Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: yNd88fSXC0Z4tgXoSXxyj1myCdKKpsm4VIvLR0zrmYw=
Subject key identifier: 2F:FE:0C:F3:D0:F7:22:24:D1:DE:4C:D2:90:6E:86:D0:61:27:EE:89
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 0198D473A86D51D284E98B5568ECD8486A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 11EC
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: Kmy/m5Q614i4U9zpSX9f9Io25AnNxYLynGcDQSIOakE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a8:6d:51:d2:84:e9:8b:55:68:ec:d8:48:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=2ffe0cf3d0f72224d1de4cd2906e86d06127ee89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:d0:1a:6b:2a:49:f8:4d:cc:6d:b0:3d:15:
c3:51:63:19:ad:e1:bd:78:6f:a5:69:5d:20:34:80:
18:8a:3c:26:58:22:4d:19:df:90:d5:5c:1a:a3:b6:
57:76:8f:a5:70:b0:ca:a5:de:7e:d4:58:8d:56:d9:
20:14:ea:27:27:23:00:63:fb:d5:80:1f:f0:db:ce:
08:02:dd:79:aa:06:17:37:8e:b3:cc:ad:9d:0d:9a:
f1:e2:63:9e:aa:91:49:dd:36:7c:9f:0a:34:59:ab:
99:9c:25:62:1b:d4:22:d1:a4:34:bc:bf:79:9c:7b:
be:fc:7d:07:49:ab:2f:1a:51:41:28:91:12:13:0c:
dd:ee:ef:c7:b7:03:a8:b0:a4:de:61:e0:90:42:5d:
c7:16:f0:69:ff:a5:0b:2d:17:dc:d4:1e:70:94:a9:
44:30:3d:b1:7b:41:4e:7e:c4:00:8a:50:f1:ca:18:
0d:21:49:c9:46:b1:15:a3:ab:f9:b1:1a:a4:b4:0c:
98:0d:5e:e8:57:e9:86:89:22:6b:0e:00:9a:38:7e:
6b:9e:3b:7b:62:20:39:b2:d6:ac:dd:a4:7c:46:3d:
9e:78:b2:28:c0:04:cf:4f:10:d9:3f:f7:20:ce:79:
dd:c5:b1:03:fb:56:f4:a2:85:a8:c6:9e:b7:0e:1c:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:0C:F3:D0:F7:22:24:D1:DE:4C:D2:90:6E:86:D0:61:27:EE:89
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:41:5a:eb:de:f7:e8:19:0c:d9:a0:a9:b9:82:91:6b:8c:
dd:b6:84:27:f5:02:55:66:d4:7f:5b:e4:76:30:64:19:5b:b0:
cd:de:cd:bf:a2:21:d2:44:2a:28:a3:7d:68:1a:8d:aa:e2:2c:
19:e9:86:5b:46:99:60:2d:b3:c0:57:62:11:7c:b9:28:bd:ef:
af:4d:de:2e:fb:1f:77:e1:91:22:b3:26:31:8f:cd:3f:7d:79:
9f:9f:6d:7f:14:17:28:fe:d4:dd:a7:8b:b4:be:c2:86:19:7d:
10:06:e1:74:f9:3b:66:cf:da:64:39:d0:c7:80:e8:f1:74:d1:
8c:e0:0c:78:a1:f2:ff:3e:b3:c8:09:af:ea:a3:a0:b6:f3:57:
e6:1d:f0:48:b4:b8:79:a2:57:1a:06:9b:f9:0d:58:bd:40:4a:
00:60:60:09:18:17:70:11:12:78:f4:cf:8e:e4:3b:bc:87:34:
fe:58:21:cb:d3:89:59:e7:2a:38:91:f6:0c:db:9b:d9:b6:b2:
c6:2c:5a:4e:1f:a8:c0:f5:7c:82:b5:62:da:0b:a6:dd:f9:5b:
0f:cc:7b:bc:ee:92:e7:24:c8:f8:e3:ee:29:de:94:48:2f:d7:
f1:ae:af:01:d4:93:f5:c8:48:fa:ac:1b:5f:77:1a:0d:cb:c2:
df:28:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:07 2025 by rpki-client