Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier: AOUb3QxqM9qDowdNhsRqowBXj8fjqIekO+JRR1oki10=
Subject key identifier: 7D:7B:34:7A:51:D8:9A:EC:BE:E6:99:46:98:6C:FF:79:77:77:E0:CC
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial: 0199FBEA8CB1DE7A2FAFB64A18AAE9476A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: 2LUMLF1IIPndssShwAedkvQkkxKed9VbO1iZXUrokY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8c:b1:de:7a:2f:af:b6:4a:18:aa:e9:47:6a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=7d7b347a51d89aecbee69946986cff797777e0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:bf:53:77:79:38:0c:f8:a7:5c:8a:b9:15:
97:90:6e:a0:d9:7c:28:2c:f3:92:b8:e6:a0:6b:d4:
90:21:76:bb:45:82:e8:a0:c2:8c:98:a3:2e:ac:7f:
6b:3f:fd:ae:04:04:d6:6a:03:fc:4c:f2:54:e4:6b:
5d:20:4b:de:28:61:57:c5:79:32:20:58:3f:1e:a0:
06:6e:32:55:d7:f3:ba:86:23:99:11:92:b0:5f:7f:
d4:b0:d9:ab:ec:41:33:fc:d6:9c:e9:97:ea:c6:f2:
31:d0:d4:8a:86:cf:a2:a3:37:c3:c7:48:5b:d6:08:
42:a3:3b:25:76:db:ea:27:9c:c3:91:3c:e3:7b:ba:
5e:d8:23:f7:15:db:56:35:d0:a0:0b:cf:2e:93:77:
e9:48:1c:2c:09:b1:d9:87:2e:c0:ed:bd:11:e7:79:
07:9a:b2:1f:24:ea:a7:0f:70:0a:17:c4:48:d0:b6:
74:f6:02:fe:cb:51:09:98:f4:e0:6e:b2:86:7c:89:
a4:8f:09:40:1c:1d:a9:3b:a4:38:17:bd:e9:cf:ce:
a2:90:2b:0a:08:49:60:3c:57:f3:ed:46:61:7f:d1:
01:56:f3:5f:5c:00:28:b7:f1:9e:e8:62:ae:bc:25:
b3:55:5a:54:5c:e1:fd:10:cc:2c:66:4c:7c:d7:d3:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:34:7A:51:D8:9A:EC:BE:E6:99:46:98:6C:FF:79:77:77:E0:CC
X509v3 Authority Key Identifier:
keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2e:1c:15:25:1b:0a:2c:91:9d:b2:4a:b8:fd:55:67:e3:7a:
68:ec:a5:d1:26:23:c4:6a:4c:5e:38:34:e1:8f:af:1c:02:64:
fe:03:61:20:3f:22:27:b8:c4:60:e0:8a:b5:d4:5c:85:82:49:
09:76:cb:38:7b:3d:55:96:37:2b:4b:bb:0c:09:82:de:49:b8:
59:f4:4c:ab:4e:e7:25:1c:47:46:e6:80:f2:36:79:a8:60:7e:
06:09:5a:80:cd:c1:3a:e6:f0:f1:5e:51:a7:98:c0:cb:19:46:
e7:64:dc:5b:de:ac:54:ae:98:05:0b:49:57:8a:13:f2:ff:58:
43:f0:ba:2e:a4:d7:59:31:3e:d9:a3:e9:c3:51:7c:d8:6c:dc:
d3:2a:c7:86:cb:4f:5e:2e:83:13:bc:db:4a:2e:65:e2:04:59:
1b:c0:a4:27:8b:21:30:26:f2:0c:bf:b4:dc:9b:62:e0:14:52:
a6:4f:c7:f7:3e:0a:c9:83:a6:18:f8:62:45:b9:b8:3c:1e:72:
80:b6:67:ff:04:42:d0:75:73:e3:7e:28:11:24:78:e6:f0:b0:
1b:23:ab:6c:de:a1:08:ed:5a:29:43:dd:51:43:db:ea:0a:b9:
ef:f1:4f:1e:23:a6:71:f9:5c:bb:82:38:a4:b1:07:a5:e1:32:
9a:fd:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client