Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: ZyxpIKGGGnrf269OxLd9qYRckGSj5pSd8DT8ODzhc7A=
Subject key identifier: 33:BD:2A:39:ED:AF:7C:78:F7:EC:B0:4F:E4:77:BB:0D:7B:68:48:EB
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01992443D4440B555A12BC06CE91DE32D56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 087D
Signing time: Sun 07 Sep 2025 13:00:48 +0000
Manifest this update: Sun 07 Sep 2025 13:00:48 +0000
Manifest next update: Mon 08 Sep 2025 13:00:48 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: ot73XE1Z7ghX726xifNntNe5cANTeG7GVCCbxzBKsUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:d4:44:0b:55:5a:12:bc:06:ce:91:de:32:d5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Sep 7 13:00:48 2025 GMT
Not After : Sep 8 13:00:48 2025 GMT
Subject: CN=33bd2a39edaf7c78f7ecb04fe477bb0d7b6848eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:63:77:f4:50:15:21:af:ac:cc:d7:07:29:
21:f8:a3:27:5f:b9:fd:b7:83:fa:5b:cc:a9:f3:49:
de:ad:ae:2a:4d:ce:d4:bd:ff:60:5f:54:40:a4:78:
91:7c:a3:fb:0e:a5:a0:be:e4:32:fe:80:b8:57:88:
1d:97:ea:d6:ec:0b:fa:15:e8:79:21:93:fe:99:e2:
6b:95:6e:3c:f2:3f:87:90:18:0f:8c:61:b2:c8:ed:
4c:49:b8:a2:ab:08:17:0f:8e:45:77:20:eb:50:2e:
e3:8e:b1:2b:b1:21:65:7d:dc:d7:e8:ef:a4:a9:d2:
14:e3:6d:81:9f:27:15:dc:0e:2c:84:4c:ed:5f:4b:
e4:66:06:a6:f7:88:a6:f3:2a:41:c6:a7:f8:d5:61:
12:93:3f:42:75:4e:e4:46:44:14:5a:a4:32:f7:e5:
d3:ff:43:df:95:3c:69:a2:44:16:97:d2:93:d2:5c:
a2:71:b3:ed:61:31:51:ae:52:74:c1:98:42:09:43:
5f:e4:76:d1:e8:8c:58:02:e6:dd:b4:56:b1:8f:07:
ad:11:e1:cc:b9:c6:aa:3c:77:f5:74:a6:14:76:5c:
68:fe:d3:83:76:c5:2a:7e:37:a9:51:79:45:75:7b:
34:7a:ef:65:8c:d7:2f:c4:6d:c5:a5:b0:bd:49:cd:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:2A:39:ED:AF:7C:78:F7:EC:B0:4F:E4:77:BB:0D:7B:68:48:EB
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:82:5b:a0:57:b1:ff:c3:9e:1d:b5:ed:58:e5:db:fb:c5:2d:
4a:ff:19:74:03:2a:31:88:0d:27:cc:9a:7e:55:28:6f:79:94:
b7:02:58:35:92:5a:99:09:1d:44:1d:e4:1d:0f:0e:8b:63:2e:
21:1a:51:0c:89:17:c1:9b:38:fb:f8:49:0b:1c:65:00:ab:4c:
74:38:b4:a5:cf:b4:88:00:76:57:39:93:f0:51:90:a1:8c:99:
02:3f:d3:3c:4a:1c:08:a6:d9:3f:2f:b6:0a:5f:29:41:12:64:
57:ac:a1:b9:40:6e:c3:62:6e:04:da:7b:9e:96:e5:0a:8d:2c:
63:06:1a:3c:33:ce:e3:29:ed:eb:c8:b4:ca:f8:dd:00:ee:a2:
1d:04:ef:cc:bd:75:5c:e1:fe:63:c3:3b:f5:2d:94:b5:07:ef:
0c:a1:68:df:d0:64:68:9a:2f:81:00:3b:69:ba:61:ef:ef:7e:
2a:3a:93:3d:d1:89:9a:68:40:d3:28:80:92:e1:44:dd:b8:2f:
e8:79:7e:da:24:9e:d9:cd:e0:f4:5d:da:ea:06:bf:bf:bb:aa:
0f:e3:fd:8f:6d:bd:a7:73:12:6d:8c:47:75:a4:c3:26:3a:9e:
2e:3c:b4:2c:b2:8c:65:cf:85:4f:96:77:aa:2b:63:49:58:40:
03:1c:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:37 2025 by rpki-client