Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: tExvPcN04uFnS1z9x96xzzr+6Dyp3xvjrmZdmW8yHdo=
Subject key identifier: 8B:9D:1A:77:45:68:03:48:DB:55:2E:E5:7B:1F:41:93:04:A4:5B:2C
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 0199228CE32C75162D7B083EC64B6B1E4F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0AE7
Signing time: Sun 07 Sep 2025 05:01:22 +0000
Manifest this update: Sun 07 Sep 2025 05:01:22 +0000
Manifest next update: Mon 08 Sep 2025 05:01:22 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: HOik3ggfj4U4DmOl8zZldTahrljp8QfmD5QBdHHLwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e3:2c:75:16:2d:7b:08:3e:c6:4b:6b:1e:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Sep 7 05:01:22 2025 GMT
Not After : Sep 8 05:01:22 2025 GMT
Subject: CN=8b9d1a7745680348db552ee57b1f419304a45b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:51:02:bc:6b:b8:07:b2:1b:e4:62:ce:63:
1a:01:b4:99:c0:c6:75:2e:25:1d:b1:62:bb:fd:9f:
51:3a:d0:27:04:82:0b:e4:2a:36:4d:23:98:1b:b3:
f0:5e:49:ec:fa:fc:e3:29:74:34:96:7b:2e:11:f7:
d4:8e:c9:e9:4e:be:f9:c4:bf:b4:a3:67:5d:e4:61:
99:d5:92:5c:b8:79:50:22:3a:fb:58:59:a4:c9:8a:
c7:f4:ee:d7:a7:99:9f:83:ce:ff:29:b6:ed:9b:27:
3f:c5:5c:73:0a:27:69:87:d3:e7:b1:54:c7:b6:39:
ae:08:f6:64:7c:2b:66:e2:5e:0a:3c:fa:82:1c:ad:
bc:a8:73:fd:7b:f9:6b:9e:3e:d4:91:2b:31:b2:50:
a2:05:90:f2:91:ac:41:4c:35:b9:7c:5f:63:ff:81:
7e:c2:5f:32:2d:52:92:a6:ec:fb:99:83:fb:03:86:
05:7a:ff:26:66:6d:03:62:e9:a2:3b:0c:84:b0:6a:
66:d6:87:ba:3c:43:6c:50:b9:ae:fd:94:40:68:16:
c3:30:9f:cf:c4:9a:a2:31:24:0d:7d:f3:43:b2:d9:
e7:9d:20:8d:56:ee:0c:61:8c:90:bb:b6:1e:da:11:
e3:3c:7f:bd:f7:93:bd:34:84:80:e0:4c:71:39:04:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:1A:77:45:68:03:48:DB:55:2E:E5:7B:1F:41:93:04:A4:5B:2C
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:16:af:5c:b1:af:04:79:80:04:b8:65:78:de:dd:1d:ce:
1e:f0:a1:2e:64:52:d1:87:07:d9:ac:63:e3:34:12:eb:15:6c:
b8:7d:67:02:f5:bf:e3:22:46:40:38:92:8f:7c:96:b0:ab:ff:
bb:3a:2e:8b:b9:d2:c4:70:f4:2b:7d:48:d0:e9:34:35:4f:61:
f6:d9:6b:9d:96:98:13:2d:1f:e1:77:25:82:3d:41:fa:c9:c7:
81:75:b1:dc:b1:1d:89:da:21:7c:fd:08:20:19:92:67:9d:7f:
a9:62:07:b1:ca:4f:73:ab:bd:67:3d:d1:88:b1:83:24:31:ae:
a3:7f:27:93:63:94:4b:55:98:9c:35:d0:ad:c8:5d:c4:a3:63:
22:ac:6b:a8:8d:c3:81:18:09:aa:18:56:79:0a:1c:02:b3:bc:
b1:84:5d:eb:f6:13:f2:0a:fa:90:40:77:33:09:59:61:c5:7f:
ac:0c:c8:de:ed:25:c1:49:75:b5:19:13:86:bc:87:91:8d:1f:
02:13:2a:3a:29:fa:57:96:79:b8:5d:89:63:fd:7c:be:4b:4b:
a4:1f:73:3a:11:38:47:96:be:01:f8:94:a7:9f:2e:74:6e:01:
f5:c5:e6:e9:33:9c:1b:ed:b5:7d:34:fc:b6:aa:f4:74:50:fa:
f9:4e:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:31 2025 by rpki-client