Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: maorFDOcgxichLl974+6q18yvnknKqemrSMOkG9z+N0=
Subject key identifier: 8C:B9:56:F0:A2:62:EA:67:5A:C1:6B:97:93:CF:E3:D7:FB:80:77:DA
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0199221E99566F66226F2C7453601132EC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0A04
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: RcPcABhbyJfOEC0UQAXeKKCtYB2wTWYxt9QkVNk+n/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:99:56:6f:66:22:6f:2c:74:53:60:11:32:ec:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=8cb956f0a262ea675ac16b9793cfe3d7fb8077da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:98:27:d0:dd:d3:22:b7:70:8c:55:ee:e0:
63:95:0d:06:7c:29:6a:9e:0b:6b:5b:db:47:56:f6:
63:fd:32:f4:a7:ed:61:bc:73:19:67:bf:70:13:f6:
28:a7:70:eb:71:61:71:95:90:38:fd:3c:05:37:8b:
81:01:d3:42:09:36:46:50:a7:6d:70:d4:91:d8:47:
6b:fb:b6:f5:f2:4e:3a:18:40:b9:c4:1c:10:a3:82:
73:5c:9a:c1:25:aa:9e:b7:a4:30:b3:82:20:c1:f3:
1c:03:41:2a:b4:db:3c:7d:e3:0f:db:b7:51:c0:d8:
2c:de:7b:88:e6:bd:5d:4a:d5:d6:d5:1d:07:03:2c:
a4:40:82:1a:46:02:db:42:58:95:ad:98:6d:41:73:
fb:7f:e3:4d:be:c9:3e:01:39:c6:ea:d6:1e:58:d4:
ee:cf:89:5c:51:dc:57:5c:f2:d4:9c:d1:91:92:9e:
d9:1f:ba:aa:f5:da:c5:94:6d:3e:ad:0a:5a:d2:a0:
0b:13:d3:1b:b7:62:85:6a:ba:c8:b2:65:b4:d8:fd:
02:dc:b3:70:46:79:39:7b:13:35:22:28:47:04:4b:
7c:41:14:4b:98:9c:36:18:89:85:25:03:ab:e0:e2:
c2:ff:b0:e8:c4:17:f7:b0:60:8c:37:8f:d6:7b:a2:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:56:F0:A2:62:EA:67:5A:C1:6B:97:93:CF:E3:D7:FB:80:77:DA
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:74:54:0f:a8:c3:dd:da:74:ed:12:72:cd:b5:f1:7e:96:
d4:99:9b:8a:74:f8:6b:99:5a:a1:f0:61:57:a2:0c:e7:95:cd:
03:75:f0:84:1b:d6:aa:20:ff:db:71:36:4a:81:d6:d5:d2:76:
9b:c0:f5:91:43:8c:5e:56:b4:17:5e:b5:28:5f:95:09:f4:e3:
f1:e4:69:06:e4:95:14:55:fd:1f:ea:50:64:08:08:ad:43:58:
10:5d:b8:25:ec:bf:c6:6f:39:96:b2:83:e4:46:79:54:68:46:
86:06:0b:73:1b:57:cc:cc:fc:c9:48:28:ef:a3:5d:2b:b8:bc:
f1:f1:7b:97:11:f2:c6:3e:85:5b:bf:54:7c:fe:14:6e:d2:0b:
44:27:88:9f:3e:fb:8b:6e:3a:be:28:aa:e7:4d:32:7c:5b:8c:
54:87:02:ca:d6:b6:85:f5:c2:c2:55:91:52:25:7d:17:fe:5a:
3c:6a:ff:70:24:8e:54:28:bb:c6:92:a1:06:bd:f6:e2:36:2a:
87:fd:cf:6b:58:b6:67:0f:44:69:7e:4c:15:42:63:f0:d9:4d:
6e:f1:1c:31:2f:2d:f0:54:71:9b:80:49:27:5e:d3:a7:3a:bd:
ce:79:ed:5b:dd:93:84:3f:44:c6:dd:9a:1d:f1:8e:0b:a7:b3:
11:7a:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:42 2025 by rpki-client