Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json)
Hash identifier: TCOk1hQLHacwxX0o/Nd9L2HCFPepoa3MCAhxK+Ijv9Q=
Subject key identifier: BC:D7:7A:36:00:4C:0A:A2:79:F9:FF:BE:77:47:8A:87:DA:4C:16:B8
Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Certificate serial: 0199FBEB3EFD44D4E158FC336F8D098AAE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: R+39P0au2ZeNUJ+i3sascBTEzqc/kGKP//a4RXx06Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3e:fd:44:d4:e1:58:fc:33:6f:8d:09:8a:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=bcd77a36004c0aa279f9ffbe77478a87da4c16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:06:bb:53:d5:d1:80:0f:d0:f7:2e:6c:78:
24:a1:aa:64:69:6f:e4:ce:2f:5e:42:3e:9b:c0:35:
e9:62:74:6a:ea:79:fb:71:6a:a5:a8:ee:ce:59:69:
5a:e2:0a:c0:f2:1b:ff:bc:29:12:26:ef:e1:4e:8c:
e4:59:d2:c4:a9:c4:8f:25:bb:d1:e5:dd:18:cd:71:
f6:cf:0e:2c:7e:7f:a8:a9:98:b0:da:04:50:1f:67:
18:04:c5:7e:c4:1e:62:3d:ed:b5:ef:0d:b0:b9:90:
fd:0d:de:26:2b:4e:c4:b8:23:be:26:f9:34:f3:cb:
5e:ad:cb:a9:1a:7e:d6:81:73:35:4c:b7:69:ff:47:
a5:10:8a:69:91:1e:67:f2:1e:49:ca:ae:fc:8c:26:
14:ad:fa:72:2a:38:9a:f5:fa:99:87:64:80:48:7a:
72:de:c9:ef:1f:e4:d2:25:41:c2:dc:0f:da:57:79:
e8:3d:5f:32:22:a4:8d:1e:26:fa:df:ea:a0:73:79:
d4:ce:89:79:6a:0f:f5:2c:b1:b2:4d:b3:81:31:00:
4d:10:fd:61:78:e4:b1:31:e9:5d:5a:4c:ad:ea:6e:
89:a4:b8:59:a1:9f:8b:ec:99:b5:d6:6c:42:75:2d:
0f:a1:06:fc:90:b8:22:b1:30:13:b1:de:c3:64:69:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:7A:36:00:4C:0A:A2:79:F9:FF:BE:77:47:8A:87:DA:4C:16:B8
X509v3 Authority Key Identifier:
keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bc:d7:76:ac:65:dc:56:0a:72:e8:0e:da:85:3b:9d:f6:83:
79:d5:ad:93:ee:8a:e8:5a:51:6e:e2:bd:43:80:4e:c8:c0:0a:
d8:e5:53:36:ce:18:77:1f:ca:42:11:54:2d:f7:25:3a:81:63:
65:ad:c7:87:8d:a9:46:37:b6:af:26:23:64:07:f4:76:bd:99:
4b:12:f7:f8:3d:cf:f8:c6:a2:d2:94:4a:be:c7:d5:aa:cd:e9:
f9:07:df:c2:e8:42:5a:1a:b4:03:23:ab:78:31:8b:af:0c:45:
d1:e8:ff:52:9e:7a:cf:7a:c7:fb:42:f6:ce:ef:07:60:56:10:
cf:dd:ad:61:53:6a:d9:74:cf:a2:83:a2:3c:90:8c:6f:32:b0:
1b:86:98:26:67:3d:34:39:7a:77:a0:8e:90:8e:89:60:33:8a:
55:f4:cc:81:2e:c7:fe:d3:f6:84:85:88:01:c7:a6:c5:e2:4a:
94:00:04:6b:19:90:c1:0a:0c:78:25:c1:52:36:b6:58:06:c8:
7b:a7:d5:2f:10:e0:9d:c3:e1:12:08:d2:ea:e3:73:24:b0:ba:
63:2c:a8:dd:1b:0f:74:c5:29:dc:c3:ba:a5:14:ee:39:fc:1e:
23:c2:b4:45:72:04:46:2e:40:64:88:4a:96:df:35:0b:fa:c3:
97:6e:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:21 2025 by rpki-client