Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: pIf6Iwwwyc4fmRq/Qsdw/m9AXV9C0fNgWJvjREu7W1c=
Subject key identifier: 35:EC:D9:5C:9F:E6:83:0B:2A:D0:1D:18:88:13:7E:F2:F3:2A:4B:F9
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 0199228CB57034634CFB7A92F314C2C3ED41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 05:01:10 +0000
Manifest this update: Sun 07 Sep 2025 05:01:10 +0000
Manifest next update: Mon 08 Sep 2025 05:01:10 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: yXQKslkkyTfljN0qncmv8iX7ZRMVdj6xGrl2Qh9YUPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b5:70:34:63:4c:fb:7a:92:f3:14:c2:c3:ed:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Sep 7 05:01:10 2025 GMT
Not After : Sep 8 05:01:10 2025 GMT
Subject: CN=35ecd95c9fe6830b2ad01d1888137ef2f32a4bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:07:ef:e8:fc:25:10:cf:a6:c2:78:92:03:
12:0f:ff:74:0d:2c:7b:ad:2a:ff:4f:f7:56:80:d2:
1b:d1:31:b3:71:c3:a7:a5:16:ad:95:da:48:c8:99:
6b:6e:bb:d9:0c:78:2b:48:1a:14:c4:b4:b0:49:18:
56:d1:bf:76:72:06:00:c0:0f:c4:f6:62:94:ef:78:
3a:43:d6:84:95:b0:3b:3f:59:89:9e:d4:04:af:f8:
0c:86:bd:53:ab:85:6a:8d:88:2c:5c:15:84:f4:c9:
fc:ab:dd:da:62:27:c1:05:3b:e7:a4:2a:c9:3b:d2:
d8:01:c6:b7:53:45:7a:d1:00:8a:36:b2:e9:6a:7e:
11:94:bd:8b:be:7a:43:5b:fb:cb:fa:b7:4d:04:f8:
dd:a3:c3:e0:b2:b2:26:9c:95:e1:ef:ec:48:58:c2:
32:04:b3:e5:3e:a4:27:30:21:6b:88:40:59:7e:bc:
9c:0e:9c:44:50:72:db:5c:f3:fb:3f:b1:34:09:cd:
46:33:d8:e6:ed:cb:d5:b3:e7:82:54:ad:0e:38:2a:
0a:7e:d0:4f:7e:2a:77:ae:58:6f:8c:a4:ee:dc:db:
72:f5:73:32:37:3b:f2:dc:b1:d9:47:80:13:b6:d2:
de:38:41:cb:38:28:ae:a5:54:78:94:7f:91:88:b0:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:D9:5C:9F:E6:83:0B:2A:D0:1D:18:88:13:7E:F2:F3:2A:4B:F9
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:12:c7:1b:d9:87:d5:ea:59:a7:58:89:a9:34:ef:52:0e:7c:
c0:2e:20:f7:00:a0:04:4c:ad:98:60:0b:6b:81:c8:03:5d:d6:
f6:2f:6a:19:d3:f1:d7:55:99:e2:24:21:54:af:8d:27:bd:e8:
86:82:db:97:00:83:a0:65:86:b7:38:66:56:3e:1d:28:dc:de:
45:2c:12:11:d8:d7:13:05:d7:42:3b:c8:4a:f6:64:b4:46:b6:
4c:f2:76:07:15:04:15:b0:ce:98:80:4b:91:d2:4d:b3:c1:46:
cb:09:3a:55:23:92:7f:bc:99:39:65:c7:4e:56:88:07:5f:31:
51:cf:78:b3:ff:52:8c:f3:38:09:b2:01:d4:1a:34:27:b6:6b:
6b:27:c0:22:d4:ae:ab:f6:d2:f5:ee:30:f3:1f:ed:a5:5d:9f:
72:98:84:02:38:0c:1b:f6:62:2b:e0:c6:a7:d9:1c:eb:09:8f:
4a:d9:96:96:74:c3:08:25:48:5e:d8:c5:70:56:d7:26:5a:29:
11:eb:ca:98:cb:2e:a2:d1:bb:14:e5:be:f8:aa:8c:18:b3:26:
37:b0:e4:61:f6:52:fd:5f:0b:52:71:a3:de:65:68:80:c7:bb:
34:65:0d:fe:f2:fe:cf:ff:15:66:a1:0e:7b:12:86:75:f3:19:
85:9c:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:02 2025 by rpki-client