Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: QJS3xEG6DBk9LyBZHwDIBN8DLrZqu2DOEVo6YGweHno=
Subject key identifier: 02:4F:2A:A8:A7:EE:65:EC:1D:6A:73:C6:90:61:4F:B1:F9:CE:25:50
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 0199FCC667554A383814B1F180A3E6C1D0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0B58
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: Hes1phz2UlkKAk8GqQXAvxlxqC0e7XfllfaWJouvTSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:67:55:4a:38:38:14:b1:f1:80:a3:e6:c1:d0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=024f2aa8a7ee65ec1d6a73c690614fb1f9ce2550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:0f:01:0f:0e:bc:3d:72:d7:13:56:f3:73:
83:10:1f:ae:27:c8:d9:34:6b:fc:1c:73:4e:3b:32:
26:3f:70:dc:53:68:ab:31:20:52:f8:82:54:66:d5:
18:2a:a0:15:e6:28:5b:d6:dc:9c:4e:1b:12:63:67:
a8:70:b8:ca:51:82:c2:9d:2c:15:fa:6e:59:b7:22:
74:96:a5:32:ef:c0:81:90:df:dd:f1:6b:fa:65:ea:
47:10:34:9d:ac:d4:80:b4:64:2a:c9:e3:41:25:8f:
30:25:3b:15:29:8a:2c:a0:1d:46:ef:90:5d:29:68:
6f:a6:68:99:f6:9a:ca:8e:17:17:9c:4e:29:d6:6d:
1e:4b:42:b1:cb:2c:af:7e:f3:73:2b:e7:9f:46:0c:
c1:e6:a1:d4:cd:6a:31:17:03:f0:0c:c3:c1:71:aa:
62:b5:75:5a:d4:06:b4:56:68:90:76:ce:62:71:ee:
36:43:1e:8d:ba:a3:07:84:2a:a0:94:46:91:9c:6c:
1f:5d:87:04:23:71:15:78:04:a2:ab:84:57:17:6d:
05:49:dc:c9:66:f3:0a:95:3f:fe:c7:c9:7e:31:c8:
6e:60:fc:03:f2:54:fc:8b:c7:2e:94:ee:4b:4b:46:
6c:36:c9:b5:ef:92:87:5a:06:59:30:5b:2a:90:44:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4F:2A:A8:A7:EE:65:EC:1D:6A:73:C6:90:61:4F:B1:F9:CE:25:50
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a0:7c:de:1c:02:52:4d:7b:42:0c:18:38:ae:2e:0b:73:43:
cf:4b:44:67:71:22:fb:ca:d1:35:7d:98:44:2d:7e:4e:7e:24:
11:e9:d7:64:bb:9f:bd:0f:68:85:f4:c4:f1:ad:d7:75:93:c0:
f3:45:94:15:c7:e5:29:0b:7e:09:d0:62:ef:88:d8:8b:84:d5:
a6:83:36:f1:52:1c:01:c0:47:49:93:86:55:af:dc:33:ac:36:
89:04:11:61:c3:98:3e:a3:04:00:c5:9d:1f:fd:e4:30:14:d3:
83:64:6d:80:24:73:c3:94:68:2f:69:ab:6a:1f:48:3f:19:83:
b7:5c:c0:69:9c:3f:fb:b5:ff:0d:4d:2a:c3:56:59:99:39:d2:
df:1b:91:a5:b3:21:82:d6:68:de:4b:14:4f:ac:0a:7a:24:61:
d2:0d:3a:72:60:09:c8:3a:b3:4b:bd:61:bf:79:91:ad:6d:60:
af:3f:91:e3:e7:59:98:25:a2:a7:45:89:fe:06:4a:1b:47:4f:
85:52:f4:e7:46:27:44:df:6e:79:50:61:3a:90:e8:29:06:78:
97:02:64:b2:98:ab:f3:8e:ce:fb:19:6a:2c:1f:6b:76:d1:44:
99:b0:5b:9d:4f:1c:6d:98:0e:78:51:bb:ec:a8:61:e3:e9:70:
18:a2:a1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmdVSjg4FLHxgKPmwdDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi
MTdkOWMwHhcNMjUxMDE5MTQwMTI0WhcNMjUxMDIwMTQwMTI0WjAzMTEwLwYDVQQD
EygwMjRmMmFhOGE3ZWU2NWVjMWQ2YTczYzY5MDYxNGZiMWY5Y2UyNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXAPAQ8OvD1y1xNW83ODEB+uJ8jZ
NGv8HHNOOzImP3DcU2irMSBS+IJUZtUYKqAV5ihb1tycThsSY2eocLjKUYLCnSwV
+m5ZtyJ0lqUy78CBkN/d8Wv6ZepHEDSdrNSAtGQqyeNBJY8wJTsVKYosoB1G75Bd
KWhvpmiZ9prKjhcXnE4p1m0eS0KxyyyvfvNzK+efRgzB5qHUzWoxFwPwDMPBcapi
tXVa1Aa0VmiQds5ice42Qx6NuqMHhCqglEaRnGwfXYcEI3EVeASiq4RXF20FSdzJ
ZvMKlT/+x8l+MchuYPwD8lT8i8culO5LS0ZsNsm175KHWgZZMFsqkESeYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJPKqin7mXsHWpzxpBhT7H5ziVQMB8GA1UdIwQY
MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt
YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx
LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKB83hwC
Uk17QgwYOK4uC3NDz0tEZ3Ei+8rRNX2YRC1+Tn4kEenXZLufvQ9ohfTE8a3XdZPA
80WUFcflKQt+CdBi74jYi4TVpoM28VIcAcBHSZOGVa/cM6w2iQQRYcOYPqMEAMWd
H/3kMBTTg2RtgCRzw5RoL2mrah9IPxmDt1zAaZw/+7X/DU0qw1ZZmTnS3xuRpbMh
gtZo3ksUT6wKeiRh0g06cmAJyDqzS71hv3mRrW1grz+R4+dZmCWip0WJ/gZKG0dP
hVL050YnRN9ueVBhOpDoKQZ4lwJkspir847O+xlqLB9rdtFEmbBbnU8cbZgOeFG7
7Khh4+lwGKKhkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:39 2025 by rpki-client