Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: NQesw4seW+yKD7GM/4DCbhMx1i8FHDHTFixRE2ZJP1o=
Subject key identifier: EA:6B:BC:3A:DB:B0:64:93:F9:6E:20:90:B1:4D:96:AE:99:A4:6A:94
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 0199FB45F5942A61259BE56140231733D8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 100C
Signing time: Sun 19 Oct 2025 07:01:29 +0000
Manifest this update: Sun 19 Oct 2025 07:01:29 +0000
Manifest next update: Mon 20 Oct 2025 07:01:29 +0000
Files and hashes: 1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: LSMdfQsbGfHC9/z/hGaWAM7Lig7HyeX1fZloOaU5P3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f5:94:2a:61:25:9b:e5:61:40:23:17:33:d8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Oct 19 07:01:29 2025 GMT
Not After : Oct 20 07:01:29 2025 GMT
Subject: CN=ea6bbc3adbb06493f96e2090b14d96ae99a46a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:4e:03:e3:6b:24:d9:81:91:68:cf:33:2d:
c7:4b:0c:3c:42:a5:09:d7:87:79:7b:e5:91:1e:54:
24:d2:88:5c:ea:e3:59:14:c7:df:0a:bf:d5:c3:63:
94:5d:75:95:31:16:c6:4b:74:13:55:b6:bb:2b:a5:
e6:f6:4a:cb:73:e8:31:a1:5d:d9:f0:36:f7:f4:a6:
cf:75:c9:a3:52:21:71:bc:09:94:6e:e9:d2:6f:46:
0c:2e:ea:6c:10:aa:86:7e:ba:19:fc:b0:a8:79:01:
34:b8:71:81:04:4f:7a:3c:b8:66:02:2e:e1:5e:fa:
54:f2:f1:d0:23:84:7a:68:b8:e7:e1:3b:c4:90:78:
db:25:84:71:5e:17:85:17:77:23:bb:81:28:3c:ad:
63:46:2a:7d:bb:81:ea:5b:4a:26:5a:bb:93:5d:f3:
3b:30:c0:77:0f:dc:99:18:dc:d0:80:d7:f5:ff:1b:
c3:44:e5:3b:7f:b2:4b:26:9f:61:cd:51:72:c7:4f:
80:10:5d:58:a2:d2:6d:df:2b:37:15:bf:01:0f:69:
9a:2a:0e:7b:07:21:49:a6:aa:83:96:56:3e:a6:b4:
e3:6e:c3:2d:81:b7:37:0e:70:3a:d5:85:3b:8b:98:
a4:a5:67:d4:00:22:f3:7f:44:87:98:5a:c3:60:8d:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:BC:3A:DB:B0:64:93:F9:6E:20:90:B1:4D:96:AE:99:A4:6A:94
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9f:5c:77:1b:cf:55:f2:2c:a8:c5:fc:ef:8a:31:c1:58:5b:
f6:ea:34:e4:e9:49:44:b7:08:58:3e:1e:4f:21:24:eb:a5:36:
9d:46:38:21:ed:1a:5f:3f:df:32:a9:eb:50:93:f6:b2:9f:f0:
29:fa:78:d1:74:c3:5c:96:ff:97:d4:3d:36:5e:21:81:83:4f:
af:c3:3e:9a:b3:6e:87:6f:75:01:8c:03:9e:c0:55:04:44:fa:
42:38:92:9c:34:c6:f1:a2:e6:9a:9f:81:2c:11:48:79:05:98:
9c:77:11:71:d4:a1:5c:47:b7:f7:39:10:87:d8:92:cc:46:02:
85:f7:63:ae:61:e8:c3:90:05:bc:d6:60:e0:60:f2:da:fd:a4:
3c:9d:bc:93:0f:ec:e3:7e:f1:46:8c:58:d3:02:f0:0f:45:f0:
89:c9:64:2b:7a:8e:ac:d3:12:45:bf:2d:00:ad:df:b9:8c:6c:
b3:61:4a:06:d4:11:ef:76:64:1b:3a:4a:b1:48:a1:8c:3e:26:
af:5a:4a:13:f2:8a:63:55:a3:59:75:ed:1e:8e:11:45:05:91:
9f:87:6b:3e:73:3b:07:ce:0d:f5:0f:5e:1f:da:47:d6:80:3f:
7b:df:9e:42:10:f1:f9:f5:ae:29:a1:f9:ac:e0:4a:7e:c0:02:
8a:0b:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:17 2025 by rpki-client