Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
File: fgdwhBDMdkNEuM-k8-NopeJStlA.mft (raw, json)
Hash identifier: OaC6Ww6FGIsBzEn7VXDzxQt9kZRIiuWAJojImtVM95I=
Subject key identifier: D7:00:1D:BA:1F:FA:0A:73:A3:AC:CA:EA:BE:39:34:3D:3C:BC:59:6A
Authority key identifier: 7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
Certificate issuer: /CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Certificate serial: 0198D54E181B2C11C58C48227207E6208D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
Manifest number: 0A70
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: fgdwhBDMdkNEuM-k8-NopeJStlA.crl (hash: cPV3eV3QA4WEqHwxuhrC23UMsChGQhHGAWszEPLcRpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:18:1b:2c:11:c5:8c:48:22:72:07:e6:20:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e07708410cc764344b8cfa4f3e368a5e252b650
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=d7001dba1ffa0a73a3accaeabe39343d3cbc596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:68:6f:94:a3:f4:3d:02:83:52:69:4c:b4:
50:c5:85:0e:34:5c:cd:66:55:0c:03:fb:db:4d:5f:
09:f8:22:a1:3e:18:60:94:04:a2:0c:7b:00:e8:b0:
ad:1f:25:06:0a:fd:dd:58:83:8e:e0:19:4d:84:9f:
77:8d:0a:aa:07:b0:09:5b:6b:57:e4:ec:a1:08:c2:
9a:04:9f:85:56:9f:0c:33:9b:3b:3d:84:39:40:85:
78:dd:a3:bf:d8:bf:45:da:3e:32:43:df:22:cb:ab:
7d:6a:5a:b0:4d:12:ff:ce:fc:17:05:d1:be:6c:a7:
20:de:70:52:1a:89:95:2c:52:85:a7:fc:62:02:43:
da:d4:f7:7a:48:bd:93:90:fb:bf:df:5c:01:9a:65:
62:19:09:61:e7:f0:f8:33:ba:5d:fe:90:7c:2c:73:
56:22:a3:a3:08:15:57:57:c6:35:b7:67:e1:39:3c:
f0:2d:d4:66:7a:16:a9:50:56:0b:64:5c:99:76:f0:
36:c0:e1:d3:d9:58:7b:9d:af:3f:40:9e:78:c7:5f:
aa:17:31:21:c3:a2:b7:28:a8:4c:31:36:e0:ea:d6:
72:11:de:e2:92:4d:92:d1:2d:db:bb:49:1b:67:83:
65:92:91:d5:c4:6f:be:0d:ee:3d:f1:e0:92:51:5a:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:1D:BA:1F:FA:0A:73:A3:AC:CA:EA:BE:39:34:3D:3C:BC:59:6A
X509v3 Authority Key Identifier:
keyid:7E:07:70:84:10:CC:76:43:44:B8:CF:A4:F3:E3:68:A5:E2:52:B6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgdwhBDMdkNEuM-k8-NopeJStlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8f5e59-7f71-4cf2-a619-3f0295eee951/1/fgdwhBDMdkNEuM-k8-NopeJStlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:ad:e5:91:1e:8f:b3:eb:f6:e0:d2:f1:bd:fb:94:19:d7:a5:
db:4d:81:aa:cf:49:a6:78:dc:ad:67:86:fb:f3:07:dd:20:d2:
c2:67:76:47:21:8a:d5:86:fd:37:62:d6:d0:86:55:d6:30:f2:
ae:66:24:73:15:13:b8:6e:1d:41:42:1d:27:4b:26:48:85:2e:
50:97:03:e4:57:bb:ec:79:4c:fe:cc:c7:54:5a:4f:9d:28:2e:
96:05:12:12:03:e3:7b:bf:eb:7b:7d:c9:f5:91:11:48:b4:cc:
87:77:fa:d7:37:2e:bc:ae:e6:bb:b9:7e:ef:1e:32:c6:0d:a4:
3c:1d:d1:c4:75:21:02:fa:71:b1:41:a5:bf:c7:3a:3c:fb:7b:
4f:08:a9:74:b6:8c:9d:63:df:12:79:58:c8:aa:91:2f:51:e3:
44:41:04:73:3c:7f:b6:3b:b8:0c:53:f5:46:4a:9d:c1:47:8e:
6f:53:81:f5:b1:0d:86:a4:25:d2:7a:79:b5:c6:12:9f:49:e8:
56:a3:86:b4:87:22:d7:d9:a0:04:2c:09:8c:2b:02:8b:c6:c0:
af:56:b6:76:56:e4:1d:46:f3:86:50:ca:79:12:84:ec:bf:f0:
2d:08:ef:eb:1f:15:f7:87:b7:f1:ae:71:03:c8:22:1b:dd:69:
d5:8c:e9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThgbLBHFjEgicgfmII0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDc3MDg0MTBjYzc2NDM0NGI4Y2ZhNGYzZTM2OGE1ZTI1
MmI2NTAwHhcNMjUwODIzMDUwMjAxWhcNMjUwODI0MDUwMjAxWjAzMTEwLwYDVQQD
EyhkNzAwMWRiYTFmZmEwYTczYTNhY2NhZWFiZTM5MzQzZDNjYmM1OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq9ob5Sj9D0Cg1JpTLRQxYUONFzN
ZlUMA/vbTV8J+CKhPhhglASiDHsA6LCtHyUGCv3dWIOO4BlNhJ93jQqqB7AJW2tX
5OyhCMKaBJ+FVp8MM5s7PYQ5QIV43aO/2L9F2j4yQ98iy6t9alqwTRL/zvwXBdG+
bKcg3nBSGomVLFKFp/xiAkPa1Pd6SL2TkPu/31wBmmViGQlh5/D4M7pd/pB8LHNW
IqOjCBVXV8Y1t2fhOTzwLdRmehapUFYLZFyZdvA2wOHT2Vh7na8/QJ54x1+qFzEh
w6K3KKhMMTbg6tZyEd7ikk2S0S3bu0kbZ4NlkpHVxG++De498eCSUVqwhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcAHbof+gpzo6zK6r45ND08vFlqMB8GA1UdIwQY
MBaAFH4HcIQQzHZDRLjPpPPjaKXiUrZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84ZjVlNTktN2Y3MS00Y2YyLWE2MTkt
M2YwMjk1ZWVlOTUxLzEvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84ZjVlNTktN2Y3MS00Y2YyLWE2MTktM2YwMjk1ZWVlOTUx
LzEvZmdkd2hCRE1ka05FdU0tazgtTm9wZUpTdGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+a3lkR6P
s+v24NLxvfuUGdel202Bqs9JpnjcrWeG+/MH3SDSwmd2RyGK1Yb9N2LW0IZV1jDy
rmYkcxUTuG4dQUIdJ0smSIUuUJcD5Fe77HlM/szHVFpPnSgulgUSEgPje7/re33J
9ZERSLTMh3f61zcuvK7mu7l+7x4yxg2kPB3RxHUhAvpxsUGlv8c6PPt7TwipdLaM
nWPfEnlYyKqRL1HjREEEczx/tju4DFP1RkqdwUeOb1OB9bENhqQl0np5tcYSn0no
VqOGtIci19mgBCwJjCsCi8bAr1a2dlbkHUbzhlDKeRKE7L/wLQjv6x8V94e38a5x
A8giG91p1Yzp1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:11 2025 by rpki-client