Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: yoZtYkNe1uXcyRzTtxCrEI6Inmm6IU2t+EkXMatTNJo=
Subject key identifier: 8A:AF:2E:07:1C:CD:1C:1C:45:B5:B4:A9:F1:46:69:DE:E3:2E:98:9A
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 0199FDD97A40BA327DE2B801A0F9C9021B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: krEKnwwd8wW3WMYznHsHejuC99YWQf3NdvTUFm7L6PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7a:40:ba:32:7d:e2:b8:01:a0:f9:c9:02:1b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=8aaf2e071ccd1c1c45b5b4a9f14669dee32e989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:8b:aa:27:ff:02:c6:f8:30:c9:d8:d2:2c:
08:f7:e9:6d:0a:cc:ac:5c:4d:5e:56:71:dd:af:3e:
51:33:6b:7f:62:c3:f9:65:72:ff:a1:41:eb:e0:7e:
dc:39:57:2b:85:77:76:63:44:0e:ea:91:04:43:42:
6f:e5:ee:83:6c:5a:14:72:94:74:15:5f:04:34:37:
63:03:3d:38:02:bd:ae:23:8b:c5:a3:6a:11:3d:7c:
96:ba:45:5c:14:d6:60:25:36:19:c3:52:e2:59:82:
b1:79:4e:94:44:a8:b9:1d:de:4d:fa:88:3b:55:d2:
8b:4a:3e:10:ad:ca:74:4d:ac:12:79:14:cf:a7:27:
4c:f1:eb:26:0a:f8:e6:20:e7:66:9d:3f:51:e0:b9:
bc:cd:df:91:d0:f0:83:84:8e:07:34:52:1e:40:3a:
16:ae:e6:30:e4:14:0f:a5:f5:34:b6:61:cc:7f:35:
3a:e1:97:e8:3e:93:6b:64:ee:b7:c8:ee:da:77:26:
7d:7a:ad:a7:d2:d0:24:20:93:91:e8:1b:19:d7:f1:
73:ef:ae:f0:9e:63:a3:a3:33:60:b2:e0:40:99:43:
84:b7:bf:24:12:55:fc:57:3d:99:cf:71:eb:01:56:
1a:c5:f2:a2:9f:f0:a3:ce:95:ab:d6:a4:74:40:f1:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:2E:07:1C:CD:1C:1C:45:B5:B4:A9:F1:46:69:DE:E3:2E:98:9A
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:25:f5:90:dc:a5:f3:77:9e:32:88:da:1f:1c:16:f0:c5:f1:
db:52:a5:81:c9:a2:d9:b5:b5:d2:dd:10:fd:32:15:9c:5b:a7:
c3:0c:de:fe:af:8d:68:b7:e5:78:7c:9c:77:54:bd:f9:d4:3c:
c5:06:1d:04:be:cd:14:47:27:29:55:c4:54:73:be:46:8b:20:
0d:9f:2b:7a:18:a8:2a:0a:14:0c:a3:87:14:ea:46:50:c9:79:
f8:94:6f:b7:47:b3:ce:51:de:bd:50:f8:9c:72:3c:66:8b:f1:
d7:36:76:0f:14:f7:05:dd:cd:d4:f6:91:e4:93:eb:d6:a7:7a:
4e:e6:04:2a:cb:24:02:a1:84:bf:c7:b0:df:63:af:4b:86:78:
43:ff:19:38:da:14:f6:19:af:e5:ff:20:42:9b:13:33:1d:ba:
6e:84:eb:a6:b1:fb:fd:95:57:08:20:aa:19:d0:a7:ab:d0:10:
3a:1f:86:4a:0b:f8:08:68:3d:0a:70:f2:16:8d:40:05:a0:2b:
cb:49:28:0e:95:c3:b5:fa:b1:ff:ef:6e:2f:ba:f0:0a:20:13:
6e:93:c7:1e:46:2a:22:96:de:ea:9a:a3:6b:4a:21:01:75:2f:
16:5b:e1:80:10:b2:85:bd:44:65:f9:7d:00:f3:c6:5d:dc:9a:
2c:46:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:37 2025 by rpki-client