Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: /F7KebVV2M5s4HC8GgTGY1CGzqv7/c3X+dhZD/WTAno=
Subject key identifier: 4E:FD:04:0B:09:72:0D:9E:0D:43:C5:A0:38:63:FB:4A:CE:A8:21:DD
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 0198D5F1A5DFA28ED075C739A2BA06B8881D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 0356
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: Ke4/H7ld4rNy0w71LHUxKH+fjKdiM55k/QRXaH7bkKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a5:df:a2:8e:d0:75:c7:39:a2:ba:06:b8:88:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=4efd040b09720d9e0d43c5a03863fb4acea821dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:61:6d:bb:dd:2b:36:bc:e6:c7:63:d1:df:
ff:02:ff:40:8c:78:60:b1:03:91:4c:b9:f2:e8:5a:
fc:10:16:1c:39:d5:ea:20:1f:e6:62:66:7c:04:27:
99:b5:61:28:12:75:65:ab:1f:64:65:91:12:a2:90:
98:3c:1b:bb:64:b1:77:cd:8c:06:12:3b:3d:85:c6:
03:25:35:82:93:da:8b:e3:1a:ff:8f:8a:bb:26:86:
de:1a:d0:f4:46:46:4c:13:45:20:fe:9e:ea:69:6f:
2c:d2:3d:20:a4:4a:a4:10:33:b6:08:48:87:4d:df:
8b:d3:ad:f7:8e:7e:5d:77:fe:9a:bd:08:df:7c:79:
e2:97:04:0c:82:3f:bd:bb:93:cf:d2:bb:22:df:37:
97:69:78:02:11:58:26:21:02:c5:12:30:77:10:95:
74:df:93:85:5d:a9:38:80:68:75:b7:23:6e:96:5e:
14:04:f8:c2:8c:72:70:6d:7a:36:c2:2b:30:89:78:
6d:ec:0f:3e:05:1e:1c:2c:68:80:ae:51:2a:28:d6:
9d:ed:51:f8:29:19:20:8c:cc:03:ab:56:e6:6f:60:
25:b3:14:af:36:91:f7:b4:3e:46:fd:6a:41:45:d9:
a5:10:58:53:e7:c4:cf:86:60:88:22:b2:c7:61:2b:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FD:04:0B:09:72:0D:9E:0D:43:C5:A0:38:63:FB:4A:CE:A8:21:DD
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:07:31:6f:98:32:24:90:a4:cf:57:15:c4:b8:51:c6:3f:
a1:51:f3:0c:fb:c3:4d:50:4d:fd:a4:f0:da:79:48:21:08:db:
7f:9a:28:94:ff:4d:1f:fc:ed:30:f7:1d:72:48:e3:8f:43:4d:
0f:39:c8:83:e6:82:06:b5:75:60:d8:a1:62:8c:3a:f4:7d:a4:
7c:a8:34:37:ae:66:3d:1e:4a:3a:e2:32:0d:fc:43:e0:65:4f:
c8:82:cf:5a:31:a1:ff:1e:d6:41:0f:a1:f7:57:57:57:1e:51:
c6:5a:1e:5a:b9:2a:4e:3b:ea:dd:03:70:70:f5:58:b1:e3:8d:
86:4c:ca:64:89:ff:06:e7:79:bc:9e:36:30:63:b8:15:c4:ab:
91:ad:1b:7f:2d:8a:8d:0c:d8:2f:65:8d:5b:94:70:1a:df:d5:
e3:64:1e:c4:d2:52:cc:0d:aa:80:ad:20:3a:86:28:a9:30:11:
71:39:b1:8d:f9:9c:ca:2b:fa:b5:14:35:eb:d1:6c:a5:8b:e8:
02:ad:43:d7:15:be:82:e6:bd:00:80:3e:62:06:0e:61:5d:db:
ee:51:36:1b:be:9f:aa:0e:00:1b:52:e6:6a:9f:bf:b2:aa:d1:
e8:e0:92:d9:14:93:a7:16:66:67:24:12:20:1f:56:fe:29:42:
9f:94:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:22 2025 by rpki-client