Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: 4pCBQag0/a4rB/LrbAuhWBUNLGfFw7rwvMiors2to2Q=
Subject key identifier: 5D:C1:5B:41:EF:8C:B5:CE:43:C0:B6:57:7A:C5:A2:7C:54:F5:E5:28
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019921B0A55618405A92FCA08BCF2C7527D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 02D2
Signing time: Sun 07 Sep 2025 01:00:48 +0000
Manifest this update: Sun 07 Sep 2025 01:00:48 +0000
Manifest next update: Mon 08 Sep 2025 01:00:48 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: Znea3cF3UHz9cOXiZiCqRP3eVm0elUh7OyEtFl6aJUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:a5:56:18:40:5a:92:fc:a0:8b:cf:2c:75:27:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Sep 7 01:00:48 2025 GMT
Not After : Sep 8 01:00:48 2025 GMT
Subject: CN=5dc15b41ef8cb5ce43c0b6577ac5a27c54f5e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:b7:62:32:bf:3a:91:b9:8c:21:3d:36:f0:
a8:1f:1d:f0:82:7a:8b:09:e6:67:f7:24:4f:33:b3:
5c:00:38:07:40:4d:da:7a:d5:11:d5:3a:45:fd:18:
24:d9:cd:0f:7e:54:46:c3:3d:69:5f:d8:2c:83:3a:
cf:a2:c4:89:a1:67:59:04:b0:bd:35:20:93:5f:25:
c4:35:ea:0c:c8:2e:be:63:a0:f2:3d:c7:e9:01:8b:
ca:7b:2c:ac:ea:6d:6b:9f:33:5d:c3:b4:d6:1d:65:
c5:87:46:a3:36:3e:37:70:73:a9:ee:89:d0:e6:f5:
7d:d0:a9:5d:76:62:72:2e:31:41:65:3a:ae:f2:9f:
d1:80:12:d9:cc:d1:26:96:27:b6:b9:80:d9:b0:23:
c7:a1:af:b3:c1:8d:ef:68:60:f7:58:8c:1e:05:a8:
a7:8f:11:65:fa:87:a9:d3:67:d7:65:03:b9:52:ea:
39:65:d6:b0:2c:ef:9f:f2:ca:61:07:96:8e:22:6e:
a1:68:4f:1b:20:4c:4a:02:bd:97:b2:b4:d5:a3:f4:
90:dc:6b:5e:af:c0:1b:28:a0:4b:ec:48:78:3d:2e:
c1:cd:c3:a1:88:8a:f3:ec:ef:dd:1c:a5:5d:7e:a9:
63:a0:91:7e:e2:61:a5:25:94:eb:c2:5c:03:3a:69:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:5B:41:EF:8C:B5:CE:43:C0:B6:57:7A:C5:A2:7C:54:F5:E5:28
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3d:2b:57:ce:92:91:3b:48:1b:88:4e:d3:e8:d1:bb:80:1f:
13:fa:18:db:d4:16:84:d5:78:2f:44:b5:f1:16:70:ce:52:47:
69:bc:41:24:81:d5:21:35:7f:3d:3e:06:1a:f5:ea:33:f9:6d:
55:a8:c7:bc:bb:01:11:e2:6f:8f:9a:d0:e5:c3:33:c4:87:d4:
c5:11:55:a8:c9:2b:be:64:d3:dc:d6:ac:af:ae:47:09:fd:b6:
63:54:f3:bc:60:a4:63:14:24:8b:42:ff:dc:d0:fd:62:90:62:
49:36:52:52:e2:f8:1a:5f:cc:9b:01:52:8d:27:58:6f:0f:ca:
1d:d4:f8:27:35:53:b2:52:72:04:a1:d4:ee:68:90:0d:2c:3e:
f0:24:4f:5a:50:a4:07:16:dc:cd:60:88:01:ae:cb:fb:39:e7:
88:a7:35:7d:e1:c1:75:ef:e5:f2:ae:eb:78:e6:f5:4a:46:dc:
0d:c8:96:43:d9:c2:7b:df:58:39:79:f9:4d:f9:b4:17:a7:e2:
9f:90:58:19:f8:92:ba:74:46:3d:ea:f6:45:c6:fd:dd:5e:ad:
f6:88:df:73:f4:0b:ce:5a:5c:19:ac:45:34:b9:63:b9:94:4e:
82:e2:f9:1b:3b:af:df:cb:c0:85:24:7b:8d:3f:1f:4f:4c:bf:
b6:18:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:24 2025 by rpki-client