Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json)
Hash identifier: 1pEt4o3esQ0rzQOvyNKXSdar5VbOtZ4uZI7qtFD0A2c=
Subject key identifier: 39:F5:34:76:54:40:25:07:6D:75:74:BE:D6:32:2E:2F:6D:1F:1F:59
Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Certificate serial: 01984777E7F214F705774F109C094B9DF897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 16:01:37 +0000
Manifest this update: Sat 26 Jul 2025 16:01:37 +0000
Manifest next update: Sun 27 Jul 2025 16:01:37 +0000
Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: 6IKs4jEMPoWDMtugGf2D/rAcP7jfu/+GBW1BDGRrn/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:e7:f2:14:f7:05:77:4f:10:9c:09:4b:9d:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Validity
Not Before: Jul 26 16:01:37 2025 GMT
Not After : Jul 27 16:01:37 2025 GMT
Subject: CN=39f53476544025076d7574bed6322e2f6d1f1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:5d:4e:66:c4:d3:eb:5d:4e:8d:76:ad:b4:
2d:bf:66:64:a8:9d:51:70:e4:d9:37:03:f1:68:d7:
3f:b0:cb:df:23:5b:ca:44:70:46:be:86:94:58:d1:
4a:3f:72:9b:77:63:e0:36:6c:7e:dd:ee:e8:9f:73:
44:8a:c2:60:79:1f:69:7d:de:1c:84:a5:ee:58:d2:
f4:c9:89:b4:a7:a0:38:7a:f7:3b:b3:30:27:26:53:
02:e9:ff:8c:6b:40:ac:5e:78:cc:d9:3f:90:52:6c:
a6:85:71:b0:19:e6:d6:4e:4e:17:69:09:29:71:ca:
01:5f:62:54:61:47:40:22:a6:d4:2a:01:1b:52:53:
25:35:f2:80:50:3e:39:73:62:aa:2b:12:9c:8f:5f:
d4:fc:5a:07:35:89:60:15:bf:d8:55:fd:9d:0f:3c:
e8:f0:66:23:18:85:e7:74:9a:d0:33:b1:cc:6a:fd:
24:e0:0d:19:d3:d8:e2:b1:74:b3:30:e4:67:2a:a9:
cc:88:cf:f7:10:02:b3:3a:8d:5c:08:e3:39:b8:99:
c0:d1:03:a2:fe:0b:99:82:2d:96:c5:83:34:51:24:
de:e4:07:e5:de:a3:6a:ad:50:ab:5c:17:a1:33:81:
85:ff:a4:fd:0d:cf:29:92:49:dc:20:8c:de:93:ec:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:34:76:54:40:25:07:6D:75:74:BE:D6:32:2E:2F:6D:1F:1F:59
X509v3 Authority Key Identifier:
keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cd:51:de:37:9d:f7:92:4d:a8:88:7a:19:77:a2:8e:ae:ff:
19:49:9a:ad:80:6f:43:e9:32:7d:c7:be:4a:3d:df:b6:61:7d:
07:68:4f:b3:98:33:91:47:bb:6a:59:84:2c:5b:ac:91:8c:3e:
1d:7b:25:50:72:b9:92:e9:75:3f:11:cc:70:11:00:d3:cc:75:
e9:7e:16:e9:2d:52:e7:23:af:16:27:e6:8e:b1:5d:97:a1:8d:
6b:f5:f4:da:aa:aa:92:57:ea:bb:82:26:ed:d2:53:9c:91:83:
1c:57:22:db:a7:42:9d:d5:81:b4:38:3f:1a:18:f9:7f:74:52:
6a:14:74:1b:10:6b:9c:59:88:bc:f2:78:8d:4b:86:86:d0:d6:
ae:5b:3d:a0:75:23:24:c9:26:41:b7:fd:46:d1:89:3b:e8:4e:
d8:22:98:75:68:23:47:b5:e3:df:de:05:1d:16:98:66:ff:a1:
84:d1:38:cb:7b:f4:43:e6:c9:bb:2c:a8:a9:ad:c7:ba:7d:bd:
37:4a:5f:67:b1:f8:25:32:6e:8f:ff:80:e5:0f:36:04:10:2b:
1e:9b:88:3f:5a:b3:e0:ec:df:d8:72:08:0d:e7:fe:4a:07:d9:
29:0a:b7:31:2f:c4:64:bb:36:fe:b4:aa:a3:3a:b6:02:27:f2:
67:c7:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:32:39 2025 by rpki-client