Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
File: fqQd0tUnX7allrJhoCfMjX-fNGw.mft (raw, json)
Hash identifier: IaaFwzjqHOFEPoR5169vC//101TQ8+al//qUCt6v45Y=
Subject key identifier: A9:71:CB:FB:43:F2:A4:0E:AE:01:FE:0C:BE:91:EE:AC:EB:9C:65:67
Authority key identifier: 7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
Certificate issuer: /CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Certificate serial: 0199239F5D53F7B31B251F28C93FBECBD01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
Manifest number: 0D5A
Signing time: Sun 07 Sep 2025 10:01:10 +0000
Manifest this update: Sun 07 Sep 2025 10:01:10 +0000
Manifest next update: Mon 08 Sep 2025 10:01:10 +0000
Files and hashes: 1: fqQd0tUnX7allrJhoCfMjX-fNGw.crl (hash: Jom/N7xs54HtR/zfutYXvT4tFZTu/0b6sGphsa4AKek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:5d:53:f7:b3:1b:25:1f:28:c9:3f:be:cb:d0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea41dd2d5275fb6a596b261a027cc8d7f9f346c
Validity
Not Before: Sep 7 10:01:10 2025 GMT
Not After : Sep 8 10:01:10 2025 GMT
Subject: CN=a971cbfb43f2a40eae01fe0cbe91eeaceb9c6567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:c2:32:09:bc:28:e4:b6:2c:a5:bc:db:48:
06:60:28:a6:99:c6:45:e8:58:55:e1:78:94:45:3a:
e9:64:63:79:ba:46:e2:1c:97:1c:78:49:5e:c5:79:
5b:cf:e3:ee:e8:57:83:29:97:2e:78:e0:4b:54:e1:
d7:38:3a:fc:ae:a6:f9:66:6b:5e:de:26:53:f3:bf:
41:f4:dd:7c:fb:e0:93:1e:d0:89:01:5d:d2:33:f7:
0d:d1:7c:18:40:ec:3b:7f:87:8b:66:7c:05:ff:11:
56:f8:c0:05:b0:e3:63:f2:8e:d0:29:ec:2c:cd:e1:
41:df:8c:e3:c1:cf:3d:08:11:f8:8e:b7:05:6b:fb:
47:d3:7e:7b:db:d9:0c:ba:51:a9:6f:8a:19:4f:53:
08:08:24:9f:5c:88:0f:9a:d8:fa:7a:75:77:a1:b3:
dd:81:64:09:36:26:73:58:7b:fc:4d:f4:54:6b:6b:
19:8f:f3:e7:f8:f5:79:41:1b:57:62:b0:ef:a6:bc:
8b:61:e7:2f:cb:29:a5:42:d1:cb:0e:68:23:92:6a:
69:9a:a7:af:90:f1:8f:e3:c6:ec:da:99:82:c6:fb:
b0:07:4c:40:99:2b:72:1a:7d:23:7d:de:87:18:25:
45:19:98:90:f9:44:ed:82:5e:7b:61:1f:51:e7:30:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:CB:FB:43:F2:A4:0E:AE:01:FE:0C:BE:91:EE:AC:EB:9C:65:67
X509v3 Authority Key Identifier:
keyid:7E:A4:1D:D2:D5:27:5F:B6:A5:96:B2:61:A0:27:CC:8D:7F:9F:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqQd0tUnX7allrJhoCfMjX-fNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dcd400-6dbf-4f2e-8a96-e0d9929b8d01/1/fqQd0tUnX7allrJhoCfMjX-fNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:a8:ac:4f:60:f3:97:8a:bb:a2:c6:35:13:6e:70:a0:05:
