Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: gv/lx7fVB1IzcNvbcfoRVv007jXLxvqNeH/kTS+BRQo=
Subject key identifier: 96:A8:3A:83:11:EA:BB:01:A9:E9:6F:B3:A5:4E:A1:2C:54:51:C0:EB
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 01984B54B4FD51B13642EE1B69F0E44C27F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 0699
Signing time: Sun 27 Jul 2025 10:01:39 +0000
Manifest this update: Sun 27 Jul 2025 10:01:39 +0000
Manifest next update: Mon 28 Jul 2025 10:01:39 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: YJXTz5Jao+uHdHbdDtVF7aqHvfxkPzNfLfAa7FXOWwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:b4:fd:51:b1:36:42:ee:1b:69:f0:e4:4c:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Jul 27 10:01:39 2025 GMT
Not After : Jul 28 10:01:39 2025 GMT
Subject: CN=96a83a8311eabb01a9e96fb3a54ea12c5451c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:32:27:0d:6a:73:b7:7a:5a:33:f2:6c:0c:
c4:6d:38:bb:ba:ff:29:f1:46:be:ea:77:8b:02:79:
6c:b9:d5:f0:88:ba:48:79:4e:e3:86:d8:88:ed:66:
3e:0d:cb:09:07:46:0f:8f:23:dc:b7:09:99:98:9b:
8b:e2:04:8f:4c:ac:72:71:03:d0:dd:1f:01:5e:67:
0b:47:02:83:ef:32:9e:74:48:70:69:ab:70:b5:88:
51:79:22:0c:b4:86:0d:93:2b:3e:ee:3d:4d:c2:ad:
dd:0a:75:24:96:d5:7c:88:f6:a3:80:43:c4:ab:ce:
30:81:2f:ea:8b:7c:01:e3:58:c6:2d:38:c9:14:65:
f1:cf:94:d2:08:55:a7:7e:c0:c9:7e:6a:47:40:12:
49:02:f8:c6:bd:19:2f:c6:58:12:0d:2e:1a:0e:3e:
44:73:9f:15:96:a7:1a:f3:70:e7:22:a9:11:e9:b0:
89:6a:9f:74:63:4b:85:cf:3a:05:1c:b6:4b:f3:38:
24:b5:aa:f3:3e:b3:b6:7e:e9:b1:7a:84:1c:60:fb:
28:ec:62:eb:e0:19:53:11:2d:67:61:6c:b9:d5:80:
1d:89:af:eb:ca:d0:90:81:2c:db:60:e2:f1:50:01:
f3:8a:90:3a:a6:24:ba:ed:de:eb:fa:58:bf:96:7b:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:3A:83:11:EA:BB:01:A9:E9:6F:B3:A5:4E:A1:2C:54:51:C0:EB
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1e:5f:03:eb:20:6f:5b:b0:f8:af:d0:10:fb:da:a9:84:15:
43:14:70:5d:84:bc:ee:4a:48:ac:32:db:64:59:22:5a:5b:59:
73:a1:4b:83:b1:60:8f:f3:82:a1:74:c2:14:83:4a:00:94:87:
12:f1:27:3e:4a:ba:b8:48:7c:11:57:d2:cc:e9:07:9f:9e:95:
6a:63:4e:17:d4:f1:76:50:96:b0:7e:08:23:df:83:6b:b2:c9:
94:6d:5e:11:5d:7a:03:d4:69:33:38:13:6b:79:9e:30:31:3b:
4e:24:6c:05:46:f9:9b:d5:9c:97:c9:9d:15:b1:18:63:21:70:
fc:a4:dc:6e:73:8b:07:41:50:71:b1:e0:df:de:fb:fd:5c:c6:
f9:8d:a2:d7:76:da:d8:6b:89:d7:20:d9:02:e2:2d:5e:29:73:
01:b3:ce:4a:45:bc:59:93:b7:af:fd:1c:9d:57:eb:82:b1:ad:
61:22:d9:9d:5f:5e:66:66:96:81:3b:2d:de:a6:a2:a7:5c:87:
2e:39:c3:55:f5:af:98:fb:9a:ec:1c:9c:a2:18:58:0e:4a:dc:
1c:b9:f8:04:39:4f:44:84:c4:b5:f0:54:21:5b:6d:fd:26:75:
41:08:69:65:c7:db:d4:1b:d2:9f:07:8b:f9:d0:6c:15:34:f1:
28:32:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:53 2025 by rpki-client