
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: GvD1BX8cbb0bSCooToIMjGLLpOtIXW3o/HZ/c3TXqBU=
Subject key identifier: 9A:87:FF:F8:97:3A:08:E5:BE:58:52:E0:5A:D8:04:18:F9:68:03:AC
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 0199FAD86629D74B4F61082AE3089506D19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 05:01:49 +0000
Manifest this update: Sun 19 Oct 2025 05:01:49 +0000
Manifest next update: Mon 20 Oct 2025 05:01:49 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: oOc9mp0Mr61oYBp/KMZquQFYyfGbeItmAHojOUltJbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:66:29:d7:4b:4f:61:08:2a:e3:08:95:06:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Oct 19 05:01:49 2025 GMT
Not After : Oct 20 05:01:49 2025 GMT
Subject: CN=9a87fff8973a08e5be5852e05ad80418f96803ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:eb:0d:db:ef:fe:b1:56:19:55:a8:59:1b:
9b:37:4e:6e:19:28:ad:98:20:ab:65:87:97:ab:79:
6b:43:9e:56:b4:61:d3:37:07:fe:13:43:16:2d:78:
fb:bc:ac:27:d4:17:2a:14:ea:23:e3:56:0d:e6:d7:
90:2a:6e:58:ef:c5:30:69:e1:4b:a6:49:3f:4d:83:
92:4f:bb:ab:2e:58:6a:eb:69:84:44:e6:72:8c:68:
87:7a:9c:6e:cf:b4:04:f3:b0:18:0b:e8:cf:e4:7e:
2f:7f:21:eb:6f:b4:d4:98:bd:21:f3:d4:37:15:e2:
b1:db:75:fd:e7:c0:cf:c2:a5:7a:da:1f:54:ea:26:
ab:25:33:0c:19:a7:7f:8d:03:3d:2d:b4:0d:01:e6:
11:f2:dc:a2:d8:73:f2:9b:bf:57:4f:3d:19:43:ee:
66:f9:e3:a2:30:9d:4d:e3:ec:b0:4b:63:2a:af:e1:
8b:f0:48:f2:86:89:90:f4:f5:d7:8b:34:05:bf:3f:
4f:92:45:5f:c5:d1:70:0e:79:9b:9b:be:15:b8:d0:
52:37:6e:bf:c5:c1:c1:8f:23:10:44:46:51:6d:2f:
d6:10:f0:45:89:2d:e8:2d:b4:86:51:68:c6:92:29:
6c:2b:58:c9:d7:c0:16:5c:57:ff:85:04:72:6d:ae:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:FF:F8:97:3A:08:E5:BE:58:52:E0:5A:D8:04:18:F9:68:03:AC
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0f:6d:a8:69:ce:73:06:0c:a9:d5:99:bd:6d:da:c0:0b:eb:
44:84:3a:8f:66:12:93:5d:27:2d:98:aa:1e:04:fb:28:a5:61:
45:40:54:3e:0f:47:21:05:9d:dc:2e:af:1c:ca:f3:94:06:9a:
08:e9:78:7c:67:af:5a:13:3d:a4:5b:b7:bc:c9:d9:ea:ab:ab:
92:cc:da:ac:40:b4:0e:fa:7d:59:83:a7:ab:30:c4:3e:98:37:
30:5b:90:46:87:b6:d6:c1:80:ee:98:6f:bc:2d:34:c8:8b:06:
ba:6d:e7:e3:c6:4a:a0:09:ac:0d:e8:9e:7f:51:c2:0d:c2:61:
1c:12:54:df:09:84:cb:3b:2c:96:e0:2b:e1:28:e9:5d:3a:6a:
92:6d:b1:1a:4f:93:2f:5a:c3:de:d4:ec:9d:6a:a2:43:6f:b9:
9f:58:ec:fc:8b:97:d4:e7:f9:3a:f8:ec:75:8a:03:2d:a1:30:
7d:51:24:c2:92:d8:dc:ad:e3:9a:40:3a:ae:da:fb:fa:65:cc:
05:57:a5:48:31:c0:2b:6a:9f:ac:a7:ce:25:1b:65:fe:18:85:
4c:3f:da:a0:58:4c:6a:b1:ce:ce:80:28:6f:3f:56:05:f1:c1:
71:08:27:1b:6a:1f:24:de:4d:00:4a:74:8e:e6:8f:59:08:2e:
46:74:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:19 2025 by rpki-client