10:06:cf:ca:8b:97:57:dd:d1:60:6d:fc:3f:10:5c:41:bd:83:
48:b5:02:40:d8:cf:d5:24:80:29:7b:54:7c:a7:7b:17:0e:7a:
82:e8:80:e6:7f:68:a3:62:0f:e8:15:f0:1b:f3:7a:37:51:e8:
70:3f:25:94:5b:ac:81:28:b7:0f:47:3d:24:e6:9f:e0:e8:b6:
bd:bb:b3:d0:4c:42:06:b7:28:9e:d2:50:5c:3d:66:0f:d9:d9:
7a:57:cd:48:2f:59:7c:0e:08:14:48:ce:7d:78:74:71:64:2e:
7d:4f:f5:2d:7e:9b:00:85:8f:bd:72:ad:2f:ad:b9:ce:6e:85:
08:d7:60:f4:1c:4e:3a:5c:27:f5:69:bd:9e:04:d5:3d:42:54:
30:65:be:f2:98:0b:d5:59:d6:55:f4:c9:f3:f0:b5:09:d4:5a:
b8:50:18:3f:9c:cd:af:9a:70:ca:c0:6d:01:fa:b8:50:df:af:
7b:7e:db:d4:fa:64:7d:c4:63:68:b3:f2:0a:1a:38:74:e3:8c:
00:7d:9d:77:40:8e:15:6b:87:76:a4:3f:03:cf:32:d4:74:af:
2a:2f:fb:88:60:ca:58:6c:4e:81:6a:ed:6c:b3:70:1d:dc:d9:
0d:c8:26:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn11T97MbJR8oyT++y9AbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYTQxZGQyZDUyNzVmYjZhNTk2YjI2MWEwMjdjYzhkN2Y5
ZjM0NmMwHhcNMjUwOTA3MTAwMTEwWhcNMjUwOTA4MTAwMTEwWjAzMTEwLwYDVQQD
EyhhOTcxY2JmYjQzZjJhNDBlYWUwMWZlMGNiZTkxZWVhY2ViOWM2NTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE7CMgm8KOS2LKW820gGYCimmcZF
6FhV4XiURTrpZGN5ukbiHJcceElexXlbz+Pu6FeDKZcueOBLVOHXODr8rqb5Zmte
3iZT879B9N18++CTHtCJAV3SM/cN0XwYQOw7f4eLZnwF/xFW+MAFsONj8o7QKews
zeFB34zjwc89CBH4jrcFa/tH035729kMulGpb4oZT1MICCSfXIgPmtj6enV3obPd
gWQJNiZzWHv8TfRUa2sZj/Pn+PV5QRtXYrDvpryLYecvyymlQtHLDmgjkmppmqev
kPGP48bs2pmCxvuwB0xAmStyGn0jfd6HGCVFGZiQ+UTtgl57YR9R5zAvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlxy/tD8qQOrgH+DL6R7qzrnGVnMB8GA1UdIwQY
MBaAFH6kHdLVJ1+2pZayYaAnzI1/nzRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYt
ZTBkOTkyOWI4ZDAxLzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kY2Q0MDAtNmRiZi00ZjJlLThhOTYtZTBkOTkyOWI4ZDAx
LzEvZnFRZDB0VW5YN2FsbHJKaG9DZk1qWC1mTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcOorE9g
85eKu6LGNRNucKAFEAbPyouXV93RYG38PxBcQb2DSLUCQNjP1SSAKXtUfKd7Fw56
guiA5n9oo2IP6BXwG/N6N1HocD8llFusgSi3D0c9JOaf4Oi2vbuz0ExCBrcontJQ
XD1mD9nZelfNSC9ZfA4IFEjOfXh0cWQufU/1LX6bAIWPvXKtL625zm6FCNdg9BxO
Olwn9Wm9ngTVPUJUMGW+8pgL1VnWVfTJ8/C1CdRauFAYP5zNr5pwysBtAfq4UN+v
e37b1PpkfcRjaLPyCho4dOOMAH2dd0COFWuHdqQ/A88y1HSvKi/7iGDKWGxOgWrt
bLNwHdzZDcgm2w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:31 2025 by rpki-client