Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: L3K9l0Do4wo8eZ/u1ro3DQyBxuBmgO83whVhJerrK9I=
Subject key identifier: 9D:60:2A:84:7F:DF:B0:51:4C:94:35:C9:4B:7A:4A:AB:63:28:BC:62
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 01991809B29E3B6BC3B0534BECA4B609D555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0F28
Signing time: Fri 05 Sep 2025 04:01:52 +0000
Manifest this update: Fri 05 Sep 2025 04:01:52 +0000
Manifest next update: Sat 06 Sep 2025 04:01:52 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: UlfsLnY4QbYElQL9J4ApFlQVrBng8GZR24MXgPdR2WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:b2:9e:3b:6b:c3:b0:53:4b:ec:a4:b6:09:d5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Sep 5 04:01:52 2025 GMT
Not After : Sep 6 04:01:52 2025 GMT
Subject: CN=9d602a847fdfb0514c9435c94b7a4aab6328bc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:27:7d:3c:60:0f:ef:b0:c9:12:66:a7:66:
45:7b:88:37:e7:86:58:9c:a7:8c:f4:88:f1:35:fb:
e8:bd:2c:d6:e3:52:69:16:e7:63:c9:f7:84:03:c7:
4c:56:aa:fd:fe:a1:50:22:c0:ef:c5:f5:da:b3:d6:
d4:fc:8b:6b:eb:19:78:79:19:f0:e3:f3:1a:04:65:
44:c9:7d:c5:00:00:47:7b:e2:08:5c:6d:e5:b5:cf:
4b:f7:d1:5b:d1:6c:9c:ef:87:53:a2:ea:e5:ff:3a:
08:96:34:4d:63:c6:81:7d:c2:c8:8b:d8:85:ae:91:
ea:1a:52:37:b8:50:ef:20:8e:4d:84:34:df:30:d7:
ef:35:f6:7e:f3:3e:52:f4:c3:b5:33:9c:d7:dd:86:
e6:1d:e5:8b:45:af:b4:bf:ea:5c:bd:a0:25:be:84:
eb:a3:53:ae:e1:34:97:ea:60:2e:2a:4a:c1:0b:4f:
e5:1d:e9:e4:bc:ed:25:11:e9:90:39:b8:fb:b2:b0:
94:82:23:df:8f:97:04:ac:d9:8d:af:f5:82:b7:83:
57:72:4e:92:69:cd:0f:6c:aa:bd:78:05:c7:a6:a2:
91:d5:15:da:71:8b:04:0a:ee:29:af:68:0c:10:59:
28:59:60:4e:fa:ac:d3:73:f0:70:a3:8b:2b:e2:6c:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:60:2A:84:7F:DF:B0:51:4C:94:35:C9:4B:7A:4A:AB:63:28:BC:62
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:9d:ab:08:82:ba:ce:a5:a1:4b:3e:b7:fe:ae:f3:72:1d:
67:44:e7:d1:6f:f9:3e:79:ea:0c:f7:26:66:02:ae:36:65:21:
28:67:50:cf:c7:6b:ca:41:9d:0a:dc:07:56:3a:d6:ce:21:e9:
49:ae:84:3c:9e:fe:8d:bb:c9:93:18:f4:ab:04:9d:95:ac:f0:
bf:6d:b7:34:03:af:76:f2:b3:38:02:59:c6:db:57:6c:f4:40:
21:e1:9a:38:a8:07:43:f7:ee:aa:70:39:66:af:7f:88:8e:c2:
8b:50:76:cc:ed:5f:29:e5:38:a4:59:f2:99:d3:e2:6c:29:b4:
7b:86:a4:19:54:3c:36:1b:f3:32:22:75:29:15:49:ac:49:58:
aa:3d:4d:2a:0b:48:39:6c:b8:99:14:90:de:a2:e3:b7:28:ba:
03:e4:fd:8c:38:04:2d:d9:a0:23:25:9d:f5:c0:72:1f:03:6d:
8a:00:f7:61:18:19:e4:67:1d:fd:a2:db:82:9b:27:65:e2:7a:
c6:9b:a0:c4:8d:08:de:67:25:13:4c:f9:32:a0:fd:56:54:66:
74:6f:74:5b:e3:3b:81:d4:c6:00:07:8d:b3:03:04:7d:61:c2:
d4:9e:c4:ce:d9:7c:4d:d2:87:66:a1:bd:1d:20:63:78:e4:d4:
b0:2e:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:23 2025 by rpki-client