Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: sTiBI5z3CyRxE/5eR9tN2A3WWSMAPo32V8SzsMxhC7U=
Subject key identifier: CB:B3:86:BE:E8:61:3A:D5:B6:D2:4F:23:C9:43:49:CC:A2:60:E0:FE
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019A729353C2777A159665AED7861FC18403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 1574
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: pzSg5ETnKjNNSy/EADyPFVCI7OY09uciBlWyZeAxnS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:53:c2:77:7a:15:96:65:ae:d7:86:1f:c1:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=cbb386bee8613ad5b6d24f23c94349cca260e0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:fb:72:2e:ba:13:f3:fe:1e:8e:07:e2:e6:
26:42:fc:de:ed:34:8c:9e:99:d3:7e:5e:42:8b:05:
0d:af:1e:f8:f1:a1:c6:9d:da:e9:1f:97:c3:5c:ee:
16:ee:a9:21:6d:8e:3e:4b:c1:ef:a0:2a:d4:eb:42:
65:4e:5d:f6:5f:3c:0f:00:c1:a1:d7:bb:47:11:f6:
ca:80:04:c9:c1:86:55:24:38:14:1c:67:a2:1b:98:
2f:39:3c:8a:cf:3b:b0:a5:07:87:c3:c3:bb:b5:ed:
b0:15:18:47:b4:8e:d5:c7:50:28:f3:aa:38:ea:8d:
fc:31:9b:f4:dc:98:b8:ac:e1:2a:b0:85:2c:b4:56:
a3:76:b8:18:d7:14:bb:d0:37:8d:f9:76:0a:37:af:
2c:b5:19:f2:bf:1d:04:fe:d6:81:35:96:1e:0c:49:
7d:9e:74:38:54:f9:d2:fc:19:06:31:e7:48:5d:4c:
b1:c6:c3:f3:b6:30:17:69:37:af:e3:77:a1:2f:7b:
d1:88:64:e9:a7:a6:d7:a8:b2:53:e9:17:bc:ae:33:
cc:11:de:c1:13:11:57:2b:78:0d:8f:35:7f:d3:99:
ad:37:d2:48:0b:7b:04:99:b2:28:ca:59:fb:80:62:
0c:d3:e1:16:a4:b4:b8:7a:6d:d6:10:ba:82:92:ed:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:86:BE:E8:61:3A:D5:B6:D2:4F:23:C9:43:49:CC:A2:60:E0:FE
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:9f:d7:55:dc:19:07:7d:78:a0:8d:94:a8:4e:0b:01:8b:
9b:70:57:a7:ab:b4:2c:8a:dc:f5:7c:98:41:6f:0b:97:f5:15:
eb:c8:db:d6:3d:13:63:81:52:92:2e:1f:d0:55:cf:0f:d0:b0:
55:4e:e5:1a:4f:ed:08:45:96:24:77:e2:73:c3:a7:20:7e:4b:
9d:b5:3f:13:cd:15:6f:c4:ed:fd:87:00:3e:1e:f2:a7:29:bd:
12:f6:0b:52:7d:ef:23:ba:4f:ea:6f:b3:b2:1d:1d:04:73:a6:
87:98:20:d4:32:d9:90:0a:b8:7f:57:b3:fb:90:97:26:bb:07:
d9:cd:00:94:d3:da:33:91:4b:8d:a0:aa:ea:3b:58:9a:26:37:
36:f5:37:ce:a1:07:94:06:d4:45:96:30:83:38:21:8e:25:6a:
e4:c6:5e:a6:72:29:c6:2d:d4:da:35:c8:f2:78:0f:99:5f:aa:
b6:00:81:6d:8e:ef:c8:a9:63:87:14:95:c8:bd:2c:cc:5d:9c:
25:b6:43:f7:40:5d:b4:78:4c:b6:06:27:fd:e7:b2:31:0b:99:
21:a0:63:40:6d:97:e9:9f:1f:b6:6e:74:f2:10:ee:95:e5:8a:
30:45:1a:a1:73:5c:d2:94:b1:38:ef:95:53:bc:f6:a1:6d:5b:
1a:af:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:00 2025 by rpki-client