Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: 6ZdL+xUJtAwdzoN/rYEH6IRoM/cyWr9moYQXiRAZdfM=
Subject key identifier: 81:0C:16:D3:11:B8:D2:33:88:84:C4:EF:D5:FF:9C:B9:88:A3:94:F8
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 019921B22E8651984A79C55D2DD1628C5DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0615
Signing time: Sun 07 Sep 2025 01:02:29 +0000
Manifest this update: Sun 07 Sep 2025 01:02:29 +0000
Manifest next update: Mon 08 Sep 2025 01:02:29 +0000
Files and hashes: 1: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: LdT5TeS6jxSoEk3t8ngxJi4ZaANCXCkYs7UoIAu0UYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:2e:86:51:98:4a:79:c5:5d:2d:d1:62:8c:5d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Sep 7 01:02:29 2025 GMT
Not After : Sep 8 01:02:29 2025 GMT
Subject: CN=810c16d311b8d2338884c4efd5ff9cb988a394f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:31:a0:fd:b2:36:10:9d:9e:ce:45:29:3f:
d5:52:6b:52:f3:67:f9:c1:ed:2b:3a:4b:28:58:39:
7d:f4:56:6b:df:57:ce:36:3c:cd:56:3d:ed:76:ef:
97:0c:52:a7:97:fd:40:10:5d:9f:e6:5c:d2:34:c1:
92:ad:dd:05:eb:4a:9e:21:61:42:9a:f1:6f:4e:38:
c8:c0:59:c3:8e:40:b2:1f:28:3c:af:c5:32:f3:6e:
1d:e4:bc:87:46:73:32:5b:89:a2:70:0c:9e:29:50:
a4:42:44:0b:e8:18:94:89:ee:7f:24:84:a3:ee:34:
1e:50:31:47:5b:c1:42:6a:40:20:70:75:7f:42:ec:
d5:3a:3c:96:85:a4:25:c6:88:c2:9d:55:80:37:11:
d3:36:c7:00:f6:08:eb:c6:23:fa:cc:e8:e7:ed:cc:
84:36:2b:e5:92:60:52:5e:66:f9:6b:68:2e:c4:61:
a8:52:cf:a8:51:f0:81:63:22:b7:8d:ec:b2:43:2e:
ba:91:26:a2:bd:43:d7:10:e0:84:75:d5:28:36:41:
8a:d7:4f:76:a3:30:ac:f3:03:39:e5:91:83:58:4d:
82:cb:73:06:e4:b6:0e:bf:bb:7f:bd:25:45:b6:cb:
77:65:e3:1e:8d:b3:63:ef:6f:0c:6a:2c:c1:0c:68:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:16:D3:11:B8:D2:33:88:84:C4:EF:D5:FF:9C:B9:88:A3:94:F8
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:9e:ec:f2:8e:6e:38:4a:c8:ee:38:f4:b8:fe:c2:b5:6b:
a3:84:a0:67:27:4a:6e:be:74:41:3f:55:9e:6d:c9:39:ca:21:
aa:38:f8:ed:1f:26:12:6c:35:a2:5e:f7:30:5e:9d:c8:13:b4:
02:1c:4c:52:6f:5f:8f:ef:5b:c0:0d:10:e1:b3:fe:44:fb:80:
d8:83:6a:d5:38:40:68:85:f6:ab:61:34:ba:2b:35:8b:06:b9:
bc:6b:b0:3d:00:c5:13:d6:5c:07:4f:86:ea:45:87:bd:54:2e:
8c:ab:92:49:f8:f5:d3:d2:66:d6:94:97:20:d5:5a:89:24:59:
f0:03:c8:c4:ac:7c:42:15:72:0c:19:97:f1:72:ef:88:c1:bc:
26:96:cb:2e:fd:a9:56:36:d6:e3:ec:d1:9a:71:76:86:79:e9:
6d:8e:e0:0e:03:23:ca:82:e5:69:f9:c9:fe:e8:84:8b:0d:51:
dc:a3:2c:4e:2a:f6:eb:21:40:ef:9a:31:eb:72:cc:5e:04:35:
16:b8:11:7e:43:cb:01:45:e5:e1:fc:b9:be:7e:a2:9a:a6:3c:
e8:38:af:99:75:81:02:9b:e6:72:69:72:0c:bd:24:3c:62:2b:
3f:84:31:0c:ca:ad:59:d6:83:41:11:b3:61:9d:d0:a0:7d:26:
cb:4d:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client