Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json)
Hash identifier: olPYayUoldW5JlqSBoN0TLnxfUEZUhCwbXlAkWoKiag=
Subject key identifier: C6:33:99:8B:DA:50:94:B9:67:97:88:56:1D:56:14:17:91:CA:34:48
Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Certificate issuer: /CN=1686f7be9ba171c32746ab4ed20be882bd304356
Certificate serial: 0199FCFDA67C75037D1FEE41BF57367EC24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
Manifest number: 0472
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: rAZrZ+kzhd306xmex46dtI+iAUJTK1mlsJbGF3EeW78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:7c:75:03:7d:1f:ee:41:bf:57:36:7e:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=c633998bda5094b9679788561d56141791ca3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:bd:cd:33:13:ce:39:aa:f0:c0:5f:6f:e3:
f1:f6:5b:a2:d7:15:c5:f4:f6:83:30:15:7d:e6:57:
8a:ef:22:23:9d:c6:5d:3f:f6:9f:8a:6b:e0:4c:f0:
a9:d8:9a:c9:8f:01:41:32:0e:04:b7:e8:dd:dd:e2:
8c:ac:6b:48:11:92:a1:aa:e8:55:e3:e1:56:db:f4:
23:08:be:97:0f:e8:56:1a:e2:16:25:9c:ce:c0:79:
a1:46:c0:45:cc:a5:24:e1:4f:61:22:9d:db:d1:9d:
63:87:bd:ab:05:4a:7e:dd:15:a9:74:51:d7:69:5c:
d6:7b:61:ba:dc:f9:1d:2b:30:c5:0c:84:3c:87:0c:
aa:5a:82:83:d6:f4:43:99:fa:71:68:11:1d:29:2c:
40:a4:85:cb:f4:ba:08:8b:de:f7:d8:83:11:c8:b3:
d6:86:e0:07:26:f2:47:85:57:37:ce:d9:e0:82:11:
d4:eb:ba:03:30:bc:4a:e1:bc:76:1b:33:f1:da:04:
60:ad:c2:3d:13:9d:48:63:8b:e0:47:40:b6:c1:c8:
0f:38:bd:fd:88:a2:e0:c7:fb:6c:83:b7:cf:85:d3:
58:29:a8:22:af:a0:7f:2c:5e:a8:2c:da:98:d0:f7:
ae:26:90:39:9f:31:c6:1c:ff:3f:fe:71:57:64:06:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:99:8B:DA:50:94:B9:67:97:88:56:1D:56:14:17:91:CA:34:48
X509v3 Authority Key Identifier:
keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:f3:92:a8:70:38:09:e9:c7:da:f8:43:b6:bc:01:76:70:
75:0d:07:a0:1f:8d:99:2b:f2:b5:cd:07:64:01:be:3f:b7:64:
97:e0:8f:a7:e1:23:62:1d:5a:f6:8c:04:e3:b3:34:7f:f7:f9:
b8:c6:20:51:c6:6a:54:ff:af:80:43:4e:ef:cc:47:e2:c4:33:
11:ec:ee:92:7c:f4:23:18:bf:00:34:7e:ca:10:80:55:26:2c:
bf:58:12:df:b6:2d:47:8b:b1:6d:3c:49:0b:b9:78:27:cf:a3:
05:a0:dc:69:36:42:2f:2e:c2:0f:bb:b6:cd:71:a9:83:c8:18:
cd:9e:19:41:7b:54:f7:0a:98:58:10:f9:a8:ca:94:e8:10:cf:
31:04:19:d9:fc:39:dc:0a:1d:9c:f5:08:06:11:52:94:d7:a4:
d6:e6:c2:23:ce:25:af:58:de:8a:b0:33:54:8e:04:b6:d5:d8:
ae:18:79:57:19:9c:09:a3:8c:76:dd:a8:3f:c5:bd:6e:c9:7d:
09:cc:33:01:75:a7:62:0a:79:bf:86:f4:0e:f1:77:9c:c7:85:
40:21:6c:e3:ac:96:b5:35:9d:7a:82:b8:44:e4:ed:3b:3c:50:
a2:40:7b:ea:7c:9f:3a:6a:80:2d:b5:17:a2:73:16:01:65:d6:
cc:38:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:23 2025 by rpki-client