Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: HrVWxyDDsps8zjrKxBaKdkYP4TbYFgbSm/h5UflFcPw=
Subject key identifier: 99:68:EE:1E:7B:33:AD:F5:7F:17:42:4C:67:61:09:AE:51:69:C2:50
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 0198D4E0276C4A9618B743E68D08F20236A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: AMG6kQGYsB0tqS6QCxTs+PeujWFKltYkw9WmgRWY/YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:27:6c:4a:96:18:b7:43:e6:8d:08:f2:02:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=9968ee1e7b33adf57f17424c676109ae5169c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:fd:87:9b:00:f5:f9:ce:8c:95:88:f2:01:
80:b0:b6:be:25:6b:ea:6d:8e:c8:a2:87:aa:fa:0d:
b6:0b:0e:92:bf:fb:e8:98:7b:83:3c:34:3e:61:a5:
65:63:64:d0:28:02:f9:e8:55:09:62:0f:f9:da:e7:
38:5d:23:54:94:c3:43:15:8e:fa:93:f4:fa:e8:a6:
be:57:7c:53:2c:db:98:9d:3d:59:0d:b4:6e:3d:1a:
d6:c9:c0:04:4e:56:43:2a:d2:60:db:5a:7d:04:1e:
95:e7:67:f8:29:b4:17:83:e8:9a:02:c0:1a:31:19:
69:ed:3e:1e:71:2e:1f:42:3e:e9:64:9b:4b:22:5f:
ae:a1:53:28:a7:91:31:f6:58:4d:bd:45:b4:43:f4:
58:fc:80:3b:0d:61:70:4d:85:15:2f:d4:0e:c3:5a:
0f:e3:d3:9d:09:6f:a2:1d:2a:4c:cc:8c:9e:78:ec:
b3:59:65:5a:39:08:ec:78:cf:af:71:9f:83:2c:b0:
6a:03:78:6b:68:56:e5:2d:d7:f5:ab:ec:19:38:65:
df:58:36:63:48:94:eb:18:96:ac:d7:db:e4:fc:10:
f7:6b:69:01:6f:3e:e1:2d:ef:58:ff:22:74:fa:22:
87:10:cd:f8:de:99:b4:4a:59:fd:a0:25:e6:0d:42:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:EE:1E:7B:33:AD:F5:7F:17:42:4C:67:61:09:AE:51:69:C2:50
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:a9:37:0f:a8:13:54:57:3a:f6:6f:2f:d5:5b:09:d1:11:
56:95:ba:89:96:54:3a:a7:86:4e:d8:cf:8b:3a:e1:bf:b0:52:
d6:1f:5c:d6:39:83:56:2e:18:ac:8e:57:3d:cb:a7:e2:ff:18:
60:a2:bb:88:75:8f:f2:a0:78:d5:cb:68:bf:a4:23:c4:29:9b:
d7:7d:a8:d2:95:54:3c:3c:41:aa:14:db:da:30:1a:6c:c0:58:
da:45:0e:da:5a:38:50:67:4b:92:b9:3c:1d:3b:18:4b:b4:f0:
ba:fa:b0:db:af:90:f3:91:35:e6:0b:05:c4:70:7f:91:5a:f3:
24:c1:3b:c9:28:1d:13:3c:7b:a1:fc:33:29:64:51:25:97:16:
eb:31:14:b7:c9:dc:56:7e:c5:0e:dd:7f:3c:2c:9a:5a:9d:3e:
89:b9:e3:9e:99:bf:8a:55:41:31:de:ab:09:a5:32:0e:be:14:
0a:f2:99:3a:86:b8:17:99:df:5a:97:7d:85:b2:0b:f6:78:85:
61:c9:57:f7:dc:04:c5:82:4c:e9:52:c5:36:50:26:57:b0:f4:
9f:1d:04:47:3a:3b:31:f1:3c:c2:95:ea:48:fc:94:39:42:29:
22:d1:d4:50:d7:35:1b:73:df:4a:29:ad:d3:74:20:8a:e7:b2:
70:37:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:13 2025 by rpki-client