Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: vxy1N8S2JHhEqOpZsGwZbzeGW5SQMev4TrL7BryoCtI=
Subject key identifier: 45:73:75:37:25:D3:AA:32:61:A0:5A:E2:6F:02:7C:3B:50:6F:67:6C
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 0199FBEAC387257B454450B4F69A80BEBD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: 2GwUMV/648BI4mVi7XOFS+wuCzC41KoL4uXcxstwiwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c3:87:25:7b:45:44:50:b4:f6:9a:80:be:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=4573753725d3aa3261a05ae26f027c3b506f676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:e0:18:c6:bb:ac:36:b8:56:3f:1d:e0:ca:
64:57:48:02:16:33:03:76:83:bd:ce:97:f8:5b:13:
51:0b:52:6a:28:f9:d5:39:42:27:a3:65:5f:fc:cc:
74:f6:fe:2b:1a:48:d8:a0:7c:f7:4b:c0:85:7a:d3:
77:c0:88:e4:a1:45:b0:d5:30:7a:98:20:59:8e:90:
95:ff:d7:5c:97:1e:b9:00:7f:76:25:1a:8c:e8:05:
c0:18:02:ac:70:dd:80:0b:36:77:8d:92:d9:d9:48:
20:b3:16:86:90:f5:7b:42:57:a3:43:a5:5d:e2:e2:
04:43:a2:0a:fa:e6:17:28:41:cd:40:25:74:4d:b2:
87:d8:64:d3:f7:71:e3:c3:4a:84:0d:96:bd:0a:09:
ed:a0:80:a5:cf:87:fe:dd:8a:74:f2:af:82:cc:e8:
f2:ec:57:77:39:f8:31:7b:7b:fa:11:07:2c:62:ad:
96:a3:74:f9:98:85:01:5e:18:ff:99:d5:bf:b9:ed:
c9:32:28:37:67:93:7d:04:bd:03:b5:0c:a9:66:fb:
c3:bd:b5:6c:55:46:7c:2c:1b:6a:08:4a:09:07:89:
84:1c:53:2e:9f:a5:02:3a:bc:07:69:c6:e7:66:52:
e7:ef:1a:27:33:11:ec:fe:80:53:bd:87:07:ee:ef:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:75:37:25:D3:AA:32:61:A0:5A:E2:6F:02:7C:3B:50:6F:67:6C
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:27:63:cd:eb:b5:83:68:27:93:8d:41:d0:d0:2b:45:87:e8:
85:9c:9e:33:6f:58:fe:da:d6:4b:f6:03:d1:81:4f:6b:0a:47:
bc:0d:dd:20:4e:87:58:32:5d:7c:b5:33:6d:21:4e:94:64:4c:
6e:d9:a0:a8:ad:fa:84:65:f6:07:40:51:4f:ed:11:6b:6a:2e:
d4:72:3d:72:00:01:70:e5:31:d9:e5:11:1d:f2:de:0a:d8:03:
54:93:b3:d6:cb:d6:bc:dd:b6:bd:28:2b:b8:83:8b:95:31:1c:
0f:3e:f3:cf:1f:1e:d9:31:11:7d:0a:3d:bc:ae:48:06:05:fc:
53:27:cc:91:a8:8a:64:6f:81:41:57:97:93:f6:10:aa:46:04:
0d:da:fb:af:d7:ec:b2:b2:fb:42:d9:ee:a0:c9:18:53:e8:6c:
73:ee:9f:9a:2b:3e:5e:00:4a:fc:25:6c:d8:c5:56:76:11:2d:
c9:d4:c4:e2:9c:b1:3e:9a:85:22:f5:e1:fa:9f:69:71:c1:51:
0b:ff:4c:c8:60:5e:46:86:a5:4f:d1:05:f8:b7:ff:f5:e5:37:
66:3f:11:b0:04:bd:02:ee:f2:ce:29:e4:71:7c:fc:6d:a2:7f:
f0:b6:3b:64:b7:e5:70:3e:cf:cf:07:26:f4:7c:9f:85:6c:6a:
75:8a:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:25 2025 by rpki-client