Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json)
Hash identifier: aP3eLYhZ2uAIyIDzhM5idZWVkDwqE5yhrO6v7yVNpvM=
Subject key identifier: 80:91:7B:DE:A9:F1:F3:79:EB:20:70:A9:6E:3A:BE:29:0D:86:2B:54
Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Certificate serial: 0199FBEC0B857EC40A0739E42516747FE961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: E9+VsDBmYoqncPiox9KTWgUfFNDEFykWZqdP6JIMQi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0b:85:7e:c4:0a:07:39:e4:25:16:74:7f:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=80917bdea9f1f379eb2070a96e3abe290d862b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:7b:35:25:40:1f:9f:8c:f9:9e:9c:1b:6f:
e9:1d:9d:37:5a:70:fc:80:ae:e7:20:22:94:79:fc:
98:82:0b:80:c0:9c:8b:7d:1f:1e:8c:d0:7b:cd:68:
d5:71:b4:52:47:d6:59:7c:81:1d:80:c1:fb:38:4f:
65:e7:ba:42:18:c3:3d:39:c4:f8:3c:dd:2e:28:88:
fd:ae:e1:91:e6:87:cc:b1:b4:bb:41:c9:ef:18:c5:
0b:37:9d:c5:cb:95:cc:7a:1b:b9:14:e7:e6:43:a1:
78:94:c8:92:75:b2:cc:b3:d3:cd:46:b9:7a:2f:b9:
5f:77:f2:33:5a:e9:9f:42:9f:38:6f:4f:91:11:42:
7e:35:8d:de:1a:2c:b2:8a:90:5a:70:b2:71:b8:66:
86:6e:b0:a2:56:a5:f0:a1:e6:2e:3a:0a:04:9d:a2:
e6:c0:c9:68:26:18:f2:5e:ba:cd:7e:19:aa:8a:76:
aa:d3:0f:87:c0:6d:b9:f8:35:bf:80:19:57:ea:77:
34:5f:fa:3d:e6:bd:a4:37:8d:39:d3:0c:18:16:ef:
4a:c2:2b:36:5e:86:94:d6:af:e7:4b:64:9d:79:41:
13:d9:11:92:47:06:f4:46:6c:30:c3:41:4c:f1:6c:
45:2a:f1:f9:f8:58:c8:df:14:4c:37:05:ce:de:de:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:7B:DE:A9:F1:F3:79:EB:20:70:A9:6E:3A:BE:29:0D:86:2B:54
X509v3 Authority Key Identifier:
keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:0d:97:b5:2e:e5:bd:c4:80:c0:8a:72:09:0a:7b:6f:0b:
2b:27:9d:bc:53:13:49:2c:8b:18:e8:6a:bf:42:01:7f:57:16:
eb:83:f8:82:97:d5:a6:fc:f8:a2:e3:93:07:23:70:dc:41:14:
49:1a:71:c3:95:e9:94:d3:b3:15:e6:ad:08:0b:ef:03:0e:e8:
39:8e:33:95:e5:82:50:a8:7a:df:a4:27:80:f7:9e:d4:ad:97:
38:38:53:56:22:c6:50:07:b9:cf:ec:6a:6e:39:2d:3e:7b:2c:
2d:60:4e:93:a5:98:c2:06:60:27:bc:d9:5f:cd:b4:a1:56:31:
36:9a:92:d1:38:98:cc:dd:d3:4a:4c:78:13:c8:6a:fc:fa:33:
b0:ab:26:ab:35:18:9b:3d:b1:ed:bb:16:06:73:b8:0d:14:d7:
31:d6:b0:cf:f6:36:3f:06:af:83:cd:fd:02:08:2d:ef:6a:24:
ae:aa:82:03:70:8f:71:bb:92:a4:62:98:d8:8d:ec:65:50:dd:
26:25:42:40:f5:23:3b:1a:16:d0:0e:c3:a4:5f:f5:28:1c:ff:
80:64:85:6a:cf:7e:12:b3:5b:a3:ed:92:6a:e8:50:80:30:a4:
97:ba:cd:ab:8e:47:a7:53:fc:9e:a4:02:48:27:b6:51:f2:c0:
b1:46:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:39 2025 by rpki-client