Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json)
Hash identifier: ZRqRqthrPTk7pzORv9xQWyFgGTGp4kmEvDan06VAZgk=
Subject key identifier: 1C:7F:9C:D2:9B:CE:0B:DC:AE:48:F8:C0:F6:96:1B:83:4D:0E:6C:AC
Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Certificate serial: 0199FBEBB6FE36647C9656B70CD4EEF00312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: 2f4/VzuWYqu0YWE48gHn26vlQdTh4w73y7C/0jdfhBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b6:fe:36:64:7c:96:56:b7:0c:d4:ee:f0:03:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=1c7f9cd29bce0bdcae48f8c0f6961b834d0e6cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:7b:16:b0:fb:80:e5:57:1f:b3:40:82:97:
61:2c:9b:82:e6:57:61:5e:1b:40:df:0c:8d:10:54:
7f:b9:9f:40:bd:81:1f:f4:27:4a:0d:33:cb:2a:b4:
28:f4:d4:58:3d:a8:ac:31:b3:0d:0e:21:07:ed:f3:
7f:7a:33:a0:a3:fd:60:97:70:b9:e1:6e:75:de:4e:
c5:f7:e9:b5:ab:48:0e:08:ff:90:3f:df:c9:9d:82:
83:00:2c:54:6d:60:19:65:d5:87:d7:65:82:b4:1d:
f8:53:fb:75:46:3c:d7:e6:7b:33:b3:d7:ba:91:15:
5f:00:cb:9b:1c:b7:4c:4d:1f:2f:9b:52:e7:8c:fa:
e7:9d:04:72:77:13:54:c0:8a:9a:3e:a7:0a:5e:d2:
a9:61:15:07:04:a2:b8:32:0a:8f:57:9b:a5:22:9d:
ff:50:6d:cf:96:7f:63:b4:3e:eb:40:d8:b0:94:a7:
af:d3:7d:a6:58:7a:ac:4a:63:e3:8e:6f:01:56:2f:
63:2a:57:9e:1c:32:fc:7d:77:b8:45:1e:c1:ec:c3:
de:5c:d8:e9:44:26:fc:fe:1a:8d:4d:92:00:cf:b6:
41:9f:82:b1:c5:f7:f0:cb:9f:ba:64:65:e7:cc:b3:
a4:37:99:5f:d4:b0:17:e3:f7:e9:0d:41:89:04:04:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7F:9C:D2:9B:CE:0B:DC:AE:48:F8:C0:F6:96:1B:83:4D:0E:6C:AC
X509v3 Authority Key Identifier:
keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:c6:fa:45:82:61:80:3c:f1:9d:ac:80:8f:9d:5c:7c:33:
c3:cc:f6:f0:8c:59:6a:34:5c:bb:f3:95:b2:0c:96:0d:3d:8a:
f0:2c:11:2f:d9:ea:a2:82:e6:3e:9a:6c:8b:39:65:2e:ca:f9:
46:98:e1:03:ee:db:64:a6:63:c4:02:be:12:a8:1b:33:6f:65:
20:82:c4:de:ec:cf:aa:6b:90:2d:d3:42:74:58:18:6f:42:f0:
1f:ed:69:e0:5f:d7:40:e1:e4:fd:e7:9d:82:49:05:fa:7f:7e:
e2:6d:de:a3:04:62:cc:63:90:41:25:0b:5a:c8:dd:81:a8:a4:
ed:63:22:26:82:b7:ac:18:ff:9e:48:8d:1c:ca:99:33:92:9c:
7b:31:e9:a7:03:e3:aa:07:f9:05:cb:4b:5c:1e:76:fd:db:34:
04:bf:af:30:ea:7d:d6:ba:58:d3:ba:1e:7c:a6:6f:c4:24:93:
78:0d:cc:5c:c3:37:a6:93:bd:7a:04:ac:11:d8:09:43:d8:cf:
57:b6:dc:94:70:84:2f:57:72:82:fa:1d:aa:4e:6e:a9:26:e4:
37:f9:95:fc:6e:2b:58:fa:d7:59:e7:db:63:e0:e7:e1:1c:71:
85:5c:34:7c:a7:2e:b0:0a:f9:79:c7:42:bb:9f:ea:29:ee:c3:
bc:53:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:51 2025 by rpki-client