Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: VpQqJtecUC6QLNachtMqZOzIsUtBCA65oMVngFhnpPQ=
Subject key identifier: 33:A7:71:07:7D:D9:F6:54:2F:ED:D8:71:05:24:93:B4:9C:67:48:7F
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 0198D47267404BAB491F9C045D90A86AF235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 05D8
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: Q/4H1R6SK/rwymS2lI3hK/5b72u8fPk05n9/mEM2w4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:67:40:4b:ab:49:1f:9c:04:5d:90:a8:6a:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=33a771077dd9f6542fedd871052493b49c67487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:6a:a1:68:4a:cf:af:dc:1f:6c:cf:c4:3c:
72:dc:2f:ec:aa:78:6f:a5:9b:9f:bd:68:cf:32:fa:
12:23:c7:e5:9e:a5:8e:c5:79:96:44:9e:2f:55:b4:
62:80:8c:5b:e7:8c:be:e3:e8:b2:a8:a8:21:5e:0f:
bf:f4:50:cb:c0:ae:32:c3:58:5b:2d:ab:ed:19:db:
7b:60:19:44:c4:bc:45:58:e9:d0:06:42:69:b9:45:
02:bc:3d:14:2f:eb:41:37:71:bf:98:26:7c:4e:10:
44:a5:58:60:4c:fe:c9:4f:64:80:3f:cb:9e:9a:c0:
06:09:73:bf:6c:64:1b:f9:05:9d:f1:d3:a4:f8:bc:
96:2a:d6:e3:43:b7:e8:a4:26:1c:c3:8c:12:e6:39:
b0:9f:90:c8:38:11:3f:51:0c:a1:3b:85:bd:ae:a2:
89:c8:ff:1f:3e:c0:18:60:d9:43:9b:d7:dc:bd:13:
da:2d:cb:d7:d4:af:9a:d2:bf:3b:6f:e4:70:d1:e8:
b8:01:f0:b6:5e:fe:ff:e0:08:4b:2a:7e:3e:9f:6b:
79:35:0e:ba:5a:fe:5e:5e:40:c7:5a:41:2f:a2:93:
86:21:21:29:b2:e5:5e:31:26:2c:64:8e:e1:7f:f9:
14:bc:24:d1:8d:2b:09:ca:de:ea:15:49:20:eb:06:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:71:07:7D:D9:F6:54:2F:ED:D8:71:05:24:93:B4:9C:67:48:7F
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bd:11:7f:2c:d8:88:43:b2:38:fe:c4:b1:48:fe:6f:49:a4:
e1:24:ea:c4:48:97:21:c3:4d:96:05:ca:de:78:e8:cb:02:39:
6f:a1:3f:f0:64:3d:13:c2:86:1e:c1:ad:47:98:bb:1d:ed:e7:
3c:48:91:e9:4e:75:11:ba:fa:93:df:22:03:d3:e2:64:e3:1d:
b9:54:f5:e5:69:93:f0:d9:fd:3b:03:f0:6b:4f:60:eb:15:92:
fe:88:f4:75:1a:b7:2c:95:9f:ce:5c:1d:62:9c:26:ce:c9:dc:
4c:68:5d:bd:97:cc:fe:17:b5:fd:71:16:7f:4d:3a:fe:06:21:
28:35:2a:13:58:11:65:c0:4a:99:1e:47:04:8a:e1:98:86:5b:
0a:ae:67:38:74:f0:97:e2:dd:ec:f7:2c:20:9a:b7:b1:92:aa:
f1:5a:3e:36:85:7b:c0:c6:83:4a:0f:ae:e3:87:65:68:48:70:
dd:3a:78:eb:ba:14:1c:e5:a2:32:32:fd:40:8f:48:b1:c7:de:
d3:86:72:fd:95:c8:0b:80:09:02:9e:c3:5d:92:f6:c7:72:0b:
f3:0a:23:78:01:24:60:ba:28:c7:72:f2:32:53:6e:be:a9:e4:
41:10:f3:e0:05:e1:d6:81:0f:ba:94:11:f3:99:4f:05:6d:c8:
7f:26:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client