Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: K+HCw/qVHiK5X6l+dP5W6towQJndhQfmwNRWJaG1lmc=
Subject key identifier: 5D:CA:24:1F:B4:2E:04:C5:BA:EF:92:D1:72:08:00:0A:8F:93:82:26
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 0198D6601B79573F7A8908BE1F2191E6A771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 02AB
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: XdA5IXd3En9eL3V+LBgH/oAU+TgCHZlNACJ9Ban6oeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1b:79:57:3f:7a:89:08:be:1f:21:91:e6:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=5dca241fb42e04c5baef92d17208000a8f938226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:0c:9a:e3:eb:b9:18:93:a8:c1:fc:0d:0d:
73:d9:d8:32:6a:04:ba:ec:70:6f:23:d4:59:4a:62:
8b:09:1b:a5:e8:33:15:4a:21:4d:df:aa:1b:ac:d1:
92:b4:9c:ae:72:98:c7:72:db:a9:83:96:c4:48:d9:
f1:fe:4c:b9:91:96:ee:2a:11:66:10:78:09:c1:10:
98:ab:fe:46:a4:f4:64:c1:34:29:2d:8c:98:19:bb:
19:0d:bb:ca:b6:bc:a8:0e:5e:c1:f4:d7:e8:ac:95:
95:cf:53:42:7e:f4:d7:17:29:be:7a:d9:62:15:4f:
f2:7b:2e:fb:7a:c6:8f:3b:e8:7c:08:36:9a:a3:eb:
9c:d6:0c:da:11:cf:d5:58:e4:b1:89:4a:2f:b1:2b:
f7:ee:87:70:5e:b7:86:4f:cd:1f:a3:9f:80:e6:54:
22:a8:fc:f2:0c:86:2b:84:3e:e3:ec:ff:77:9c:e7:
ce:d4:3b:58:00:6a:09:68:26:1b:ca:e8:18:af:4e:
64:a4:b5:47:33:54:ba:e7:af:8f:15:d2:35:c1:f8:
49:7c:fc:5a:fe:a3:91:6e:70:92:2d:6e:ee:4c:20:
e3:37:6c:88:d4:49:cf:30:7a:ea:b8:5c:5a:8d:71:
de:6e:a3:41:89:bc:53:81:01:12:c9:c1:c4:e2:58:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:24:1F:B4:2E:04:C5:BA:EF:92:D1:72:08:00:0A:8F:93:82:26
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:55:74:d0:29:e0:11:38:db:8e:21:ba:f4:4a:0c:16:27:
31:e0:10:7c:e4:56:7f:62:18:f5:46:35:3f:b8:e2:a2:44:66:
93:44:90:1a:20:74:39:c9:45:46:24:12:f8:b6:bb:59:c1:a1:
91:f9:81:e0:bb:92:28:5c:fd:11:5b:5e:fd:db:6b:ee:ee:ed:
ce:b2:8d:12:0a:85:7a:05:92:86:a6:99:c0:88:2c:7f:2b:ed:
18:eb:53:0d:76:89:d4:17:95:ba:4c:84:b5:4a:8c:9b:67:a4:
40:1f:80:16:ac:3b:d5:c6:a7:e4:d3:3a:cc:a6:4c:27:40:1f:
49:03:6a:9a:17:10:9b:08:3b:63:67:7c:d5:cd:42:47:b1:a1:
c9:2b:fc:76:ae:af:7d:41:d0:51:bf:3e:f5:96:fb:21:24:d2:
7e:c4:32:27:e2:f6:f8:b0:47:69:48:28:e0:9a:9a:39:95:f6:
26:49:97:ac:dc:bf:a0:33:af:73:8e:d5:86:0b:b9:ed:49:26:
2f:fe:cd:f6:d4:dc:26:50:70:4e:97:13:cd:c9:59:12:06:43:
8e:21:90:0e:bc:25:e8:25:95:a9:d3:c7:ba:24:64:1e:ad:dc:
79:b7:38:21:76:0b:fc:91:e9:97:60:e8:5a:91:5f:97:65:b5:
26:71:44:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBt5Vz96iQi+HyGR5qdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3
NWVmZGEwHhcNMjUwODIzMTAwMTE5WhcNMjUwODI0MTAwMTE5WjAzMTEwLwYDVQQD
Eyg1ZGNhMjQxZmI0MmUwNGM1YmFlZjkyZDE3MjA4MDAwYThmOTM4MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3UMmuPruRiTqMH8DQ1z2dgyagS6
7HBvI9RZSmKLCRul6DMVSiFN36obrNGStJyucpjHctupg5bESNnx/ky5kZbuKhFm
EHgJwRCYq/5GpPRkwTQpLYyYGbsZDbvKtryoDl7B9NforJWVz1NCfvTXFym+etli
FU/yey77esaPO+h8CDaao+uc1gzaEc/VWOSxiUovsSv37odwXreGT80fo5+A5lQi
qPzyDIYrhD7j7P93nOfO1DtYAGoJaCYbyugYr05kpLVHM1S656+PFdI1wfhJfPxa
/qORbnCSLW7uTCDjN2yI1EnPMHrquFxajXHebqNBibxTgQESycHE4litdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3KJB+0LgTFuu+S0XIIAAqPk4ImMB8GA1UdIwQY
MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt
NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw
LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAxVdNAp
4BE4244huvRKDBYnMeAQfORWf2IY9UY1P7jiokRmk0SQGiB0OclFRiQS+La7WcGh
kfmB4LuSKFz9EVte/dtr7u7tzrKNEgqFegWShqaZwIgsfyvtGOtTDXaJ1BeVukyE
tUqMm2ekQB+AFqw71can5NM6zKZMJ0AfSQNqmhcQmwg7Y2d81c1CR7GhySv8dq6v
fUHQUb8+9Zb7ISTSfsQyJ+L2+LBHaUgo4JqaOZX2JkmXrNy/oDOvc47Vhgu57Ukm
L/7N9tTcJlBwTpcTzclZEgZDjiGQDrwl6CWVqdPHuiRkHq3cebc4IXYL/JHpl2Do
WpFfl2W1JnFEzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:13 2025 by rpki-client