Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json)
Hash identifier: Iwjoo9ASh5GSPt+JvI2BD1/ngWdrXbzm1IHZEHLQc/I=
Subject key identifier: F5:56:95:0F:B5:96:A2:22:A6:22:8C:CE:F6:10:3E:54:C8:46:C7:37
Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Certificate serial: 0199228CFCBBF52EFF647C18131B80D0DF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
Manifest number: 0653
Signing time: Sun 07 Sep 2025 05:01:28 +0000
Manifest this update: Sun 07 Sep 2025 05:01:28 +0000
Manifest next update: Mon 08 Sep 2025 05:01:28 +0000
Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: Sp3Rqo0qoYfVY9e+gqZThrar8/IV/qK6SOgepgpaxQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:fc:bb:f5:2e:ff:64:7c:18:13:1b:80:d0:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8
Validity
Not Before: Sep 7 05:01:28 2025 GMT
Not After : Sep 8 05:01:28 2025 GMT
Subject: CN=f556950fb596a222a6228ccef6103e54c846c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:43:0b:3c:aa:65:72:1f:48:7d:c4:80:e5:
a5:78:32:bc:95:1d:c0:ca:d9:4f:f9:83:ac:50:ec:
eb:50:15:20:3a:8d:09:09:6d:0b:68:96:b8:91:d2:
76:a6:da:16:b1:30:ee:ab:af:51:77:a1:f7:5b:85:
07:55:60:1d:98:04:02:24:27:7c:04:6d:82:ab:5f:
54:08:4b:fd:3c:22:9d:1b:73:95:11:e3:ab:6e:13:
65:09:f4:54:06:54:9b:dc:f0:94:b4:db:94:86:39:
e4:19:f7:34:0e:b1:8a:d8:ea:a2:65:9f:1d:65:ee:
9c:7d:f8:2d:72:e7:6b:21:01:ab:9c:53:d9:65:67:
ec:77:17:f4:11:59:9d:ce:f0:fe:f9:65:b4:f2:a4:
b2:60:99:3a:fe:7d:7c:85:ed:80:a9:4a:8c:cc:54:
2d:84:a0:0f:5f:8e:b1:a3:69:b4:3f:44:e3:00:61:
15:bc:23:ae:3f:39:07:b7:d7:e3:1a:a1:a8:22:6e:
b9:9b:e0:ea:e6:f4:34:32:a7:34:a1:b9:86:ff:01:
75:10:eb:98:b6:67:c3:2f:0e:ee:d5:3f:ac:80:72:
80:48:af:bb:21:fd:d9:9f:cb:3a:db:82:60:7f:c4:
82:fc:41:cf:ab:d6:5e:9c:91:f4:39:d6:4a:83:36:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:56:95:0F:B5:96:A2:22:A6:22:8C:CE:F6:10:3E:54:C8:46:C7:37
X509v3 Authority Key Identifier:
keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:cc:f2:6e:2d:b8:c9:ea:4d:d3:a5:24:21:59:96:03:42:
b1:f8:7f:0e:88:1a:26:90:66:4f:e9:90:1a:07:59:32:76:77:
4a:6a:d9:67:dc:9d:bd:46:8e:c9:b8:08:54:a5:38:14:7b:6d:
d8:a7:5d:e9:b1:b0:34:fc:7b:35:62:b3:56:4b:aa:d9:31:c0:
6d:3d:ef:99:45:a1:c6:81:15:a8:58:62:c0:c9:56:0f:79:f2:
34:5e:e8:32:12:d6:8a:ee:00:7d:32:84:9e:f3:14:97:16:59:
41:cc:58:67:6f:59:ad:f4:74:4a:3f:0b:ad:13:00:57:a1:7f:
29:4a:de:fb:19:db:6d:a9:b3:69:4c:cf:fd:17:db:83:6a:e8:
b3:1d:a2:af:a3:5f:b2:78:0c:dd:1d:a6:0b:6c:55:8b:6d:17:
01:ee:39:37:0c:86:06:fa:27:57:a1:2b:ea:f7:2a:b1:3c:95:
87:6b:01:b9:e7:82:b8:5d:bb:57:0f:42:0a:49:8d:fc:3f:70:
46:5a:ad:4e:41:e5:26:98:27:1f:1a:58:70:dd:76:f3:03:c3:
8c:1a:3c:77:c6:e7:90:fb:fa:d1:d9:7a:e0:4b:67:ef:07:73:
1a:f7:ff:53:2c:b9:36:6d:ec:be:1f:98:7a:3d:4b:59:3a:ff:
22:5c:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:13 2025 by rpki-client