Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File: fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier: cSzN0G663OzZ2U5CQBiRVAa9J64bc/mgb3FiXfNdTsc=
Subject key identifier: 75:AB:31:4F:BF:A7:82:08:3D:AA:06:B9:1F:58:F1:CF:EB:5C:AF:29
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer: /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial: 019A725C6CF911D962DB406C2207781AD58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number: 035E
Signing time: Tue 11 Nov 2025 10:00:51 +0000
Manifest this update: Tue 11 Nov 2025 10:00:51 +0000
Manifest next update: Wed 12 Nov 2025 10:00:51 +0000
Files and hashes: 1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: iyhbhYBdmHFCKqpSGHzLVgijxfHSCaWYQtmFo/qlIFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6c:f9:11:d9:62:db:40:6c:22:07:78:1a:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Validity
Not Before: Nov 11 10:00:51 2025 GMT
Not After : Nov 12 10:00:51 2025 GMT
Subject: CN=75ab314fbfa782083daa06b91f58f1cfeb5caf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:cf:e7:f4:3a:89:7f:c8:a0:a3:44:f3:c0:
3f:ab:1c:9f:bf:74:54:d1:57:98:07:ac:0c:ab:df:
48:9b:f9:d9:8e:1f:83:28:07:9f:5c:65:55:1a:c9:
8e:58:d4:84:2c:f8:b5:58:1c:df:29:8e:29:d2:17:
f9:4d:e4:34:50:eb:c2:d6:4b:8f:a5:16:7a:bb:79:
ef:4b:2d:09:5e:e5:bc:62:f5:83:b2:eb:15:fe:08:
c3:b0:37:e8:06:c4:06:e2:9f:a4:55:4f:70:6e:93:
c6:23:84:aa:d4:2c:93:f8:f2:3f:49:ca:7e:99:f8:
32:b7:6f:b1:30:94:5d:fe:b1:ec:50:f8:c0:35:59:
7d:0c:5e:e4:cd:94:be:51:96:75:7e:a7:9d:db:aa:
49:77:3f:cd:01:ac:90:aa:7e:fd:13:b9:41:b7:71:
63:f7:c5:01:0f:3c:21:3b:b8:00:73:19:ca:c5:4e:
5d:85:8b:3e:ca:8a:38:12:53:e8:35:ab:c3:9e:eb:
64:1b:7e:b3:00:c9:b3:84:94:21:4a:b3:40:51:9b:
73:e8:40:57:a1:a8:c2:97:8b:c1:77:25:9e:bf:3e:
be:72:bd:dc:96:19:ea:3c:e4:78:44:48:f4:1c:ab:
af:ab:a6:23:94:71:90:b0:7e:e3:9f:98:f0:4c:f3:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:31:4F:BF:A7:82:08:3D:AA:06:B9:1F:58:F1:CF:EB:5C:AF:29
X509v3 Authority Key Identifier:
keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:8a:e5:1f:7a:4b:fd:c8:9f:07:a6:0b:0e:51:1d:0e:53:
f9:6a:c2:65:80:82:87:b8:7f:75:7c:48:60:06:aa:3f:28:4a:
86:7f:7e:a3:99:0d:ff:f4:38:44:36:1e:99:55:ea:93:d0:29:
9a:a1:f7:f8:18:bc:93:50:77:21:73:d7:cf:ab:f9:15:e9:3b:
66:f2:d6:b7:30:af:5a:2d:1f:3f:00:25:e8:a2:b8:eb:69:2d:
03:69:28:38:2f:ca:b8:26:b9:41:12:fc:b2:55:b8:49:94:da:
76:11:7d:a3:74:71:a8:7e:ec:6a:31:2c:cb:93:11:69:e3:09:
4c:9b:cb:8e:cf:02:0c:a0:82:bb:0d:e0:3c:51:14:85:ba:4c:
14:20:e3:7c:85:06:ca:4e:58:bf:41:cc:7c:1b:ad:e0:a9:0a:
12:f0:f5:7c:93:eb:09:eb:be:7d:d4:b8:5e:98:ef:79:e7:ed:
c5:25:24:79:9d:30:2c:ec:07:b7:f3:f4:ce:2e:fe:88:d4:11:
fe:93:42:2b:8e:3f:0e:fe:1e:8a:63:f8:7d:4e:c3:8e:57:fd:
3a:40:2c:fa:c0:8d:b8:3d:75:d8:af:80:f7:ff:33:d6:00:28:
e9:e9:65:24:a0:c5:e1:63:f2:ae:a7:40:4b:6b:f2:19:e5:3b:
b6:7c:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client