Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json)
Hash identifier: yH+JqtgyRZTmj/XHfTqXFrwFtMo+kQCsfRTsRudpMf8=
Subject key identifier: 28:FB:EB:F4:DE:A4:1D:F6:F7:79:3B:AC:F2:61:A2:AA:83:2C:77:37
Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Certificate serial: 0198D660919890448B221A2A58B22AC06DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: SHj8YSdJPvncyoB0y50ky/kfdJ2tB6xq39uJdr+SBMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:91:98:90:44:8b:22:1a:2a:58:b2:2a:c0:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=28fbebf4dea41df6f7793bacf261a2aa832c7737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:31:d0:4f:b4:81:01:9b:b0:ea:48:58:d6:
d1:d1:d6:c1:19:d7:fa:70:0a:fa:3a:50:7e:93:e8:
ab:e7:78:9b:ae:e9:fe:2d:9b:07:0a:0c:ef:b1:b7:
73:b1:24:02:1a:10:67:b1:fb:b6:77:2c:fc:61:3f:
46:62:69:e7:6e:dc:99:73:d6:4a:3d:58:3d:09:67:
5d:ae:25:81:45:4a:fb:e5:91:d1:8e:cf:b4:53:07:
69:0f:2e:c9:0a:f2:91:25:64:f7:b1:ce:2f:d5:63:
ad:1e:78:13:14:26:2c:9b:f7:36:94:d3:d3:c1:7c:
f4:31:5b:0a:ee:f4:40:34:0e:52:8b:62:88:2c:30:
5f:e3:05:e8:b6:06:f0:53:81:c2:71:85:be:4f:fe:
90:6f:e7:64:d7:c5:44:af:c3:52:7e:e9:44:1c:f5:
70:33:9d:21:71:c2:a2:6a:47:5a:28:31:91:2a:d4:
42:98:5a:be:c0:89:67:4f:39:ba:86:5f:b8:aa:17:
88:66:5b:fd:7e:16:56:96:fb:f8:0a:48:d3:ab:f6:
00:88:74:bb:59:46:49:f4:c7:02:9a:8e:96:67:4b:
fe:8a:86:27:37:4b:10:f5:f7:a1:6c:f4:ac:64:f5:
5e:c9:90:3a:3b:48:e1:1b:c8:0e:f4:fd:0b:4b:4c:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:EB:F4:DE:A4:1D:F6:F7:79:3B:AC:F2:61:A2:AA:83:2C:77:37
X509v3 Authority Key Identifier:
keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b1:ee:77:12:fa:3a:55:26:bb:c9:68:88:6a:76:0f:f6:2d:
7d:8e:6d:8f:ba:f0:fa:cb:c9:9a:bf:1c:fb:ee:da:1b:84:1c:
0a:c2:f5:2c:14:78:93:94:4e:20:5c:63:e6:a0:84:bd:30:45:
7b:4d:38:e7:b0:58:c1:4d:c7:77:57:e7:fc:d7:ff:78:35:8c:
eb:a6:5c:28:61:b3:86:ff:21:79:b1:6a:a7:ec:93:90:23:31:
95:b4:1a:e2:f2:4f:04:9a:97:b3:63:ca:7d:46:92:9f:eb:a3:
12:eb:a6:08:90:dd:bc:03:9f:3c:f0:ab:82:56:dc:f6:45:98:
30:51:a0:8f:c1:32:f5:5d:bf:b5:9a:66:7c:66:86:0a:d5:91:
3d:e8:65:aa:c5:cd:a2:07:ff:11:ee:9d:c6:44:1d:67:fa:06:
ad:4b:82:88:f2:04:bd:e7:17:9b:b1:d9:0e:ad:03:9d:ea:90:
97:bd:43:47:e8:fb:fc:16:d6:88:a3:ee:2c:53:1e:3f:32:04:
3a:b7:28:51:62:ed:07:67:b5:de:ad:10:e2:69:49:8d:d3:b5:
7d:ff:1c:7b:82:a5:cf:4f:1b:16:a1:4d:db:a1:8e:ab:27:10:
c1:17:3f:36:ae:9e:ab:ad:61:59:31:f6:68:af:a2:e9:56:c6:
13:2e:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:03 2025 by rpki-client