Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: +nh1rNLX+S/gBgFQe4+8+H7FjLP/grwJLnpR80IGd4M=
Subject key identifier: E5:E9:B1:E9:DE:EF:AC:96:75:1C:84:B0:BB:DD:EC:EA:B1:1E:E5:FA
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 0199FDDA592F4732EA17F7FBF2AF37243DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:49 +0000
Manifest this update: Sun 19 Oct 2025 19:02:49 +0000
Manifest next update: Mon 20 Oct 2025 19:02:49 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: xdYtAMNJ8SBZDlxQGBHJVM8ECKRsXcqROQdRoTpfcG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:59:2f:47:32:ea:17:f7:fb:f2:af:37:24:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Oct 19 19:02:49 2025 GMT
Not After : Oct 20 19:02:49 2025 GMT
Subject: CN=e5e9b1e9deefac96751c84b0bbddeceab11ee5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:5a:86:92:11:95:5a:28:8b:b1:85:87:a1:
c3:df:f4:f2:a3:a8:7c:e8:fa:9f:83:2e:77:bd:de:
32:0f:4d:a0:24:16:2a:f7:e3:e5:e1:ed:f1:5e:6b:
54:7f:e3:37:f7:d9:be:fc:36:bd:9f:1e:e7:cc:16:
e8:3a:fa:59:f9:d0:07:ec:51:44:cf:23:9c:e9:a6:
ac:29:e2:18:41:9b:12:48:f6:9d:5e:b1:93:d1:4a:
d8:49:e2:14:4f:95:23:1e:e5:b9:2c:cd:9d:1d:fd:
34:b4:14:71:59:25:e0:0b:dc:6f:cf:84:1b:89:9d:
1b:d1:46:f5:ce:a8:e7:98:9a:99:39:9b:45:f2:bd:
50:2e:f9:f4:da:0c:01:a8:e7:c6:48:71:51:7c:7f:
a4:7f:33:18:a1:3a:c9:f3:6f:68:5e:d8:1b:d6:e2:
9f:6c:59:57:06:77:83:e3:70:51:bf:3d:2b:14:cb:
8a:08:84:d3:68:a8:a6:a4:1b:fc:28:d7:fc:29:0a:
8e:6b:0b:ba:b1:ab:ee:1e:dc:dc:3f:79:c4:f3:11:
41:ff:b7:91:85:53:89:ec:e6:55:4e:0d:3d:1f:de:
98:fb:6d:1c:c0:44:4b:83:99:d0:28:24:5f:4e:01:
93:bc:3e:07:12:ac:37:ea:d1:c9:1d:f7:8c:16:88:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:B1:E9:DE:EF:AC:96:75:1C:84:B0:BB:DD:EC:EA:B1:1E:E5:FA
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ed:7e:c4:2c:8c:88:fe:a6:0a:06:5b:80:d9:23:a3:5c:78:
99:eb:ad:8a:fd:76:59:ad:92:91:1c:5c:8a:e0:aa:1f:e9:b3:
25:5b:f0:06:05:67:6e:3d:48:bb:33:79:10:92:bd:a1:1c:9e:
69:5b:a5:fc:34:78:fb:ec:a5:e9:53:ab:f4:f2:3b:c9:04:82:
69:f0:ee:d1:12:ef:b9:ab:ae:0c:32:ed:86:ec:a2:0a:0d:55:
5c:7e:1e:a9:08:c0:88:ef:94:b1:8d:ab:5d:d6:b3:9f:49:87:
1e:bb:11:91:67:2d:5a:b1:77:68:9f:22:d5:66:79:81:13:61:
a1:51:97:a2:cf:d7:7a:99:9a:09:70:34:28:55:d8:6d:ea:31:
5b:a2:72:65:c0:e3:a6:e7:e7:d0:0f:1e:12:f8:2e:7a:79:0f:
bc:74:8b:80:e1:aa:b8:bf:d1:a8:55:73:3a:21:39:80:17:4d:
a2:54:56:78:02:27:f0:d5:87:6e:4e:18:e0:12:45:2c:5d:69:
12:e6:20:e3:39:60:69:83:61:e4:e2:fa:a5:52:d2:f9:e2:97:
42:3b:fe:d9:39:b6:4b:32:8d:ce:b5:f8:34:9f:85:2f:7a:2c:
c6:ba:63:63:a6:da:4a:50:4b:ac:34:ef:35:57:0d:ae:b4:bd:
7d:a0:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:11 2025 by rpki-client