Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: tSzGKy9qV3u0Pin4+piOiwUJZcMVh0T8FiOJ6KeyAtg=
Subject key identifier: A1:EF:48:8C:E7:2B:60:95:0C:87:B2:BC:4A:25:51:B4:4D:C5:01:0A
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 0199FC8F2D2FA0868273383A0BDBF8F907DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 1528
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: kTLe/rH/SIwXh7bbKtDDrDLe6pRI5s3gNJ8PKGQMmag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2d:2f:a0:86:82:73:38:3a:0b:db:f8:f9:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=a1ef488ce72b60950c87b2bc4a2551b44dc5010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:79:30:d8:30:ba:90:3a:ce:fa:59:36:ae:d0:
6d:2f:bd:c6:91:10:32:3e:15:2b:97:ce:73:3a:b6:
c6:fc:84:33:ba:e1:d4:65:f8:9a:b5:bf:07:e6:cd:
2e:49:aa:9a:3a:d4:da:8b:5f:22:2f:9e:eb:ee:ff:
ec:08:0a:a1:9f:2a:3e:82:52:ed:75:25:35:48:d7:
5b:9f:48:7d:19:6d:4c:69:d6:2a:3d:4f:d5:22:13:
4f:2f:f5:ad:d0:c6:61:ae:ec:f6:58:d7:28:a2:9f:
7a:33:ba:32:7a:5c:41:6f:59:a4:95:58:68:4a:29:
45:1f:51:b4:80:e0:c1:f8:15:2a:4d:3f:72:82:75:
d7:a8:59:b0:db:d6:59:78:3f:db:96:22:36:5d:3e:
ac:b9:b8:03:92:39:09:e5:9a:69:e4:ac:63:1a:4b:
a5:80:d0:bb:20:cd:61:de:6a:bc:49:ec:7e:87:fa:
85:ac:d1:26:f4:58:e4:d8:58:bd:e6:64:f2:0e:43:
60:7a:f3:32:d8:5c:82:03:5c:3f:01:1f:27:95:59:
2c:3b:32:f8:6c:62:97:3b:16:a6:72:d9:a7:1f:fd:
c3:5d:cc:6e:ba:4d:fc:42:6e:2f:21:f5:68:cd:e7:
04:4c:f0:77:db:11:94:df:16:e4:c9:5f:53:75:49:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:48:8C:E7:2B:60:95:0C:87:B2:BC:4A:25:51:B4:4D:C5:01:0A
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:52:d7:41:3b:fb:31:46:5c:1d:da:51:46:36:49:56:6b:82:
30:67:c3:e9:38:c2:cc:ec:a1:ea:15:a2:52:33:14:2d:aa:cc:
85:4a:4d:e5:13:67:54:96:f6:c9:49:d3:8f:36:aa:26:02:70:
68:75:b7:84:a6:6a:83:6e:bd:b6:6e:94:39:9e:32:2d:fa:e7:
a4:ef:b0:fd:80:dc:cf:79:aa:07:b3:36:71:1a:3f:33:9d:1e:
6e:2d:43:99:c3:14:a5:25:6e:a2:56:97:70:46:c0:79:cb:fb:
28:fd:53:9b:5d:eb:91:50:a9:55:f7:40:78:98:17:46:38:b6:
15:b6:e0:05:40:7f:cc:6d:05:01:91:f5:7f:e9:35:42:67:71:
3c:b6:44:04:f7:b1:eb:96:39:aa:fe:54:00:58:2d:4d:df:82:
22:e2:25:4d:e1:e5:cd:a5:59:0f:de:cd:e1:cb:af:10:0b:43:
07:50:fe:ec:45:ce:25:e8:ae:e7:40:25:57:16:c3:33:13:34:
06:dc:01:db:4d:46:ed:61:26:7b:53:fb:c4:6b:7d:e1:3d:b2:
c0:87:86:e2:93:2e:7d:ea:78:d5:a6:bf:bf:80:c6:a9:d7:23:
71:7d:e6:db:e8:35:3d:4d:6e:6d:18:4c:63:36:1f:80:4d:32:
b0:b4:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:12 2025 by rpki-client