Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: ia9/2f7T2+CeGorKcEIQtMehfUDhP7g8crg4bAbDSCg=
Subject key identifier: F0:01:EF:FD:B5:AE:0D:C1:EE:AE:3D:A8:C2:FF:0B:2A:2B:32:2A:E3
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 0199FE7D9F8A169AC3AB7F7672A1C4239559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 05AE
Signing time: Sun 19 Oct 2025 22:01:09 +0000
Manifest this update: Sun 19 Oct 2025 22:01:09 +0000
Manifest next update: Mon 20 Oct 2025 22:01:09 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: epVh2MbGyZ15f37Q+IlkK1/nlgGlHKr9Hd0RsVXsFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9f:8a:16:9a:c3:ab:7f:76:72:a1:c4:23:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Oct 19 22:01:09 2025 GMT
Not After : Oct 20 22:01:09 2025 GMT
Subject: CN=f001effdb5ae0dc1eeae3da8c2ff0b2a2b322ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:a3:df:74:a8:c0:f6:12:33:a6:90:e4:9c:
45:14:24:83:d5:0b:72:aa:fa:94:f9:78:fe:2b:1c:
7c:bf:df:fb:a8:95:4c:4c:dd:47:e4:4e:68:f3:c4:
14:a8:db:e3:9e:a2:94:fd:5e:6a:e5:a6:c5:de:be:
41:ef:3a:9f:7a:97:bd:b5:3c:3a:4f:35:8c:22:2c:
24:61:2d:f8:a6:15:a5:fb:07:44:5b:68:4c:8d:52:
e4:99:39:91:e4:78:b1:8c:14:db:00:4f:57:1b:83:
19:96:72:34:1d:9b:36:4b:c1:9a:00:d5:79:76:3c:
4a:2e:e9:21:1e:22:44:6f:2f:ec:84:d1:2a:f7:11:
de:38:0e:0d:6a:06:6d:b4:46:2e:c6:30:cc:18:98:
04:d3:81:0d:97:2a:4f:c0:41:84:16:e9:91:6e:af:
31:9a:3e:f0:14:46:c9:23:5f:df:65:31:3f:d4:aa:
1d:22:e5:60:b3:d4:e1:d2:a3:45:19:d3:07:64:50:
60:7c:91:44:3b:18:e4:f0:87:84:ec:b9:db:65:0a:
c1:48:5e:92:f5:67:33:70:22:6c:f2:d1:5c:a2:99:
0b:cb:25:25:95:c9:32:9d:20:50:35:38:be:3b:a9:
0b:b6:5b:56:a1:ee:f7:31:39:9b:ef:a6:5b:94:23:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:EF:FD:B5:AE:0D:C1:EE:AE:3D:A8:C2:FF:0B:2A:2B:32:2A:E3
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d4:66:db:80:a8:4a:8a:17:9e:ce:73:84:18:ec:2a:f8:57:
f2:3a:aa:9e:5a:ad:07:1f:8a:95:63:76:54:69:8d:06:c9:21:
2b:c8:4c:1d:a6:9e:71:b5:49:66:be:78:e9:4b:3d:8e:b8:aa:
9a:25:13:42:3c:0c:b1:79:c7:e7:d1:17:c7:a6:71:26:05:52:
e9:f9:96:56:3d:2f:07:15:cd:8f:0d:53:0a:5a:43:49:0c:c8:
76:a6:53:6b:60:e0:9e:a0:c5:ff:57:72:98:6e:08:7a:4d:65:
1d:d4:00:5e:61:81:4f:95:51:22:5f:41:f5:6a:5b:10:d4:2b:
90:73:1d:3f:a0:05:1d:89:0d:6d:3b:a0:41:8a:e5:07:6e:d9:
74:a0:7e:d2:04:77:b0:a7:b6:23:1a:5e:c4:9c:ec:09:ed:f0:
21:fc:8a:fb:e6:9b:68:c2:12:87:77:3a:d8:30:2d:61:11:c1:
be:7b:10:24:3d:94:9c:66:09:01:86:b2:20:42:a8:5b:68:e5:
0b:ce:b6:b9:89:e2:97:32:31:3e:43:e2:f6:22:78:5f:64:58:
11:88:e2:e3:1a:25:2b:ec:a8:03:5b:9e:28:65:37:56:4b:20:
d2:d4:e0:2a:51:f1:95:97:64:e8:f6:41:3e:45:d3:77:82:54:
1b:3f:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:21 2025 by rpki-client