Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: 2ky3tejkZWMi4/fAEMqjfXdyjcf3AmuWtDCZ+yHqrtg=
Subject key identifier: 01:A0:A2:E1:EB:42:CF:A3:45:D0:15:1C:54:74:B6:3F:7A:85:2F:DF
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 0198496503AB24C2911E89CE7E47824BE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 0590
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: saF4Ckhg41iIBZR/xRb2S4ww6kqswCT7jBTElRVHSho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:03:ab:24:c2:91:1e:89:ce:7e:47:82:4b:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=01a0a2e1eb42cfa345d0151c5474b63f7a852fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:e4:2d:dc:19:9c:fb:f9:e5:6d:21:71:23:
b5:ee:0d:4a:46:67:61:30:0a:e8:ad:2d:f5:33:38:
04:57:4f:b9:6c:2f:bd:76:a3:f4:de:7a:89:43:f1:
fe:1c:27:74:1c:37:29:96:dc:48:76:26:f8:3f:7f:
e2:3e:18:36:9e:fb:22:22:78:58:c9:ed:43:a2:ad:
f9:be:f1:48:07:98:03:f4:27:b9:21:85:08:ac:a4:
5f:42:ed:c6:5c:2b:56:ed:19:57:bc:82:4a:f3:c0:
fc:b5:74:52:9e:80:87:26:d8:5b:70:1c:18:69:f8:
88:4c:75:fe:19:98:70:2c:18:92:81:b7:f5:86:ab:
83:2e:4e:4a:93:ea:65:4e:31:36:3d:ad:ba:5c:ee:
1d:88:e3:5e:e8:16:b4:03:f8:b9:83:ad:ab:f0:c8:
8b:b1:ba:ee:64:95:86:84:8c:f5:0b:b9:9f:47:d5:
8b:a1:4a:f8:27:3b:5d:d3:6a:2f:87:68:f9:d5:7e:
0d:f9:e3:4c:34:da:eb:89:cd:e9:0c:05:70:f0:7f:
35:52:f1:f4:f5:cc:17:48:d8:12:25:64:69:a8:4d:
23:00:29:c4:69:0a:49:9c:7f:1d:fc:da:e0:9e:41:
f7:25:fd:0c:a4:ad:0b:6e:79:bb:23:e6:b6:5d:21:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:A2:E1:EB:42:CF:A3:45:D0:15:1C:54:74:B6:3F:7A:85:2F:DF
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:da:39:2a:85:74:6b:27:c2:00:99:00:4d:86:07:15:53:cc:
00:5b:0f:b5:7a:46:d7:ac:57:b7:96:09:e6:72:b7:d0:cf:a5:
df:fd:fb:52:01:13:c4:10:a5:ef:c8:01:b5:d8:4c:48:5b:d7:
6a:0b:df:6a:39:b2:93:75:c1:62:0f:52:75:cd:4d:b5:91:81:
4c:04:57:76:5a:8f:a5:fd:fe:90:5e:c7:ba:da:d2:f2:c2:20:
52:88:43:e2:59:d7:e2:bb:af:f9:32:a5:e8:8b:59:21:d1:ec:
9b:29:af:8e:a4:80:21:33:5f:5e:4d:85:1a:6d:83:22:3b:6a:
1c:d2:48:3c:68:19:4c:d6:fb:3a:62:17:2a:cb:07:ed:da:60:
0f:84:0e:07:c3:c7:21:24:7c:2a:75:f0:71:0b:eb:65:f2:3c:
96:be:70:ea:02:9b:1f:33:28:24:65:3a:7f:ed:3e:5d:af:70:
37:07:2a:f4:df:a2:e8:35:f9:c3:f4:a3:4d:4c:82:a2:b9:07:
65:70:13:a1:67:ef:23:d6:41:22:71:de:8e:29:c1:95:75:c9:
69:af:a8:cf:99:26:ef:4c:67:fd:44:d8:87:f1:09:87:b3:e0:
ea:93:32:99:2a:37:b4:52:6b:46:0f:fb:ed:77:0f:cd:fd:30:
0f:33:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:19 2025 by rpki-client