Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: eXjq69n12bkEnLT5nvhhJJGAVot3++zsGQqHrofGADY=
Subject key identifier: CC:11:DD:F9:56:6A:46:5F:4E:9B:93:02:50:05:0F:DC:79:9D:FA:56
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 0199FCC692943BBF79583932D84429CB5AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 0631
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: 4dToqG7KJMzxKGxDHrh51LTe01+rpith3vzYHlW7QrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:92:94:3b:bf:79:58:39:32:d8:44:29:cb:5a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=cc11ddf9566a465f4e9b930250050fdc799dfa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:0c:e1:63:8d:dd:42:60:44:64:d6:9e:05:
c9:a7:41:84:88:3f:19:c5:33:37:a6:48:82:84:51:
34:55:14:5a:7f:7e:97:08:6f:f3:19:07:70:f5:ee:
17:98:51:45:13:1d:09:ff:82:2b:5f:8a:67:34:87:
26:42:74:df:20:ac:b9:e9:f8:69:67:37:7c:a3:ad:
80:d1:8c:40:09:b3:63:5e:80:f6:d1:b1:d7:cd:0a:
5d:57:c6:6c:29:fd:a9:d4:a3:d0:2a:6a:be:39:d4:
cf:2c:0d:86:aa:09:e2:d6:75:4c:d0:f9:de:39:2b:
4a:9b:c6:3b:13:fa:bd:ff:e9:00:6f:0b:6f:f7:b3:
a5:8f:2c:b9:e1:0c:16:52:4c:88:5e:ce:cc:80:97:
7d:4e:52:01:60:90:d6:bb:68:b1:b1:57:27:01:46:
ff:b6:ae:e0:dc:d0:f1:f5:f9:e2:00:52:e9:86:52:
71:83:9e:d3:57:91:2c:36:3f:61:eb:a6:71:9f:bd:
e1:ae:9e:39:e7:12:14:84:5f:b5:4e:da:de:4d:03:
c6:c3:6f:56:b3:06:43:e2:fe:71:99:5e:7f:c6:01:
0a:70:4e:2c:4e:89:17:36:f7:26:9c:78:26:66:d6:
06:1f:be:6e:e2:31:87:d9:d8:6d:84:07:76:cd:2a:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:DD:F9:56:6A:46:5F:4E:9B:93:02:50:05:0F:DC:79:9D:FA:56
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:cd:b7:9b:39:d6:17:56:43:d5:68:fa:d6:06:5d:81:27:
17:df:aa:d9:24:f0:ae:8f:16:63:a0:7f:68:01:20:7c:1c:b2:
7c:b3:cd:d6:2b:d3:a4:52:cb:1b:7d:a6:e9:87:e2:07:2b:23:
20:06:66:cb:49:60:0e:f4:9a:67:69:98:02:43:4c:61:45:6c:
2f:2c:d9:ad:54:51:e9:0e:d3:44:09:84:f3:e0:31:4a:46:51:
a4:65:61:a5:ac:44:f3:0b:21:db:91:49:13:63:dd:5c:bf:9c:
e6:b0:ed:e8:51:75:cc:d5:db:88:7c:2b:58:d6:ab:83:1a:54:
ee:28:46:fe:a9:31:7d:cb:6d:fe:a5:4f:06:45:f2:a5:ff:70:
a9:51:51:41:6a:1e:f1:03:60:24:05:35:3e:dd:d6:8a:93:4a:
81:76:58:36:96:3f:6c:2a:1f:4c:c8:12:27:2e:9f:45:95:be:
01:74:90:e4:3a:4c:83:c5:3e:91:32:9f:25:7d:fc:64:c9:a2:
75:9c:d2:65:88:9a:f1:a5:35:13:16:05:45:b0:94:71:10:21:
34:43:6b:5a:dc:0d:8b:f0:42:70:66:cb:c2:69:f5:5d:3b:da:
26:ed:e2:c2:9e:da:26:4c:2e:e8:85:4c:c4:86:a8:d7:28:9b:
cb:e0:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:49 2025 by rpki-client