Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier: 5ycSHA+rSKq9sBE3PEkH/VZp34d5ueTf8WU3onkqnRQ=
Subject key identifier: 63:DC:26:9B:32:FE:0D:7E:06:3F:21:46:41:A2:1D:FB:1B:94:7D:F7
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial: 019848C05A5A91DD12537A0CC7EA8A661CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number: 0ECD
Signing time: Sat 26 Jul 2025 22:00:22 +0000
Manifest this update: Sat 26 Jul 2025 22:00:22 +0000
Manifest next update: Sun 27 Jul 2025 22:00:22 +0000
Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: mx2h4DhUe2muiuLqay46yEjr+BRvZmX5pbpFSsZjcmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5a:5a:91:dd:12:53:7a:0c:c7:ea:8a:66:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Validity
Not Before: Jul 26 22:00:22 2025 GMT
Not After : Jul 27 22:00:22 2025 GMT
Subject: CN=63dc269b32fe0d7e063f214641a21dfb1b947df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:3d:ca:12:29:d1:dc:82:11:20:82:09:e2:
86:3f:e9:07:24:25:91:36:03:39:e6:9a:c3:2a:48:
c0:94:ec:56:05:64:eb:cc:f4:a7:39:e5:49:20:35:
a9:ab:63:74:ec:b8:90:d7:67:8c:1a:ae:6a:19:1d:
d7:86:ca:6f:7c:e6:f2:4d:83:79:3d:cc:dd:a3:a3:
66:5a:68:ac:75:6b:64:d0:af:ed:5b:58:0b:80:fc:
71:b6:d3:40:94:3f:1f:a5:7a:9d:12:0d:7e:75:9d:
a5:30:79:42:36:33:19:4b:26:0b:82:a5:6f:6f:a4:
b4:3c:fd:4e:cc:60:37:ac:3f:2b:b2:a2:2e:51:b6:
4a:8b:5c:ec:4a:6b:be:7a:ad:52:e6:25:e5:63:7c:
f4:b6:59:ac:25:4e:93:24:21:46:87:d0:4b:ae:a4:
8b:93:df:d0:84:b8:9f:77:c8:57:27:6f:03:f2:d5:
2c:ce:8a:81:ba:f6:64:0c:ff:4c:f1:d3:66:f5:c9:
94:0a:7e:33:ee:12:c5:03:23:73:1e:b9:01:a5:fb:
a3:f7:87:54:df:a6:ac:4d:3d:43:4e:70:c5:77:07:
0f:ff:00:76:16:36:61:ba:4f:de:5c:0c:2b:9d:05:
66:f8:f4:09:81:63:0c:5f:79:16:53:4b:fa:7f:11:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:26:9B:32:FE:0D:7E:06:3F:21:46:41:A2:1D:FB:1B:94:7D:F7
X509v3 Authority Key Identifier:
keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:fd:27:fc:c9:38:53:36:45:d9:8c:6a:b3:1d:dd:e8:0d:
68:64:43:b7:ef:7d:b0:24:63:72:ad:ab:82:b0:eb:7e:8f:c9:
14:0e:ac:e5:e1:2b:56:ce:0c:90:0f:4f:c7:94:87:0e:e0:2f:
8c:7e:8a:5e:91:62:81:b1:b9:7e:19:2c:36:17:8c:c0:24:60:
b8:b6:e3:2d:3d:53:3e:8e:5e:34:1c:37:0d:e0:61:d0:c7:77:
34:f3:4e:c3:56:ec:6a:c2:15:9c:ab:df:52:6c:0d:e2:4b:d2:
44:67:8e:18:6a:fd:c3:45:69:0d:18:02:3d:c9:63:d9:b9:5c:
4d:60:a5:ec:cc:a4:64:c7:ab:b2:f5:a4:3d:c6:1d:f3:1a:ce:
be:1d:51:ad:71:00:4c:99:f7:86:3d:93:a6:54:88:34:e1:76:
d7:ac:79:3a:d8:b4:df:a4:45:70:93:43:69:26:e4:d6:f3:91:
3b:e7:13:37:2d:95:d7:9e:5e:8c:0d:5a:c4:07:82:1f:70:52:
1d:d0:ca:d0:03:0c:5e:ad:0f:96:24:7e:3d:f1:2b:bf:e3:7f:
fd:a6:01:e3:0e:0a:af:39:f5:59:d2:13:c4:01:81:dd:19:76:
e0:a7:b8:26:43:62:32:c5:4f:64:e7:14:5b:fd:46:94:1f:fa:
6b:44:eb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwFpakd0SU3oMx+qKZhzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2
YzczMDcwHhcNMjUwNzI2MjIwMDIyWhcNMjUwNzI3MjIwMDIyWjAzMTEwLwYDVQQD
Eyg2M2RjMjY5YjMyZmUwZDdlMDYzZjIxNDY0MWEyMWRmYjFiOTQ3ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsE9yhIp0dyCESCCCeKGP+kHJCWR
NgM55prDKkjAlOxWBWTrzPSnOeVJIDWpq2N07LiQ12eMGq5qGR3XhspvfObyTYN5
Pczdo6NmWmisdWtk0K/tW1gLgPxxttNAlD8fpXqdEg1+dZ2lMHlCNjMZSyYLgqVv
b6S0PP1OzGA3rD8rsqIuUbZKi1zsSmu+eq1S5iXlY3z0tlmsJU6TJCFGh9BLrqSL
k9/QhLifd8hXJ28D8tUszoqBuvZkDP9M8dNm9cmUCn4z7hLFAyNzHrkBpfuj94dU
36asTT1DTnDFdwcP/wB2FjZhuk/eXAwrnQVm+PQJgWMMX3kWU0v6fxFyXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPcJpsy/g1+Bj8hRkGiHfsblH33MB8GA1UdIwQY
MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt
OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2
LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAX9J/zJ
OFM2RdmMarMd3egNaGRDt+99sCRjcq2rgrDrfo/JFA6s5eErVs4MkA9Px5SHDuAv
jH6KXpFigbG5fhksNheMwCRguLbjLT1TPo5eNBw3DeBh0Md3NPNOw1bsasIVnKvf
UmwN4kvSRGeOGGr9w0VpDRgCPclj2blcTWCl7MykZMersvWkPcYd8xrOvh1RrXEA
TJn3hj2TplSINOF216x5Oti036RFcJNDaSbk1vORO+cTNy2V155ejA1axAeCH3BS
HdDK0AMMXq0PliR+PfErv+N//aYB4w4Krzn1WdITxAGB3Rl24Ke4JkNiMsVPZOcU
W/1GlB/6a0TrAw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:59 2025 by rpki-client