Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: O59O62+o2spqEYK6O9BBAb40MKgNxjuEifU/RkzQg5E=
Subject key identifier: C5:B3:65:7F:81:6D:D8:7F:65:FA:F5:AE:2D:54:9D:6B:E4:06:93:7F
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 0198D5161DE4FD79E05B3B63FBC9E3E6C412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0854
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: aEs08Vwz4b7yVwaDwmx4XRUQ6NHQknW6YHwecXAxaOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1d:e4:fd:79:e0:5b:3b:63:fb:c9:e3:e6:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=c5b3657f816dd87f65faf5ae2d549d6be406937f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:bd:59:84:30:db:62:bf:e3:21:97:da:f3:
32:33:d0:e3:32:af:07:04:b7:0e:19:ab:41:7a:1d:
48:95:32:f8:28:01:92:ad:c8:d1:b2:11:da:1f:39:
22:de:07:d2:cd:68:fd:de:c2:ba:b0:fd:8c:9f:76:
8a:a2:73:2f:6c:56:fd:d6:5b:7d:8f:3e:8c:8e:2e:
5c:b7:73:a0:46:b3:b6:c3:60:3e:f8:ab:f5:f5:48:
bc:49:36:8a:15:fb:f7:4b:04:77:42:0f:f6:35:99:
0e:cd:8b:b1:5a:22:62:86:76:72:68:b0:71:49:e2:
29:2a:cb:aa:25:1f:d5:69:a3:ab:02:ad:32:9f:4e:
b1:1d:07:b8:8b:b1:02:8a:c6:11:d1:a9:ad:98:79:
d1:f4:24:59:e7:ab:9c:3e:8a:a2:43:01:1a:a6:27:
b7:bb:2d:3f:59:77:5e:ba:f9:76:93:af:08:a5:ee:
15:7e:dd:95:c9:be:70:a8:3e:a3:ce:fe:12:41:0e:
b5:40:31:e0:00:41:97:22:02:b7:3b:bd:69:4d:dc:
aa:c7:ab:aa:1e:e6:42:80:7f:d8:7f:91:48:f0:aa:
51:67:d6:8b:17:04:cf:c2:67:34:c7:99:f5:bb:1c:
08:68:e5:86:34:02:31:69:35:8a:3b:f5:9f:8e:1b:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:65:7F:81:6D:D8:7F:65:FA:F5:AE:2D:54:9D:6B:E4:06:93:7F
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:6f:39:bd:ab:58:52:c8:16:71:f8:35:1a:0e:72:ba:25:
24:1e:9d:a6:d1:83:2a:42:03:be:88:05:d6:bd:2b:b3:10:a3:
73:08:b3:bf:f4:11:42:da:9d:2d:e7:39:b5:7e:ba:19:99:92:
37:89:2d:0a:49:45:9b:74:0e:15:cb:ce:84:a5:e5:ab:26:4a:
e1:c7:05:ba:28:bf:5c:c8:bb:69:e7:e9:0b:c4:da:60:ea:9b:
47:11:14:a2:ee:fc:2c:35:44:70:0c:7b:c8:d7:b7:16:88:23:
a8:d7:6b:2f:72:5f:2e:d9:38:34:8b:bb:ac:c7:8e:3b:d6:e7:
53:8f:eb:a3:f9:6b:dc:0e:25:23:49:c9:83:a1:56:72:dd:44:
63:b8:34:3b:75:57:6d:aa:a3:45:99:6a:c2:9f:d0:78:6f:ce:
5a:62:ff:21:a7:2b:c0:80:4c:1c:fa:5e:ca:b9:d4:3f:36:68:
8f:29:6d:31:94:b3:74:40:2a:da:a0:64:29:fe:ef:de:54:7d:
f1:67:02:6d:1b:7c:59:e0:6f:43:95:32:10:36:84:ad:17:28:
d3:eb:3d:db:9e:cd:02:8a:d1:45:fe:14:d0:d6:b5:e4:44:78:
9c:7c:ab:b4:51:05:8d:cf:e8:3c:51:ba:7b:d7:5f:31:0c:53:
ae:bc:32:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:14 2025 by rpki-client