Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: jl7np4p0ipc23ObLlQbjs6kXek8mic4gMl2Y0UEFqCI=
Subject key identifier: 72:C9:30:72:95:57:64:AC:C9:8D:5D:2C:C6:12:0D:CC:BF:2A:FB:5F
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 0198D69849D4C1289C319FC6EDE4AD564C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=)
2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: ZrXbl4jv1p2bjnjSvIUh/vF1Bokvhq2impuAo+q8Wbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:49:d4:c1:28:9c:31:9f:c6:ed:e4:ad:56:4c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=72c93072955764acc98d5d2cc6120dccbf2afb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:45:cb:99:f7:9b:00:ba:3b:ea:3e:66:b2:
f2:21:6d:3c:5b:94:30:50:d5:3b:f4:ec:17:42:b8:
a2:67:dc:95:a9:8d:ab:2e:c3:ff:1f:49:e9:d6:33:
72:70:bf:dc:14:f9:c5:30:35:94:2b:f8:34:0f:83:
b7:57:03:75:7c:31:36:b3:fc:7f:7f:8f:37:6f:33:
d2:56:da:ea:b5:3e:49:b7:1d:63:60:fd:d3:19:2b:
47:37:42:bb:6f:17:ac:aa:f2:e6:53:35:4e:85:29:
81:92:68:6e:0e:ad:be:65:1c:d7:4f:38:e9:6e:09:
9b:81:2f:9c:4d:fc:5f:06:0d:1b:f4:77:60:5d:c5:
44:80:84:bd:11:90:54:1f:fc:b2:3e:d3:8a:97:f3:
f1:5e:90:18:7e:b5:09:dd:ea:7f:2d:db:a6:19:37:
70:2b:54:76:2d:d3:ed:e0:9f:f8:dd:4b:7d:13:db:
bd:5c:f4:14:e5:bc:d1:51:2f:66:e2:ae:1e:8e:a7:
ce:1f:a5:84:4c:a6:67:39:55:43:5b:0a:05:8c:0d:
c2:2d:d7:51:4c:9c:09:06:a8:76:6e:3f:56:24:42:
a4:c7:b3:f0:73:ea:e9:4a:62:fe:bf:a4:95:d5:b3:
08:26:8e:d8:47:05:14:fb:c0:18:b8:ec:ad:4a:7e:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:30:72:95:57:64:AC:C9:8D:5D:2C:C6:12:0D:CC:BF:2A:FB:5F
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:f7:29:9c:2d:6c:7a:fc:ad:fc:96:6b:44:a3:ef:88:a7:
74:10:89:bd:60:a6:ac:78:3b:8c:8e:88:36:32:86:27:d3:f4:
7e:d4:5a:10:24:a2:0f:21:49:df:69:56:ae:da:41:60:0f:9d:
15:5b:4e:fd:53:df:0c:b7:19:1a:de:9a:17:30:cb:bb:54:73:
69:42:68:2d:a4:5a:3d:c9:2d:d7:a6:da:a7:5e:af:a6:0b:ce:
90:19:2b:28:1c:86:44:b5:78:54:ba:35:30:32:cc:49:59:b5:
ed:ca:03:1e:ef:91:22:fa:63:87:de:f5:af:c0:b7:57:25:38:
fd:f4:ff:37:e3:8f:bb:ee:95:82:4d:49:d3:71:89:58:3e:3b:
fd:86:03:7f:13:f6:8d:b2:e3:db:14:0a:32:5a:47:82:fe:61:
0c:3f:c9:3e:89:b6:d0:45:5c:bf:e3:39:f4:92:db:4e:af:b7:
d4:ff:1c:13:bd:bb:e9:4c:9f:d8:a6:58:fc:7d:78:df:3c:1a:
0b:1e:b3:1a:af:73:b4:c9:91:46:c1:c5:7c:7f:88:3b:ea:97:
74:7d:f0:24:e1:84:02:69:68:bd:89:af:2d:78:a7:bd:54:ea:
13:39:bb:65:42:40:48:f9:7e:33:ca:e4:98:07:29:96:a8:fe:
5c:c4:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:01 2025 by rpki-client