Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: yTyzLOhQGfF+cQBR9fALQGwYfCj/ZFLNfqBG2MSAbz8=
Subject key identifier: 86:77:5D:FD:EE:6D:59:AD:D6:95:CF:74:10:7B:46:89:AE:FA:06:C5
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 0199FBEC165C8807FF3F546E9340E25A6334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0EFC
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: 4nKAXlyarRLgPEakLKaUBbm4fwPio5GVDe8ieMSgNyU=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:5c:88:07:ff:3f:54:6e:93:40:e2:5a:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=86775dfdee6d59add695cf74107b4689aefa06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:6f:21:43:48:32:18:b5:5b:bc:0f:5f:8d:
d9:bb:37:21:25:63:75:4b:47:f3:46:8a:d3:9e:8a:
9e:42:bb:9d:65:75:48:64:4c:d2:c7:a9:3a:6f:8d:
60:e9:7b:36:0e:ee:a6:de:47:54:2e:b7:2e:2e:4f:
bf:15:ea:2a:8a:62:f5:45:1f:92:2f:49:d2:2b:70:
a1:5c:79:59:32:39:f6:13:b1:96:cc:cc:fa:5f:f8:
bc:51:bf:20:e2:a6:27:c6:82:dd:81:c0:8d:03:bf:
08:8f:50:7e:40:ed:10:1f:67:6d:ae:d2:3d:32:df:
af:f7:c9:07:dd:b6:ce:74:54:70:b9:c6:4a:60:84:
fa:64:21:85:61:fa:f6:5a:b8:ff:1d:74:d6:2a:70:
40:f6:aa:63:b9:1e:ba:76:9a:2b:28:38:92:45:79:
35:dd:1b:c4:fe:52:31:bf:76:c5:c5:94:ac:0b:81:
db:73:81:77:11:7d:bc:5a:54:5e:b7:19:6b:a7:1e:
01:f0:cd:37:16:b4:00:a5:a0:0c:be:95:8b:af:f0:
1b:73:de:60:3c:2d:f1:6f:2c:79:3c:92:10:b9:f7:
59:d0:f7:10:d8:1e:ea:42:91:33:25:cb:d5:81:57:
37:94:89:60:11:0e:64:c6:93:ae:ab:15:50:92:46:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:77:5D:FD:EE:6D:59:AD:D6:95:CF:74:10:7B:46:89:AE:FA:06:C5
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7c:b9:59:e8:3c:6b:d4:60:5d:22:f6:7d:cb:a8:3b:c5:d2:
bc:a5:81:51:85:cc:62:53:49:8c:72:83:7c:ba:8c:ef:6e:23:
d1:85:63:e9:09:1a:65:7f:63:3e:13:1d:e5:6d:4a:b1:16:12:
12:c1:04:e4:4a:54:1e:f4:28:3d:3d:d9:67:13:0f:01:81:ab:
2b:ed:48:aa:f2:f1:bd:77:2d:4b:94:25:42:4a:f1:36:ec:a9:
aa:dd:ea:2e:8a:15:34:41:81:63:79:5c:39:06:3f:80:a2:ed:
cc:9e:0d:b4:fd:0c:8f:c7:2e:8c:9c:15:c8:91:10:21:2d:d9:
a1:a7:6a:18:a5:6f:f8:92:75:9a:d6:70:7e:5f:07:a0:20:e6:
fc:b2:c7:b8:d9:74:b0:5c:af:23:71:5e:6f:b7:7f:9f:47:3e:
0a:0d:04:bd:4d:68:a9:0a:be:f3:f3:9f:34:1f:a9:ca:4d:7e:
63:5d:8a:aa:73:c8:32:fb:52:0f:8e:05:ff:c8:1b:02:54:2d:
a2:50:6f:5a:a2:e7:14:eb:01:f6:cb:c9:4d:38:ba:16:80:b5:
25:a2:67:40:e0:f0:a5:a8:6d:bc:8b:bc:46:7b:13:0b:38:a3:
b4:ca:86:2f:be:ea:e7:b0:cd:b1:eb:9d:3a:fb:e5:2d:cc:6c:
c6:7c:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:49 2025 by rpki-client