Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: e9tcFjCY/of8A2s0BIJ0rez8KGYYgQRgJK5U03pss8U=
Subject key identifier: 25:E6:BB:B8:2E:ED:FD:3D:21:2A:9C:AA:9F:45:A2:43:B0:C1:11:04
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 01984B548AD207796F72F540DAFDCEB38CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0709
Signing time: Sun 27 Jul 2025 10:01:28 +0000
Manifest this update: Sun 27 Jul 2025 10:01:28 +0000
Manifest next update: Mon 28 Jul 2025 10:01:28 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: qUNiglGxX17t8OAMtNMqvhgVGuuWOaZgNkkDfFPZxyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:8a:d2:07:79:6f:72:f5:40:da:fd:ce:b3:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Jul 27 10:01:28 2025 GMT
Not After : Jul 28 10:01:28 2025 GMT
Subject: CN=25e6bbb82eedfd3d212a9caa9f45a243b0c11104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:38:63:13:f7:03:be:24:d6:15:fd:9b:67:
1a:6c:4f:88:26:d8:40:0c:e6:0b:90:39:d6:c2:54:
b4:fa:d7:f3:78:76:4d:b2:37:a8:76:14:f1:f9:c5:
77:a5:68:59:a3:67:b7:a6:2c:57:47:6f:8f:07:99:
44:dc:d1:f1:1e:f1:f5:60:7d:60:7e:e9:a0:d0:5f:
d4:a7:f2:c1:b7:bd:3e:a9:f2:62:bc:bd:f9:15:1e:
7a:2a:81:96:5c:ff:47:12:d6:ca:e9:33:1e:16:a2:
7e:e9:13:40:8e:2f:48:97:c8:39:86:35:ee:0a:bf:
68:0e:5b:e7:38:b5:62:ee:44:36:24:56:71:84:67:
16:08:81:89:20:d0:93:e9:58:f8:d9:27:be:e5:16:
d2:dd:ca:f9:f2:5a:80:5f:bc:d0:c2:9b:8a:b7:5d:
37:83:fd:fc:39:ba:7b:c4:56:79:fe:e3:d3:18:39:
ed:2a:18:6c:4e:a5:68:51:58:8c:04:a1:55:0a:30:
6c:70:ce:85:7b:7e:96:f3:91:fa:b4:d1:a2:f2:b3:
26:ff:ac:34:a6:1f:44:05:80:70:f7:b0:b8:ce:59:
40:bd:24:8e:1b:c1:2a:2e:a7:d5:21:af:91:83:ec:
23:15:f3:1b:6a:73:da:6a:64:5b:2f:04:29:f2:a2:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:BB:B8:2E:ED:FD:3D:21:2A:9C:AA:9F:45:A2:43:B0:C1:11:04
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:34:8c:ef:70:dd:2f:f6:8b:0b:f5:4a:dd:ce:09:f1:d5:
b8:53:d5:ee:06:75:45:86:a4:19:a3:e1:8a:5d:29:12:97:ee:
5e:50:93:26:9f:37:e4:e0:9b:96:25:c2:52:ad:2b:4b:c1:fd:
36:8c:f9:62:27:93:f9:a3:87:30:c8:21:98:21:54:9a:9f:d5:
08:0a:d2:c2:7b:39:4b:92:43:56:4d:c9:a3:99:7b:21:a2:86:
6e:f0:5f:78:0f:0d:e4:38:eb:88:60:8c:95:b7:1a:d0:66:ca:
57:c0:4d:e5:ed:c1:07:a9:a1:96:cd:d0:fa:8f:95:dc:4a:9d:
6b:ca:a0:a6:85:17:5f:4a:4d:6f:45:ad:7e:10:c3:f3:a3:d7:
65:c7:6b:f6:01:c0:47:a6:a8:f3:9b:de:ab:cb:49:e3:f7:bd:
ee:12:4a:f3:14:bc:0f:33:f2:c9:66:66:a2:01:76:aa:fa:d3:
b5:99:57:b1:e7:c3:44:40:6c:53:5d:40:6d:76:e9:b9:12:65:
dd:72:52:5c:e3:74:18:0c:74:eb:94:cd:40:fb:4f:e5:91:6a:
3e:84:10:26:04:a7:c5:76:ff:38:d4:43:77:f8:6e:d5:bc:9e:
ac:0f:2f:72:8f:d2:a0:2c:28:98:62:cb:c4:a5:86:5d:00:2d:
36:c4:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:47:53 2025 by rpki-client