Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json)
Hash identifier: tpsdFesUEGhSHOfajTpXzfpQ4QCPusj6y7mLgCQHMQw=
Subject key identifier: 69:4C:DF:AA:CE:C0:C8:76:50:22:A3:80:25:D6:6E:21:ED:AC:74:81
Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Certificate serial: 019916BF947D8E9EF34711C6EE093E1FBA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
Manifest number: 073D
Signing time: Thu 04 Sep 2025 22:01:18 +0000
Manifest this update: Thu 04 Sep 2025 22:01:18 +0000
Manifest next update: Fri 05 Sep 2025 22:01:18 +0000
Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: nbNaEdhHvdknC34BEuqxu+xME7q/LFEAVp9QsjIWqfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:94:7d:8e:9e:f3:47:11:c6:ee:09:3e:1f:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c
Validity
Not Before: Sep 4 22:01:18 2025 GMT
Not After : Sep 5 22:01:18 2025 GMT
Subject: CN=694cdfaacec0c8765022a38025d66e21edac7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:8c:85:e1:79:c0:24:a0:a0:b5:93:69:d3:
a2:b9:d6:5c:e5:a2:24:d9:66:3a:fc:bc:8c:21:df:
f9:67:19:cb:09:e1:b4:66:75:9f:20:4c:23:b1:73:
0b:14:cd:70:e4:29:da:9a:ab:40:12:35:9e:ad:78:
8a:4b:8f:4c:d2:67:c6:3b:3c:ee:28:98:69:a7:0f:
8a:38:ab:7c:c1:f8:54:4a:95:c5:d4:2a:66:e2:e0:
95:e2:ad:af:c4:c7:93:27:7e:35:ca:75:c1:4c:2e:
37:94:a8:a6:24:c8:4c:ee:20:db:48:46:82:21:f5:
61:61:92:c1:64:87:00:ab:9b:df:ab:72:b4:39:95:
cf:70:d9:62:a3:61:e2:63:f9:52:6b:9a:2f:4f:0f:
9b:6e:d5:8a:62:83:b3:15:72:8a:01:1d:87:3a:be:
91:9d:f0:f5:a8:14:ce:71:0f:b5:4d:9b:e4:d8:67:
14:fb:c1:c1:ca:16:67:c3:d5:63:5a:34:50:b3:14:
55:01:91:e9:22:1e:1a:da:b0:1b:18:94:1e:68:55:
07:db:f8:fa:27:e8:60:e3:71:e0:0c:5f:59:87:cc:
de:bc:5f:40:6e:a0:63:f7:ea:7d:a8:d4:5d:76:47:
b7:bd:a1:43:d7:40:42:5b:c1:f6:b9:58:e9:bd:f1:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:DF:AA:CE:C0:C8:76:50:22:A3:80:25:D6:6E:21:ED:AC:74:81
X509v3 Authority Key Identifier:
keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b7:7d:3f:78:12:e3:3c:a0:40:06:7e:95:6c:58:2d:6f:4b:
64:de:5c:11:9a:99:ff:19:8b:fa:d9:65:39:8a:06:7d:3a:46:
eb:3b:d9:3e:88:21:18:1d:28:e2:4d:a4:57:ad:92:c3:1e:4c:
3a:a5:20:ce:2e:a9:17:77:04:b7:5d:0b:a9:25:3f:46:e4:af:
40:e7:49:62:11:64:42:da:96:45:a1:93:52:86:16:8f:d4:0f:
d6:43:23:56:c3:95:3e:c3:68:ae:fa:6e:71:a0:ec:5a:61:e3:
aa:48:8a:37:b7:09:c2:59:ce:bb:f7:12:db:72:bf:96:22:62:
81:76:57:02:11:f2:4c:5d:1f:0a:9d:aa:f0:83:44:61:69:68:
fc:e5:3a:1e:c1:0f:ec:75:02:9b:9e:0f:ad:af:dc:c2:a2:d7:
0c:ce:4a:80:9d:82:31:d9:fa:28:d3:bf:67:dd:92:87:bb:7a:
b4:0a:01:cd:46:21:66:8a:02:3f:07:0d:9a:7f:22:eb:f6:33:
7e:62:2a:a7:55:e1:83:fd:3d:a2:9d:80:bd:12:ac:3d:db:be:
cd:69:53:fc:74:71:00:f3:46:2a:00:dd:e6:22:f6:b2:f3:b0:
d9:72:ba:26:87:01:ea:61:9f:ca:35:df:54:6a:77:94:98:e9:
f2:97:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client