Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: 2ZnOAQoVX4WvXoqUPeOssbkju7YHVqruXu6SBaGLJtY=
Subject key identifier: 77:18:C8:C3:42:EF:5C:B9:C3:EE:C3:98:3D:73:4F:4E:C1:E1:54:8C
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019922FAC24945FBE6EB57DE8F403DCA74C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:01:23 +0000
Manifest this update: Sun 07 Sep 2025 07:01:23 +0000
Manifest next update: Mon 08 Sep 2025 07:01:23 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: xwsdu8hZnSTKvVCbMzg7dK6ScwLkxITnWqdjP/s4k2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c2:49:45:fb:e6:eb:57:de:8f:40:3d:ca:74:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Sep 7 07:01:23 2025 GMT
Not After : Sep 8 07:01:23 2025 GMT
Subject: CN=7718c8c342ef5cb9c3eec3983d734f4ec1e1548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:e5:b8:dc:be:7c:70:3a:4b:1c:79:29:07:
55:42:af:ca:08:5d:80:dc:df:8e:a5:6f:d4:5d:a9:
f0:58:9f:85:77:d2:83:dc:e0:00:d7:db:a6:43:0e:
c0:5b:ae:90:0e:dd:02:98:c0:e6:30:ba:d6:8d:40:
f7:0a:19:c4:f0:34:72:f5:18:7b:2c:f9:7b:68:ad:
2e:55:da:dc:6c:67:7d:f0:76:b8:65:ad:4a:72:58:
64:a4:c1:1c:a9:62:a6:1a:bd:ab:67:96:2c:41:6a:
1c:4d:6f:c9:ff:f6:d3:cb:c6:bc:ee:92:5a:e2:b4:
d1:86:54:f6:3a:c4:12:bb:28:b0:76:df:0e:d6:5b:
56:80:f0:bc:71:28:c6:86:b9:c1:c7:1b:81:6a:fa:
67:37:78:f8:b3:92:3d:a5:ae:6f:c5:83:ca:3b:4e:
49:a6:8d:bf:41:cd:18:90:4b:8b:60:43:29:95:6c:
57:a8:23:ff:ba:95:16:17:38:70:e2:bd:42:77:b2:
0a:8a:12:db:30:ee:ff:12:4b:26:04:37:0e:03:61:
79:bb:3e:93:0c:8b:14:8d:f5:c4:01:07:cd:a6:d5:
55:54:96:7c:0a:4d:b9:77:c8:d1:f2:0e:77:75:9a:
bb:07:d1:31:db:26:24:79:db:d1:89:ec:8c:58:7d:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:C8:C3:42:EF:5C:B9:C3:EE:C3:98:3D:73:4F:4E:C1:E1:54:8C
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c7:a0:0b:c4:b1:5d:87:28:a8:9d:f1:99:21:09:83:c4:42:
85:98:d0:b1:36:29:a8:97:10:09:21:f6:63:bc:9f:b1:2e:10:
d5:c8:43:55:9a:da:83:96:e0:62:9c:9a:f9:9d:10:55:42:30:
fe:87:7b:a8:cb:01:bf:44:91:4e:46:98:b6:4a:72:ea:06:85:
18:38:a1:50:85:f4:9c:fe:ff:0c:69:e4:4c:c0:91:3a:8c:1d:
10:01:84:13:77:6b:16:8f:b5:2d:e5:f3:ae:f5:3e:9c:4a:12:
fb:a0:cb:8f:48:7f:16:64:52:79:d9:e0:db:30:7a:36:98:81:
e5:4e:63:6d:7b:a3:2f:0b:6e:2a:26:d6:bd:2f:e2:40:24:99:
4c:7f:15:1a:87:aa:c1:d7:b5:22:9a:73:9f:95:78:c7:18:2b:
61:c0:91:a7:ff:bc:3d:b0:fc:22:fe:c8:29:3c:c1:4d:56:4e:
35:47:f7:14:ca:9d:78:f6:fe:24:3f:2a:79:8d:15:55:1b:0f:
66:51:93:23:2d:98:45:05:2c:9d:3d:27:e5:d4:5d:2d:53:3b:
22:28:65:24:b1:69:ab:00:32:e5:5a:de:d8:0e:de:1e:94:4f:
b1:77:ee:c1:db:21:fd:c0:14:de:0b:4c:1e:19:7c:e0:ae:77:
23:41:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:48 2025 by rpki-client