Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier: 4KTnbNhcu0OqyAsisJh6lwoBMWB7pTIoDT+L8MT6a3E=
Subject key identifier: 9E:74:B7:2B:45:92:56:DA:99:1D:89:B4:C4:2E:7A:82:26:5F:0D:32
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial: 0199FE46C6103CE009227D030E61C080162C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number: 01E2
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: mp/CPe/VywDUQE2dsCAkkBvzJNActDwUgYgg/L+jBJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c6:10:3c:e0:09:22:7d:03:0e:61:c0:80:16:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=9e74b72b459256da991d89b4c42e7a82265f0d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:1d:83:9a:33:5e:bd:2f:64:8a:48:a4:03:
6e:79:31:19:8c:79:38:0c:3d:04:27:ea:b8:e8:19:
aa:bd:57:70:cb:62:f7:8d:4b:80:15:a4:04:1d:17:
d1:e9:93:84:63:47:1f:81:4c:4c:87:cb:4d:52:6f:
cf:fd:d9:62:c7:f3:47:d1:87:d0:e3:37:1f:21:7a:
de:1d:54:ca:b8:dc:df:fa:aa:d3:0a:25:0b:f0:26:
5d:3c:d4:a0:cf:43:e5:f5:98:d0:bf:4c:b1:79:8b:
7e:b7:0a:09:b9:f6:63:e3:1f:27:5c:9e:c2:a2:ce:
72:95:3c:7b:68:d5:9d:93:6d:41:65:af:9f:66:dd:
c8:80:04:d5:5a:a7:d5:04:e3:03:21:79:60:f7:e4:
b8:18:f6:21:ea:84:d6:3c:65:46:b2:27:e0:41:dd:
28:0b:3e:23:52:c2:c4:6f:2e:0e:24:d9:d6:88:7b:
c2:26:81:72:0c:63:c2:2f:ce:e5:bf:eb:bf:89:8e:
ce:26:aa:3b:69:cf:24:9e:e0:4e:6f:3a:3f:46:d2:
70:72:72:47:de:d8:0e:e3:0c:36:e7:db:b7:56:6b:
86:d1:b0:ae:b7:0e:18:d6:f7:95:88:b9:9a:a8:3b:
14:d2:ba:bc:d6:1a:a6:5f:33:45:2f:bf:bb:46:a4:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:B7:2B:45:92:56:DA:99:1D:89:B4:C4:2E:7A:82:26:5F:0D:32
X509v3 Authority Key Identifier:
keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:9c:b6:b2:0a:e2:cf:31:0f:aa:c9:23:db:cc:67:19:61:
d2:2b:cc:54:95:d2:34:0d:db:35:97:bd:4d:d6:28:e5:59:33:
d4:8d:1c:b1:51:dd:1b:2f:67:6b:7e:29:94:85:7f:74:8c:55:
28:31:82:ba:1e:34:52:72:ad:84:02:1c:aa:6f:8c:17:bf:dd:
23:33:ba:4a:fa:05:83:83:fc:5a:c8:80:b4:6b:f1:b9:57:ad:
bc:9b:0a:bf:ab:3d:cf:27:31:dc:2b:f6:98:81:9f:c5:0e:77:
0e:f3:64:ec:16:e8:e0:3e:2d:7b:8e:0c:e2:41:07:02:02:29:
e7:69:33:74:98:4f:24:9c:74:90:d2:0a:67:7f:0f:c8:e7:a1:
7b:a7:8a:40:cd:3c:79:17:6f:29:cd:b4:6d:16:db:58:3a:89:
29:95:57:c9:26:fa:08:b3:d3:0c:bf:22:4e:39:75:e6:ee:39:
5a:d5:52:c0:25:ab:87:a1:ea:38:10:b3:ec:66:7b:15:51:89:
82:33:60:27:89:69:74:3b:64:d6:30:73:2d:b9:a4:19:42:6f:
e6:c2:ba:99:03:a4:a3:b7:37:c1:15:51:7b:a6:7a:33:eb:c9:
e2:1a:9a:62:4f:eb:ca:e4:d4:2e:a2:7a:f1:c8:eb:f9:62:93:
ad:76:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:36 2025 by rpki-client