Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier: jgbydiSwEXcrjMvb66JuwecL//BFnZiqjuRjz/A7G84=
Subject key identifier: 19:54:40:63:4A:F3:58:DC:C7:D8:79:0E:A6:FD:49:C8:76:CF:9D:04
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial: 0199239F71CA86178321C83B585C1D00627C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number: 1215
Signing time: Sun 07 Sep 2025 10:01:15 +0000
Manifest this update: Sun 07 Sep 2025 10:01:15 +0000
Manifest next update: Mon 08 Sep 2025 10:01:15 +0000
Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: Hre3J3PYIReap4gGXvWyh6feAzkihFjwOo1Qhbk26J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:71:ca:86:17:83:21:c8:3b:58:5c:1d:00:62:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
Validity
Not Before: Sep 7 10:01:15 2025 GMT
Not After : Sep 8 10:01:15 2025 GMT
Subject: CN=195440634af358dcc7d8790ea6fd49c876cf9d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:30:94:83:8d:21:60:97:be:f8:56:9b:25:
f7:8f:83:6a:27:c0:dc:25:e7:b6:41:29:4a:ae:75:
f1:55:47:dc:c4:60:de:c7:94:5d:8d:31:9b:1e:5c:
71:34:2f:6b:10:a7:56:a3:9a:00:86:b4:ca:cd:f3:
82:48:63:a8:83:4f:54:43:da:5e:5a:a7:0c:15:43:
ed:27:85:c5:99:b5:6f:fd:e8:b3:0a:7a:d8:15:17:
b7:48:2d:3a:48:99:d8:37:91:f9:97:b9:f0:6f:39:
c0:cd:90:0e:40:ee:e5:e0:00:91:ce:b0:8a:55:c3:
c8:f4:76:07:0e:30:d4:1b:58:51:2a:0a:f7:af:67:
c3:5d:52:dc:29:03:55:c7:c4:ff:a8:d9:0c:a9:17:
65:85:ea:d3:1a:32:e4:83:1b:6e:5c:44:65:27:f7:
f2:bd:e7:c3:40:5b:23:2e:99:f9:8d:ad:9b:73:69:
fa:d8:06:a4:6d:bc:01:80:73:5c:c1:94:d6:48:2a:
5e:e7:e4:d9:6b:61:cf:2f:f8:bf:22:1e:34:4f:c1:
e5:76:57:80:66:89:d5:45:3a:f3:a2:d6:e8:8e:3f:
cb:90:d5:7e:4e:f3:60:0b:0a:ce:7b:11:14:ae:b0:
be:fd:a9:76:62:37:ae:e5:86:dc:78:5a:3c:2a:67:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:40:63:4A:F3:58:DC:C7:D8:79:0E:A6:FD:49:C8:76:CF:9D:04
X509v3 Authority Key Identifier:
keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e0:65:a8:62:e1:24:cd:73:02:35:54:ab:db:8c:4b:90:90:
ec:e3:83:b4:ea:11:d5:e0:80:e9:96:3a:20:d9:d0:99:dc:69:
ea:4a:3b:53:34:be:0c:7e:1d:13:27:6c:54:16:59:6f:9a:7f:
7a:1b:27:5a:d7:95:74:f8:61:e9:ce:e3:c4:e2:a2:40:08:04:
d3:bc:17:af:0a:39:c5:40:e9:9a:27:7b:fd:e1:c9:8a:69:37:
2c:11:ce:ca:f2:6b:c5:f1:9e:63:95:a2:bd:f8:a4:45:f5:cc:
04:ca:f1:f9:2f:02:2f:96:89:10:81:3d:ad:2f:04:83:87:2b:
e2:98:3a:88:f9:87:ff:6e:40:05:6a:df:af:d4:b3:b2:23:a0:
d8:f1:2e:85:7e:0e:89:b3:50:4f:56:9f:ce:ed:64:31:90:ba:
f6:49:62:4c:2a:62:36:c3:e5:36:43:fb:a1:c3:99:62:2a:60:
c1:61:c1:24:02:96:22:e5:47:d8:e9:f3:c2:7c:0e:49:08:44:
8b:36:2e:85:52:12:4b:4a:af:d9:13:52:36:35:a6:d9:f5:4e:
58:f5:02:cd:da:81:e1:6a:2c:a1:30:c9:c4:4d:ba:b5:33:0e:
ba:97:2e:2c:6d:b1:af:fd:89:71:51:e3:7e:4f:99:4d:3c:5a:
32:66:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:02 2025 by rpki-client