Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: rWbRCqSSh6LC3y1UhEiWZgw/M5FCe+QBDmsXBmmcQtw=
Subject key identifier: 69:22:3E:63:84:13:1A:CA:30:0E:E2:43:98:DC:BD:B4:8F:9E:44:30
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 0199FBEBB39B3C678E5ABCFFC85D2355D7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0E6F
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: jSuvkT+kfjFJLPgHfzqCd8uYOES5J0iJ68uGmMOl9KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b3:9b:3c:67:8e:5a:bc:ff:c8:5d:23:55:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=69223e6384131aca300ee24398dcbdb48f9e4430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:dc:17:98:e3:0e:3e:0f:83:9a:85:3e:1f:
a8:97:19:2e:4e:81:ac:0a:b0:00:b1:10:5a:68:6c:
4a:64:45:80:bc:cc:b4:a5:4a:01:68:38:ab:b6:31:
4b:3d:26:a8:d7:8c:c3:75:26:d5:fb:54:74:42:6e:
58:ab:74:10:ed:33:cc:81:1f:e6:77:fc:47:5e:65:
fc:d4:0b:be:c5:b1:cd:46:5c:83:5c:5e:fb:3d:41:
3c:f1:d8:e9:a4:22:cd:de:fb:a3:f0:33:b0:e5:e2:
73:24:c2:55:97:01:f6:4a:4f:bf:b3:bb:11:77:e5:
97:0e:02:91:ef:42:c5:39:eb:2c:87:f9:4c:0a:83:
f2:05:f5:c0:a8:9b:1c:82:af:7b:5b:4f:af:57:47:
f6:be:1a:e1:29:6b:ad:28:2d:ea:13:b1:7a:aa:6d:
9c:7b:d6:71:42:d8:e8:8b:a3:92:e9:4d:e2:1e:36:
c5:41:30:a1:47:ef:6a:7f:5f:b3:cd:a2:97:06:ad:
33:4f:ef:0c:1e:80:29:de:1e:88:4b:a7:bd:34:0a:
e0:54:6d:2b:67:92:25:ab:78:7d:ec:c7:57:77:2c:
10:15:6a:c9:47:69:be:3d:76:ae:27:e1:8a:11:9d:
54:f6:a6:0b:6c:94:ea:9d:c1:d5:83:5c:27:3a:dd:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:3E:63:84:13:1A:CA:30:0E:E2:43:98:DC:BD:B4:8F:9E:44:30
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a1:51:25:7d:88:8f:07:f7:5b:8c:90:2a:b5:fc:9d:de:19:
fb:3e:96:73:a9:e6:68:ac:4a:e1:4a:f4:bb:4b:d7:f6:12:0e:
34:64:f7:cd:a7:2d:31:1b:0c:40:17:f1:af:97:a0:c5:27:60:
7b:7e:64:4b:5c:86:6a:d7:02:29:21:df:cd:04:bc:4e:2f:11:
81:9b:b2:41:22:a3:88:0c:95:16:b6:96:5e:17:11:35:9e:55:
bc:ac:ff:be:70:b5:3b:60:91:0b:ec:2d:76:26:c2:d6:4d:d8:
47:9f:93:df:9b:3f:e7:d7:a3:3f:cd:74:1d:3b:3a:c4:82:e6:
48:e4:1b:d0:6e:10:0f:b5:18:ac:40:dd:46:40:89:00:0c:89:
0c:6e:eb:dc:e8:22:36:e7:0e:74:29:10:90:ee:9f:b4:4c:e8:
83:52:70:4b:e1:71:4f:76:73:82:db:6c:4c:91:b2:24:78:b9:
8b:52:e8:18:c9:e5:36:d2:a0:14:f4:90:1c:5a:06:e2:83:a1:
1d:a4:0e:55:f6:83:51:13:9c:d6:1a:56:08:25:38:9c:b8:de:
72:cb:43:76:bb:b5:72:e2:05:18:2a:03:d9:70:db:4b:09:d6:
03:b1:5d:93:51:0c:a2:65:2b:bf:b7:13:8f:2a:a2:49:62:e4:
9f:f7:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:55 2025 by rpki-client