Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: OEsLeAUw/2MIQkGBRfyG9DJx4MY5HM049TWAF66ZJFw=
Subject key identifier: D2:B5:38:29:79:95:3B:5E:6D:99:DD:2B:97:D8:D0:5A:42:79:AF:F1
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 0198462CEDD5F2C0751CF25C70A536F10004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 023E
Signing time: Sat 26 Jul 2025 10:00:06 +0000
Manifest this update: Sat 26 Jul 2025 10:00:06 +0000
Manifest next update: Sun 27 Jul 2025 10:00:06 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: 0EreNysa5kppNIeCVNVxtuiyaEtWnk5jQ6YliLH8GVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2c:ed:d5:f2:c0:75:1c:f2:5c:70:a5:36:f1:00:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Jul 26 10:00:06 2025 GMT
Not After : Jul 27 10:00:06 2025 GMT
Subject: CN=d2b5382979953b5e6d99dd2b97d8d05a4279aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:40:ca:3e:6f:6d:d5:3f:15:e2:40:b6:93:
dd:a6:0c:b2:ec:96:94:15:b9:50:44:fd:9e:c8:13:
ce:1c:09:47:e5:df:84:ae:9e:22:76:07:53:b8:f7:
33:0a:d1:01:ab:03:42:df:f7:9f:85:4b:68:56:7c:
7f:10:2a:26:26:9c:36:47:0a:bc:4c:b7:5e:dc:40:
f6:66:28:ee:3d:4b:b6:bb:44:2e:48:2d:d4:6f:d7:
da:c3:b7:9f:12:c7:7f:cb:7b:e8:bf:f2:9e:c0:d3:
51:33:0b:0d:3b:29:13:33:14:18:c9:f8:c2:f8:dd:
a1:e4:96:9c:4e:80:7f:e5:f9:c4:ab:67:23:94:ac:
ca:97:a8:c7:e2:4e:d7:5f:74:2c:0b:d2:d3:30:ee:
a5:47:dc:cd:d5:38:a8:b5:a9:ec:fb:32:89:a0:f5:
d7:18:13:71:19:ad:d8:ac:57:54:c3:05:88:bf:d8:
a0:39:f9:a1:9f:89:3d:f3:b6:c2:2e:49:52:bd:d5:
36:1a:4a:c1:31:ac:ba:98:f1:53:84:a6:24:16:bc:
8c:14:2a:10:a8:6f:70:cf:b7:84:7b:df:d1:fe:8c:
79:3f:33:8d:b9:f4:58:f7:ee:77:b6:6b:5a:2b:7e:
73:cd:28:63:36:75:2f:0f:1d:f2:50:fc:29:90:99:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:38:29:79:95:3B:5E:6D:99:DD:2B:97:D8:D0:5A:42:79:AF:F1
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:28:09:27:fd:68:26:0e:9f:11:65:ef:90:90:0e:02:8c:
f4:81:29:2c:fb:29:ea:21:98:ea:39:72:16:02:73:d1:46:2b:
4c:ca:e6:52:b5:05:b8:91:80:61:20:a8:5a:80:fc:bf:f2:35:
25:0b:3a:c9:e0:41:87:c6:46:d7:9e:8f:a0:08:3f:4e:06:59:
cb:f9:59:d2:3f:96:ab:4b:08:6e:a1:d1:0b:9a:ea:e4:54:d3:
33:b1:c9:d3:c4:b9:c1:e1:23:42:23:7d:a1:17:d3:00:a5:85:
19:9f:af:93:ad:9a:cf:d4:d1:f2:11:0f:3e:97:0d:22:98:86:
9b:66:58:7f:da:df:e6:92:6d:c4:26:30:1a:4b:a8:4a:f6:41:
af:ce:60:5b:c5:bf:36:10:73:c6:82:8b:cf:ea:aa:a2:33:0d:
5a:8e:1f:4d:ae:59:d7:3b:d3:f8:c0:e2:92:b6:b9:11:8b:4c:
aa:a0:af:6f:65:43:1d:8e:02:08:41:4f:b9:72:7a:c0:25:c2:
40:89:ed:76:a1:1e:cd:35:c5:db:c4:e6:c7:78:b5:15:12:55:
ea:bf:1e:b3:86:7b:72:3a:2b:34:29:8f:b9:bb:12:b3:a0:4e:
9f:34:06:14:d7:d7:80:e4:c2:86:eb:ba:d5:4b:9b:21:cd:98:
21:d1:f6:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLO3V8sB1HPJccKU28QAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTQ5Yzk1ZDBjY2Q5OWM4NWVjMDcyMTA3NjQ0YzhjYzhk
MWUxNzgwHhcNMjUwNzI2MTAwMDA2WhcNMjUwNzI3MTAwMDA2WjAzMTEwLwYDVQQD
EyhkMmI1MzgyOTc5OTUzYjVlNmQ5OWRkMmI5N2Q4ZDA1YTQyNzlhZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8VAyj5vbdU/FeJAtpPdpgyy7JaU
FblQRP2eyBPOHAlH5d+Erp4idgdTuPczCtEBqwNC3/efhUtoVnx/EComJpw2Rwq8
TLde3ED2ZijuPUu2u0QuSC3Ub9faw7efEsd/y3vov/KewNNRMwsNOykTMxQYyfjC
+N2h5JacToB/5fnEq2cjlKzKl6jH4k7XX3QsC9LTMO6lR9zN1Tiotans+zKJoPXX
GBNxGa3YrFdUwwWIv9igOfmhn4k987bCLklSvdU2GkrBMay6mPFThKYkFryMFCoQ
qG9wz7eEe9/R/ox5PzONufRY9+53tmtaK35zzShjNnUvDx3yUPwpkJlj3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK1OCl5lTtebZndK5fY0FpCea/xMB8GA1UdIwQY
MBaAFH6UnJXQzNmchewHIQdkTIzI0eF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTIt
ZGQ4ZjY1MjhlYzExLzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85ODhjZTUtODRhYy00MmI3LWI2MTItZGQ4ZjY1MjhlYzEx
LzEvZnBTY2xkRE0yWnlGN0FjaEIyUk1qTWpSNFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCUoCSf9
aCYOnxFl75CQDgKM9IEpLPsp6iGY6jlyFgJz0UYrTMrmUrUFuJGAYSCoWoD8v/I1
JQs6yeBBh8ZG156PoAg/TgZZy/lZ0j+Wq0sIbqHRC5rq5FTTM7HJ08S5weEjQiN9
oRfTAKWFGZ+vk62az9TR8hEPPpcNIpiGm2ZYf9rf5pJtxCYwGkuoSvZBr85gW8W/
NhBzxoKLz+qqojMNWo4fTa5Z1zvT+MDikra5EYtMqqCvb2VDHY4CCEFPuXJ6wCXC
QIntdqEezTXF28Tmx3i1FRJV6r8es4Z7cjorNCmPubsSs6BOnzQGFNfXgOTChuu6
1UubIc2YIdH2bA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:18 2025 by rpki-client