Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: h8v8uj6XOsw26yaz7/zvYS84Bn1rDr7Q9TfehRTii9s=
Subject key identifier: B9:59:1F:61:28:A1:28:4A:F3:F0:70:EE:44:69:80:14:E6:14:4F:9C
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 0197B7455C75F0DC2F1F43167686E4250DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 01F4
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: htfokhqrVDMfWqUum+hutl+S+YUlx+3ELhXEBu8nIWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5c:75:f0:dc:2f:1f:43:16:76:86:e4:25:0d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=b9591f6128a1284af3f070ee44698014e6144f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:4d:91:32:8d:19:3f:99:8c:97:2a:83:81:
6c:44:a7:71:53:02:83:d1:03:95:d8:23:fa:44:07:
3e:de:06:48:8a:37:31:7f:48:42:9e:40:62:40:35:
61:62:e9:3c:10:ed:2c:96:a3:0d:b8:ec:a0:b0:c0:
c9:a8:33:95:a1:1d:62:7e:c1:de:df:47:c3:ed:d8:
bb:e4:eb:48:09:43:62:c3:4d:80:3c:aa:48:ad:53:
f6:90:5b:c9:ae:15:d2:6c:86:71:8a:c3:19:87:33:
ae:ca:57:01:46:45:bb:82:5c:91:19:4d:45:62:ac:
0b:2b:a4:f1:46:b5:77:79:8f:67:13:d4:33:e4:1a:
9f:9f:3b:ea:45:51:24:fc:93:60:ec:fb:cc:e9:5d:
bf:11:94:b6:90:82:01:18:cd:ca:9d:fb:da:fa:86:
50:77:40:38:a7:d1:f0:d7:18:98:2d:1c:7e:ea:66:
51:ec:9b:30:49:9e:ce:af:61:ef:b5:99:4e:f1:6d:
46:cc:c4:16:fe:12:85:ab:bc:84:cb:1c:69:3f:a9:
d3:18:99:57:ba:fd:ac:10:1f:aa:86:6c:38:a2:76:
70:31:bf:c0:95:13:e0:3c:a8:fa:4b:0a:36:c1:d3:
44:30:c6:57:a4:e6:ae:d1:b8:f2:25:3b:2d:47:3d:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:1F:61:28:A1:28:4A:F3:F0:70:EE:44:69:80:14:E6:14:4F:9C
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:fd:2a:db:25:e4:be:81:7f:1b:4c:62:09:13:a0:93:f0:
b7:aa:89:dc:1f:e7:bb:28:16:4f:31:3e:da:a3:9f:19:32:3e:
6e:0a:6a:39:68:5d:20:2b:cb:11:5f:45:67:02:d5:cd:3f:9d:
ea:ec:b2:39:8e:88:a3:63:7e:ca:9e:22:bb:85:c8:77:b6:ca:
3d:fc:bb:06:c4:ac:c3:30:ad:32:f2:4c:23:e3:f2:1b:3f:54:
09:3b:2e:c5:5f:84:2d:5d:75:1d:9f:29:98:a3:f6:22:8d:23:
5d:0d:6d:62:5b:45:fe:bc:f2:89:c5:f8:6b:4e:5d:d0:76:b5:
3b:11:b7:97:5d:9c:cd:fd:43:88:42:9f:33:65:9f:fd:2e:61:
fb:72:65:48:d7:34:6a:d5:61:d9:90:83:68:95:5a:74:66:2e:
4c:77:4e:94:e6:ab:96:54:02:b4:dc:16:be:e5:8c:28:71:7c:
03:58:e3:b9:79:e4:39:37:23:b4:7f:f6:5b:cb:16:01:bf:e2:
69:98:d7:28:95:85:70:dd:cf:3c:de:5a:56:fb:83:77:06:f3:
9d:22:63:67:4d:54:e2:b7:fd:8d:7d:4b:14:30:d8:6a:64:64:
9e:61:e0:03:ca:5d:c2:d8:c8:64:3f:0c:4c:f4:68:d4:30:c6:
2d:93:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:52 2025 by rpki-client