Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier: UTaJBs9weMIsg7LCQNOd9r5ffiu3/3VVSB0CNzMrZB0=
Subject key identifier: C8:98:7E:BF:D6:CB:F1:EC:8C:77:DA:73:AA:33:F3:5D:72:6A:50:EA
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial: 019A0110EFB41EEAF1A3937395D30E8C72DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number: 0A81
Signing time: Mon 20 Oct 2025 10:01:18 +0000
Manifest this update: Mon 20 Oct 2025 10:01:18 +0000
Manifest next update: Tue 21 Oct 2025 10:01:18 +0000
Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: Q7UJBAklQYjvgIL/99nB/6RitlGOxd0DnVjT3L2iClc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:ef:b4:1e:ea:f1:a3:93:73:95:d3:0e:8c:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Validity
Not Before: Oct 20 10:01:18 2025 GMT
Not After : Oct 21 10:01:18 2025 GMT
Subject: CN=c8987ebfd6cbf1ec8c77da73aa33f35d726a50ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:80:b7:c4:3b:f7:47:8b:98:1c:0c:da:e9:
3a:fa:9d:57:64:55:5a:c1:07:a9:1d:f3:4d:33:2c:
d7:a9:3c:21:21:3f:3e:5f:00:b2:3b:f1:90:fa:40:
5c:34:86:d6:82:44:6c:a2:da:9b:b2:61:dc:dd:54:
ed:e3:3c:63:44:a7:1a:23:71:ca:22:9a:4e:a9:56:
3e:30:ff:5e:7d:77:52:a3:6b:d2:d9:0c:73:c9:85:
7e:5f:60:4c:b4:c2:97:26:22:df:b5:2d:0a:6b:f8:
9e:c0:a1:cc:c3:5f:b5:7b:c0:d3:04:9d:d0:26:65:
28:4d:76:10:e9:18:36:93:6a:95:80:97:d2:55:95:
e7:1f:6f:9a:53:4f:e0:91:82:8f:c7:cd:ac:ce:c6:
a9:0d:54:8f:83:9d:5c:31:85:42:f6:55:2c:af:41:
2c:d6:a9:56:96:71:e4:2d:c2:8f:77:be:63:fb:d1:
b8:ec:e4:f0:ec:d9:60:9c:45:61:7b:98:3f:e1:41:
cc:2e:0b:1e:b9:d4:90:ad:0b:44:64:14:0d:51:6c:
23:6c:3f:4d:ab:c2:17:17:6d:d4:c6:1a:1f:ac:7f:
2a:52:60:03:28:06:d1:52:86:23:7e:5b:09:96:2c:
f9:98:87:fb:e1:fa:2d:c4:bf:32:3d:62:3f:b6:f0:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:7E:BF:D6:CB:F1:EC:8C:77:DA:73:AA:33:F3:5D:72:6A:50:EA
X509v3 Authority Key Identifier:
keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f2:b6:29:25:51:88:e9:b0:b2:96:cb:e0:1a:dd:66:bc:17:
25:1a:b6:da:69:07:24:ae:71:ea:56:7b:ad:dc:71:b5:b5:e3:
ad:03:c3:0e:7f:d2:85:76:e5:9d:bb:06:0a:ae:7d:c5:44:f0:
73:9d:9a:c5:38:c0:93:64:cb:7c:64:d2:9f:ab:98:ff:f7:91:
49:3a:41:df:09:c4:82:47:61:58:ab:c6:d5:98:e9:4c:03:38:
97:45:4d:a7:e7:be:4f:c0:88:4d:fb:6a:28:58:91:56:a1:c9:
68:ca:ae:1d:d7:05:5a:27:6a:6b:f3:0e:c5:dc:e7:6e:c8:71:
17:23:b5:c3:2b:63:98:34:26:16:02:94:6f:f3:13:7d:0e:43:
4b:13:57:55:21:57:e6:30:e4:9b:d6:01:1a:bb:71:66:d3:22:
2d:86:4a:ac:d1:ad:c9:0f:b2:b2:75:16:20:3f:94:e8:2a:fc:
ab:cf:33:4b:2b:c6:b0:05:02:aa:d0:c7:a6:c6:a7:ab:88:e3:
db:44:11:21:e5:d2:81:25:b1:d7:ca:66:ea:57:4a:95:08:2a:
92:88:ad:b6:a6:48:ef:ca:47:b1:f5:81:4f:c4:38:40:a6:d5:
21:77:d5:83:7c:fa:ef:c5:76:7e:d9:3a:e6:69:47:e2:24:aa:
ce:67:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:40 2025 by rpki-client