Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: SWF1jOqE1A7jLqEd7RN/cwpZOY4CX3XeJpSaGvxGIRQ=
Subject key identifier: 7F:51:2B:27:26:A8:C7:C7:57:35:21:B7:09:28:E2:B2:82:46:23:9F
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 0198511EDE71441727F87B443148B8A33BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 13:00:34 +0000
Manifest this update: Mon 28 Jul 2025 13:00:34 +0000
Manifest next update: Tue 29 Jul 2025 13:00:34 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: /4EM9SJuZxhE5FeZXWwOq7tePqlGu2NFHK0YCeV3hFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:de:71:44:17:27:f8:7b:44:31:48:b8:a3:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Jul 28 13:00:34 2025 GMT
Not After : Jul 29 13:00:34 2025 GMT
Subject: CN=7f512b2726a8c7c7573521b70928e2b28246239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:b2:12:2a:ab:cd:92:a5:d7:82:43:32:67:
e3:7b:2b:ed:c4:f9:dc:dd:d2:a0:4e:58:ea:97:12:
d7:88:6d:a6:a2:1d:d2:d1:bb:a1:df:64:9e:d6:b2:
2c:11:2c:63:64:64:fb:ad:f6:09:25:1f:e0:e3:50:
25:88:fa:20:55:b4:fb:e3:cb:ab:8b:69:e8:11:94:
21:b5:bf:c6:3f:89:a5:8b:5d:21:10:92:49:cc:6d:
46:5b:14:9e:70:dc:25:1c:56:16:03:66:65:0e:3b:
de:2d:ae:36:e7:e8:31:30:2b:9b:de:9b:2e:cd:5f:
38:e9:1c:08:89:34:7f:eb:8f:46:a0:05:a8:14:c4:
a5:27:1d:6f:9f:83:82:2d:0c:e3:6e:50:b5:4a:42:
90:1a:da:90:4c:b3:23:6a:08:b2:eb:26:73:34:c2:
48:cf:9d:83:c9:d3:cc:62:e8:9a:72:38:c0:56:70:
da:f3:90:0c:1e:ba:d7:f4:ad:bb:12:ff:c1:3f:9a:
d8:df:b3:07:cb:4b:32:b3:e2:f1:3a:78:79:66:55:
66:cc:d7:40:48:43:5a:3c:14:15:91:3b:5c:43:8e:
4a:b6:0b:bd:3f:ae:cb:53:5a:78:c4:22:3d:fe:f6:
9b:58:ed:01:b0:b8:55:2d:18:23:32:c8:6f:6f:09:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:2B:27:26:A8:C7:C7:57:35:21:B7:09:28:E2:B2:82:46:23:9F
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a2:4e:57:bb:ae:a8:73:f9:01:01:df:e8:09:d3:8f:37:1d:
94:84:f9:d1:36:13:11:80:97:64:9f:a2:c6:1d:23:48:50:14:
55:02:66:4d:13:9b:df:b2:17:dd:78:fa:fc:8e:dc:59:d3:33:
3d:c9:47:32:1a:6c:0d:d0:49:3c:2b:fe:ba:fb:79:40:a8:d5:
09:25:08:84:04:2a:18:21:36:5e:de:20:30:69:bc:76:bf:c7:
4c:5d:4a:0c:dc:35:28:a7:15:30:b5:47:8c:c0:27:ec:a6:71:
4c:95:5f:f0:e0:54:b8:a5:dd:8f:37:be:7f:63:0e:79:77:b6:
a1:71:e3:21:64:b5:f0:e0:ed:ff:dd:53:85:ad:80:36:d9:c2:
a0:06:9b:e5:03:bb:c6:36:50:85:70:c3:68:d3:29:58:ae:9c:
0a:d1:2b:95:5a:07:09:81:a2:4e:cc:d2:42:ca:15:90:aa:49:
af:29:2e:20:b6:e5:ec:9e:36:68:ba:f5:46:39:c6:38:39:95:
16:b0:84:d4:e4:12:60:df:fd:4e:60:c3:28:83:51:27:4b:77:
05:10:cf:bf:e4:e7:20:c6:b8:c1:7e:42:3f:cd:5d:c8:40:67:
1b:8a:b1:a8:61:94:5f:7e:49:1a:3c:73:5f:34:9d:ab:2d:85:
46:43:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:59:41 2025 by rpki-client