
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier: ebNDD0jYHbBrpGlKmPkbalPRPnHQlKhUeTJ2gNI/CFs=
Subject key identifier: 0F:C8:03:70:57:48:6C:3A:D7:F3:C1:FE:A3:74:3C:23:40:47:CD:64
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial: 0199FC8FBF5347C6D2986C7D5BB2AF471751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number: 0D75
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: CBSBZt++3mikjf8l8s2t+36t40yH/+gG5wfeUHE96YM=)
2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bf:53:47:c6:d2:98:6c:7d:5b:b2:af:47:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=0fc8037057486c3ad7f3c1fea3743c234047cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:c1:a7:be:3b:48:0a:52:57:fc:69:a4:99:
8c:f6:cc:8a:c8:c5:ed:84:03:8e:3f:0e:c2:10:45:
50:0f:cd:1d:7f:63:a0:c5:6b:f6:81:c6:ff:90:ad:
ab:63:18:3a:c4:79:a0:95:f7:b2:c2:38:3d:4c:f0:
3c:de:5f:58:57:b8:62:6b:11:19:a3:67:d8:ad:ea:
43:f6:69:99:1e:11:8e:a2:8f:30:25:f9:9c:3a:8b:
67:23:c6:14:81:52:df:55:d9:3f:44:44:c2:6a:ca:
66:a1:c1:fa:12:36:71:68:19:ed:32:8a:ca:db:d5:
b5:5b:7e:72:a1:d1:90:f1:4b:69:c8:a2:58:32:52:
44:b5:4f:84:3a:6b:31:26:9b:e5:a9:59:5b:20:74:
50:53:a7:d0:c1:de:cf:37:04:7e:c7:23:bc:4b:86:
e1:f4:2b:60:cd:7c:b4:79:ef:43:15:66:2a:b7:71:
3a:3a:2c:78:eb:5e:ba:b8:15:58:5f:62:f8:bd:f8:
39:11:45:5e:cc:b1:04:b1:10:77:5b:ae:f8:a8:ed:
d7:e4:99:9a:e1:84:1a:9c:2c:a0:86:12:3a:94:51:
18:f5:cb:bd:b1:40:30:f5:3f:42:62:79:18:46:ed:
89:09:fa:4a:5a:04:3c:d0:59:ac:1e:ab:65:0a:f6:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:03:70:57:48:6C:3A:D7:F3:C1:FE:A3:74:3C:23:40:47:CD:64
X509v3 Authority Key Identifier:
keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:55:fd:57:09:a2:20:84:bd:22:f3:ce:8a:ac:a5:e3:c4:
55:cf:80:90:0e:3e:a1:12:ef:65:9b:22:79:c5:8c:56:58:9c:
ae:76:f7:86:36:64:16:54:8f:9e:67:d7:1c:93:5a:44:5a:61:
68:ec:53:e9:29:b7:f8:80:00:58:1c:37:d4:a7:68:b2:c8:55:
ed:0d:ce:c0:25:fa:d0:f9:98:2b:8c:22:b8:cd:00:ae:e3:f4:
d0:de:6a:ac:af:ab:8c:d5:24:eb:d6:5b:97:22:24:94:6c:bb:
ce:17:03:53:08:7c:32:3e:5a:0d:e3:a5:8a:b9:ef:c1:dd:d9:
f5:b2:bd:e3:34:33:5a:54:f4:9e:ad:74:94:d1:87:eb:f3:bd:
f8:89:20:5e:bd:98:8b:3e:7c:80:27:57:c5:c6:be:b3:e0:b7:
24:42:8b:ff:bf:2f:4a:ff:ba:dc:f2:fd:18:5a:cc:6d:b5:62:
73:eb:c1:e0:da:c0:ea:82:28:2f:32:8d:0b:2c:1a:da:28:03:
37:c3:a0:f5:a9:9d:59:a1:85:02:25:9e:1d:67:ac:5e:44:05:
4c:64:00:48:c5:a2:05:fb:eb:1e:08:8c:a4:a0:fc:20:50:d8:
da:98:c9:93:9d:45:5a:a3:26:8e:0a:e2:dd:2b:b6:43:34:bf:
c2:c8:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:46 2025 by rpki-client