Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: +dTBsiDLekUm3rVpca1WGRr4+kHQUOXO71+TeSE8D28=
Subject key identifier: C8:75:98:25:6B:73:B4:75:64:C4:63:CE:D4:53:23:86:72:22:5D:CE
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 0198D660D4506D8AE610CAC4D387CC01EDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 02DD
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: EKrWzYkFNbHPJGTI2UN0nrU4ds9Dhv37TYbGhkQ7QgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d4:50:6d:8a:e6:10:ca:c4:d3:87:cc:01:ed:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=c87598256b73b47564c463ced453238672225dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:24:44:92:7a:c3:66:e7:c8:73:33:3c:fd:
6a:ea:9a:79:e2:60:8b:56:61:78:cf:0d:0b:14:5a:
ab:da:5b:3e:d3:b0:10:ae:22:d6:0a:07:ee:4b:4a:
95:16:cc:64:b4:4d:c7:1e:74:4d:d2:68:6f:c1:83:
c2:1d:32:da:9d:e9:c7:da:24:81:43:28:ba:4d:9a:
88:39:f4:d3:78:f2:e5:56:56:d6:60:da:1d:fa:aa:
c1:f7:d2:a8:ab:61:d6:86:ab:2d:1c:6d:d8:83:4e:
a3:84:cd:2b:37:11:b7:55:75:fe:ba:b3:c1:38:e2:
ff:4e:f1:b9:de:6e:fe:10:42:e6:39:00:4b:cf:53:
d4:0a:e2:04:aa:80:2e:db:3b:eb:6a:2b:64:8a:4e:
9d:ba:11:ef:f8:07:0c:1a:e6:32:11:e2:c6:75:5a:
57:92:29:c4:a4:92:05:f3:29:eb:18:33:fb:35:87:
23:0b:a3:f9:b3:bb:00:6d:9c:15:aa:43:ec:dd:c7:
ab:88:5f:8e:10:13:5a:8d:38:f4:89:a9:e9:34:fd:
d5:32:6c:9e:6b:a6:53:53:af:2c:26:64:c5:a0:0e:
68:7d:28:59:ee:17:3e:a6:23:74:a5:2e:51:94:43:
74:f5:c0:c9:79:6d:ac:00:dd:90:85:37:c5:42:b7:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:98:25:6B:73:B4:75:64:C4:63:CE:D4:53:23:86:72:22:5D:CE
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:57:81:63:da:5a:8c:e0:c4:af:f4:6d:a2:22:e6:5b:60:
fe:0d:9d:35:96:29:fa:13:53:6c:3a:2b:0f:d3:51:e2:07:b9:
65:f1:e0:72:e4:fd:e3:00:95:cc:df:ea:95:89:8c:3f:43:9b:
93:5e:9b:ae:0a:1f:4c:3e:64:6d:90:4f:62:e4:f9:9c:62:7d:
45:dc:75:5a:0b:90:78:67:2e:81:97:b4:10:1c:2d:93:0c:a1:
88:88:b9:56:df:14:7d:8d:a0:58:3b:91:07:80:46:d0:b7:eb:
f2:8b:a0:94:02:71:96:3c:d0:3b:63:02:30:fd:4d:7d:4c:25:
9d:df:d8:f9:a4:f6:7d:9d:91:b5:72:a6:b3:e7:c7:76:b4:c3:
be:a0:b2:9e:ec:cb:10:55:d8:aa:b2:9a:98:6d:cc:2f:cc:a8:
80:2e:64:6a:b8:52:0d:98:ac:cb:7c:93:fa:9d:33:da:d8:7a:
b1:0a:94:d4:95:ab:e4:4d:46:dc:b5:98:95:ad:28:0b:d4:4d:
be:8b:95:a4:ed:01:af:70:0d:96:b3:0c:c9:59:ee:3a:db:ff:
ae:13:03:92:b6:ab:3f:9a:38:33:4b:2a:92:e8:86:54:22:52:
ad:ec:c9:67:90:38:a6:92:a2:0b:d8:c3:46:3c:9f:98:d9:98:
70:aa:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:47 2025 by rpki-client