c:85:f1:48:d2:0b:23:37:4e:3d:33:ed:c7:4b:
84:fa:28:e7:e8:9d:6f:4a:0b:b7:70:4d:11:16:62:33:4a:43:
0a:ab:fb:2a:c8:a0:d6:ad:ef:78:11:70:e0:42:6f:39:7b:23:
be:e5:48:4c:af:fa:ec:1d:5e:55:3e:b1:48:d0:51:ec:6e:51:
59:85:be:ad:65:96:88:a1:c8:3e:21:37:61:2f:f7:91:c5:97:
53:39:9b:f4:4e:7d:38:97:e9:13:cf:92:d2:f8:06:5e:da:23:
a4:d0:fe:88:cb:93:09:71:9a:c2:5c:96:70:b3:8b:e0:7c:3d:
94:da:ba:b9:e0:0b:5d:f7:ed:1c:17:04:1e:c6:18:e6:3a:70:
9e:e1:fd:7f:46:d0:22:d0:db:76:09:75:97:ec:29:66:47:08:
01:0c:c8:a2:5c:d9:86:d5:d8:4a:28:41:09:f3:6d:97:e3:8d:
4c:df:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:38:57 2025 by rpki-client