Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: h01dD7vXzG2tbG1epj71RzV0AcxAHnEYCGap1uEr8Ys=
Subject key identifier: FA:BB:84:CF:F8:70:2C:21:6A:9E:03:3B:DF:50:85:44:55:AE:D4:81
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 0199FFC7C363F625EEBBAAEF822DD0071C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 08DF
Signing time: Mon 20 Oct 2025 04:01:45 +0000
Manifest this update: Mon 20 Oct 2025 04:01:45 +0000
Manifest next update: Tue 21 Oct 2025 04:01:45 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: R+9KvN9UFKoeVtuA+xFMB8RMr8oFAYV0dNOaUkWcfGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:c3:63:f6:25:ee:bb:aa:ef:82:2d:d0:07:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Oct 21 04:01:45 2025 GMT
Subject: CN=fabb84cff8702c216a9e033bdf50854455aed481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:61:21:e6:fc:90:12:a8:fb:50:0a:74:3e:
32:23:76:14:95:be:45:fd:41:15:e4:91:ee:10:7d:
fd:6e:6a:5b:69:ab:b3:93:4f:81:f2:9b:5e:ae:9f:
6b:45:d6:01:d0:5f:aa:c2:09:d3:16:89:67:84:6a:
bb:4b:c2:19:46:31:de:13:e1:1f:9d:9f:4b:8e:a3:
8d:36:ff:be:dd:de:59:90:f2:ce:1c:76:69:50:6b:
14:ac:a9:a2:ba:7e:07:9c:44:c8:35:4c:dd:58:ba:
d7:9b:ff:b4:f4:43:01:45:a2:d7:22:4e:e8:8a:17:
be:14:75:5e:90:b5:77:77:99:a7:9c:09:8b:d2:50:
cb:61:bc:77:de:81:d6:eb:ed:de:61:86:c8:35:34:
24:55:9e:66:f6:2d:57:fa:8c:24:6e:e8:7f:fd:af:
42:b5:17:5e:df:98:a6:58:28:36:c8:dc:f3:d0:b6:
35:27:e4:68:71:2c:94:f7:e4:0d:ad:c6:09:5b:32:
45:2c:96:d8:89:42:f4:2f:fd:e5:52:cf:cd:d9:91:
0c:d8:9e:db:ef:74:43:b9:6e:e6:de:16:6c:e3:75:
5a:7d:bb:bf:1f:05:c9:3c:21:f6:4f:08:0a:26:9e:
d5:84:c2:60:ba:c1:5b:2e:01:f8:60:81:1f:13:06:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BB:84:CF:F8:70:2C:21:6A:9E:03:3B:DF:50:85:44:55:AE:D4:81
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:96:b1:3e:5c:f3:68:17:b8:67:37:1c:b1:46:76:81:ae:
22:6c:2f:5b:8e:7a:2b:ec:6c:eb:54:be:ee:c8:b9:0c:73:7f:
d9:56:aa:21:02:9e:78:9d:20:c5:fd:f4:2f:55:48:28:df:35:
22:a3:35:87:b4:54:75:e1:60:bc:00:99:fa:a4:0f:08:24:fb:
bd:05:2b:7c:32:76:34:78:e6:f6:e4:d0:fe:fd:83:79:ff:c8:
72:1d:a5:35:72:da:c3:bf:59:e6:e8:bd:5f:d3:3b:df:d2:e9:
32:b3:f9:bb:c5:3a:79:b5:2f:8b:2d:07:78:4b:2e:c7:0c:a7:
c4:39:f0:7d:d2:2a:8c:fa:c3:fc:79:d7:c8:50:38:03:85:d1:
5c:e8:33:f7:28:3d:e1:d5:b7:4d:8d:b1:dc:94:0a:4a:4b:13:
34:19:44:a5:a8:d2:0c:56:1c:dc:63:2f:14:ab:f2:82:a8:8b:
0b:54:71:81:78:f7:84:45:5c:71:61:1c:24:d3:2a:28:25:c7:
e0:ac:a1:52:36:ee:85:3f:d7:26:f7:3f:f8:b4:08:c7:18:62:
a7:c5:a0:8c:f5:34:d1:5b:ae:4e:89:4b:f4:5d:99:f1:3c:34:
cf:67:7a:c7:44:d3:c9:28:07:4d:9d:f2:08:1d:ce:2d:8b:33:
2b:17:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:21 2025 by rpki-client