Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File: fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier: e7Q+QwawUoQedu3+bm4E2mNqHFK7xUnqaw0tq7nrHM0=
Subject key identifier: 54:7A:6B:F7:8D:70:F9:88:48:06:09:D9:00:41:4B:B3:22:F1:48:1D
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer: /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial: 0198D515E865C77B90BA848DB2FD2E7CAAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number: 0774
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: dAOoc/505xn19s9RcsbfaPRdL9RT6MQ2mEcJ2ssf1/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e8:65:c7:7b:90:ba:84:8d:b2:fd:2e:7c:aa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=547a6bf78d70f988480609d900414bb322f1481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:40:96:9c:96:58:7f:8f:dd:2e:e7:4a:c1:
71:03:52:a4:98:25:ef:75:b1:21:1b:c2:d5:9b:61:
49:3a:4a:11:71:58:03:56:e8:e4:37:85:bf:c9:6b:
c6:b1:88:0d:a0:cd:99:a9:f3:66:9a:e9:37:45:2b:
3d:c3:d4:90:4e:e6:ed:42:2e:41:38:a1:e7:45:d9:
e8:18:10:bb:86:50:ff:7c:1f:1c:99:45:d2:54:00:
67:b1:de:53:88:ff:32:54:3f:9c:08:74:c0:ab:b8:
1d:0a:68:4b:f1:d7:e0:97:0e:f8:e6:17:87:87:cd:
1f:8e:b3:f6:fe:e1:72:5f:eb:58:e3:d9:35:51:41:
20:b2:11:fa:24:1e:19:9b:0d:39:41:b8:08:53:31:
e1:1a:a5:c1:90:63:8c:ba:f4:c8:4e:c8:e9:68:f3:
8a:d8:0e:e1:ed:a9:3b:c7:61:c2:39:4d:49:d2:ca:
5c:c4:fd:f7:b4:8f:08:56:88:eb:d9:5a:db:71:c9:
cd:5e:5a:b7:1d:56:f6:1d:ef:22:9f:e2:a8:a6:63:
ed:fd:3b:c7:2e:f9:ae:6c:13:5c:32:46:0b:2f:38:
30:f4:2f:2f:f4:2a:31:9b:47:33:29:dc:1a:0a:86:
cf:8b:05:9d:d1:93:ec:71:05:34:4c:68:eb:2e:04:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:6B:F7:8D:70:F9:88:48:06:09:D9:00:41:4B:B3:22:F1:48:1D
X509v3 Authority Key Identifier:
keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:c9:fa:75:96:75:86:17:64:94:39:df:67:1b:8b:7e:c0:
1c:29:c9:51:58:61:ef:6f:a5:67:a4:6f:b9:e5:fc:07:6b:e3:
52:2d:17:a9:f5:87:07:c4:a6:ab:83:1b:18:ec:19:25:87:c3:
c3:b4:0d:08:d1:0d:80:17:8e:e2:c3:eb:bd:8b:17:d5:5e:e5:
95:10:dd:98:dc:6d:a7:3c:4b:f1:88:52:50:aa:e7:67:35:a4:
3c:28:74:f1:6e:83:36:92:cf:13:69:cb:d8:8f:c1:b6:c6:53:
39:b2:6a:09:42:79:3a:b0:0f:ff:01:a3:7f:64:f5:e2:21:63:
4d:00:bf:90:be:c4:7f:90:ef:bf:16:40:f6:f5:54:46:09:c0:
1d:5e:2d:5b:18:37:f7:a6:59:40:bc:42:63:5e:f2:cf:26:ef:
ac:a1:2c:bd:31:4f:60:0e:e0:a1:9a:dc:f6:b0:2a:21:9f:68:
80:f6:37:3f:fb:56:c4:97:ba:95:ba:20:db:c5:af:de:80:c4:
d9:63:57:7b:46:f4:40:84:dd:f2:81:b8:a4:00:d4:cd:d0:64:
3b:c5:90:3b:86:79:cd:61:27:aa:9f:56:a8:c2:3e:00:d4:d0:
77:c0:33:0f:d9:36:eb:12:a1:de:80:c2:b8:9a:dc:fa:d5:a0:
72:4e:67:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFehlx3uQuoSNsv0ufKqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2FmMThiNzk4OTk1ZTE0YjM4MTM2MWEwNmJiNjY4NDli
N2U4NWEwHhcNMjUwODIzMDQwMDM5WhcNMjUwODI0MDQwMDM5WjAzMTEwLwYDVQQD
Eyg1NDdhNmJmNzhkNzBmOTg4NDgwNjA5ZDkwMDQxNGJiMzIyZjE0ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwONAlpyWWH+P3S7nSsFxA1KkmCXv
dbEhG8LVm2FJOkoRcVgDVujkN4W/yWvGsYgNoM2ZqfNmmuk3RSs9w9SQTubtQi5B
OKHnRdnoGBC7hlD/fB8cmUXSVABnsd5TiP8yVD+cCHTAq7gdCmhL8dfglw745heH
h80fjrP2/uFyX+tY49k1UUEgshH6JB4Zmw05QbgIUzHhGqXBkGOMuvTITsjpaPOK
2A7h7ak7x2HCOU1J0spcxP33tI8IVojr2VrbccnNXlq3HVb2He8in+KopmPt/TvH
LvmubBNcMkYLLzgw9C8v9Coxm0czKdwaCobPiwWd0ZPscQU0TGjrLgRGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR6a/eNcPmISAYJ2QBBS7Mi8UgdMB8GA1UdIwQY
MBaAFH168Yt5iZXhSzgTYaBrtmhJt+haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83ODY5N2QtYjU0ZS00ZDdiLWE4ZTAt
N2M2MjUyYzVmNDVkLzEvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS83ODY5N2QtYjU0ZS00ZDdiLWE4ZTAtN2M2MjUyYzVmNDVk
LzEvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOPJ+nWW
dYYXZJQ532cbi37AHCnJUVhh72+lZ6RvueX8B2vjUi0XqfWHB8Smq4MbGOwZJYfD
w7QNCNENgBeO4sPrvYsX1V7llRDdmNxtpzxL8YhSUKrnZzWkPCh08W6DNpLPE2nL
2I/BtsZTObJqCUJ5OrAP/wGjf2T14iFjTQC/kL7Ef5DvvxZA9vVURgnAHV4tWxg3
96ZZQLxCY17yzybvrKEsvTFPYA7goZrc9rAqIZ9ogPY3P/tWxJe6lbog28Wv3oDE
2WNXe0b0QITd8oG4pADUzdBkO8WQO4Z5zWEnqp9WqMI+ANTQd8AzD9k26xKh3oDC
uJrc+tWgck5ntg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:25 2025 by rpki-client