Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: 5g5OAQlgjvqdgrSWxFtwh/6pVOKq/Yu7fb4rc8pUy1Q=
Subject key identifier: C7:BE:59:A6:F2:01:F8:D5:F7:D9:3A:63:A5:66:E8:C5:46:9D:C9:02
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 019849669A1AFB9244BEB9ED8C66E8D1301F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0D45
Signing time: Sun 27 Jul 2025 01:01:57 +0000
Manifest this update: Sun 27 Jul 2025 01:01:57 +0000
Manifest next update: Mon 28 Jul 2025 01:01:57 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: UsL3/7QmRUDDhHshVCcDiXMt/gtSaskJoLM+0F85m7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9a:1a:fb:92:44:be:b9:ed:8c:66:e8:d1:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Jul 27 01:01:57 2025 GMT
Not After : Jul 28 01:01:57 2025 GMT
Subject: CN=c7be59a6f201f8d5f7d93a63a566e8c5469dc902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:0d:6e:1a:60:a1:2a:d3:8c:48:5b:74:41:
39:32:ca:76:e9:dc:34:26:44:6f:7c:7f:74:70:0c:
62:df:67:31:99:8e:9d:05:10:4f:f2:b1:40:d2:de:
eb:76:cf:03:f7:2a:83:21:f8:fe:cb:ad:43:fa:c2:
bd:f4:97:5a:b3:cd:89:02:fe:b4:a8:0b:0e:b1:36:
63:6a:a4:ec:d5:c9:ec:80:c0:d1:49:eb:69:eb:18:
5c:b5:e0:15:81:d2:bd:d2:59:c4:2f:19:17:ed:3c:
8c:cb:3b:01:3e:9d:e8:dd:00:f6:f0:5e:17:d4:0c:
2d:a3:c4:6a:86:7a:97:0a:79:3b:6b:b7:8a:83:0f:
1c:28:12:d9:ed:6c:f1:42:fb:22:65:75:e4:7a:e5:
73:7a:89:41:5c:93:b2:21:c4:c4:04:7a:7d:60:64:
b4:06:02:cd:ea:4f:7c:32:6f:94:bf:5a:5b:1d:a9:
ee:90:7c:e9:71:78:22:2e:1c:cd:de:12:7c:ee:44:
4b:88:42:52:77:ab:d8:db:fb:7b:5f:37:8f:1d:b3:
f6:71:b2:09:b1:ae:3d:b8:ff:a2:0f:32:6e:c3:ba:
61:63:37:9a:67:34:9d:44:40:27:85:b2:d7:56:95:
c8:94:08:43:47:24:cd:bf:90:ea:df:89:66:87:c1:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:59:A6:F2:01:F8:D5:F7:D9:3A:63:A5:66:E8:C5:46:9D:C9:02
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dd:07:0d:d7:90:60:da:7d:e9:f1:6f:22:aa:6d:f1:45:e5:
b4:d5:49:0f:81:2f:83:6f:7e:ce:92:97:10:53:d0:e2:00:a5:
28:a8:f8:2f:18:2c:82:bc:62:27:d8:4b:b7:d6:8e:2c:4c:d7:
20:c1:35:04:bc:7e:26:a3:05:a5:99:11:d9:28:a7:6e:6f:c8:
54:eb:1e:dc:9f:3a:da:b8:bb:03:5b:ca:dd:e0:67:6e:45:84:
43:25:c5:d7:f8:e1:90:4f:03:6e:c9:ad:20:75:03:e9:5e:36:
8d:31:85:68:84:9b:30:a9:c7:33:99:ec:9e:e0:94:cd:e2:8a:
27:8f:5f:9f:99:54:ac:bb:1b:9a:fc:ab:f5:48:17:f6:6e:2f:
a3:b9:97:06:9e:be:a4:87:20:c9:cb:ea:06:42:fa:c8:0a:99:
d0:9e:45:e3:35:b5:3c:60:ce:46:9c:6f:db:47:68:e4:78:4c:
45:59:26:7e:51:5b:7a:69:59:b9:07:4c:69:cb:94:47:d0:ad:
a1:35:c6:c7:41:ac:7b:64:9d:39:5d:0e:2d:15:ee:f4:70:ae:
d5:70:22:15:a5:89:e5:ce:fc:e1:0d:ec:4d:9b:a9:68:5c:cf:
e0:46:c2:87:f0:cc:31:59:3d:e2:60:60:50:27:b0:55:ca:f5:
9a:26:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:31 2025 by rpki-client