Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: 3s6EBorMj3nM9ACvhnrem9fjsCFrUVSKmkeKxt0QZCw=
Subject key identifier: 17:52:B8:68:C2:42:D9:D3:5A:EE:F7:86:F9:52:1B:D5:C6:1D:A0:A6
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0199FBEAD380441C464E858D87B6E01A76EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: 7Pdzfo8X0BE1ylR4KLF37HKg2zMcbGuybwHOMpYJf44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d3:80:44:1c:46:4e:85:8d:87:b6:e0:1a:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=1752b868c242d9d35aeef786f9521bd5c61da0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:e0:f6:f8:32:45:11:ea:08:ed:1e:a4:8b:
60:6a:5f:b2:4f:22:0d:a6:59:ee:54:56:60:34:9d:
cb:30:80:4b:c1:61:3a:13:a5:55:e5:7d:4e:05:eb:
8c:c6:b9:11:9b:75:e7:2d:6a:2f:d2:44:db:8a:5f:
d0:f0:bb:f9:1e:10:94:ab:29:69:8e:56:5e:6f:64:
89:bc:71:8b:46:8d:e4:6e:ec:4b:7e:d1:39:ac:80:
3e:6a:a9:04:f3:47:40:2e:f2:74:59:f0:02:a1:de:
5f:7f:ac:89:bd:d9:bc:e6:f8:56:5e:98:59:0e:b5:
0d:73:d8:13:c5:8d:16:6e:bc:b2:c1:50:38:8e:7d:
ba:95:63:d5:42:58:ee:79:32:bf:88:99:c6:b2:7e:
8f:a0:bc:7d:f9:2e:27:04:68:01:f8:c6:8d:1d:e7:
9e:3d:07:78:6d:04:0f:df:5d:c0:d6:0e:36:c3:37:
e6:55:e4:f3:22:e2:32:98:3a:9a:93:19:f8:68:1e:
bd:2b:27:b8:7c:48:b9:04:71:9e:46:96:f8:95:3f:
51:2e:ae:bd:53:4e:9a:21:ed:55:92:04:36:8d:8d:
be:a4:0a:ef:d0:eb:a4:3b:79:4e:53:fb:37:1a:1c:
25:76:3b:56:07:44:b2:d2:14:9d:9d:e4:ee:8c:ad:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:B8:68:C2:42:D9:D3:5A:EE:F7:86:F9:52:1B:D5:C6:1D:A0:A6
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:92:af:39:c0:66:33:b1:e5:46:ed:10:cc:16:f5:6e:75:88:
af:7a:61:65:c0:df:cd:d2:da:72:e9:78:6f:c6:f3:19:ce:b5:
e6:33:a1:47:3f:e7:0c:46:3e:4f:5b:ee:eb:8d:1e:56:d9:9f:
9e:a9:6f:27:6d:05:7f:28:99:5c:2c:71:c3:50:50:c3:78:28:
d6:91:0f:f0:b4:5e:67:68:1c:8c:1a:a4:cc:4f:45:98:7c:58:
af:e8:f9:7f:a9:bd:7d:8e:93:72:c1:76:52:03:fd:d8:74:2e:
76:b5:ea:09:a5:27:78:4a:90:cc:aa:1c:fc:ea:c3:7c:7c:67:
a2:95:1d:20:0a:d9:54:01:00:64:b3:7a:dd:b0:b0:4a:42:fc:
d7:46:33:b4:b0:40:31:98:e8:74:3e:0a:bf:5f:17:b3:a1:81:
0f:3b:12:9d:2e:03:35:9e:d1:10:47:b3:2e:b7:96:57:dd:52:
35:0c:90:68:b7:53:ee:e3:42:aa:c4:5b:23:a2:87:a4:a3:91:
d0:3e:19:ff:ab:7f:50:d4:40:a2:7f:c2:7e:07:7d:12:4f:61:
3a:68:3c:88:7d:ea:36:14:76:d1:1c:6d:cc:8a:de:6c:10:68:
c6:dc:e1:e2:09:e1:b5:94:b5:13:81:15:49:d9:cf:ec:6a:bf:
c4:63:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:36 2025 by rpki-client