
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: tZpMB5iEJ6QTRAJKwmmJKLqfysJmGneSr3gWA8gcNKs=
Subject key identifier: F3:C1:B4:C1:8D:12:0F:01:9B:21:60:65:CD:BA:A4:FA:5E:06:9E:63
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 0199FBEC1ED043A209E9483B802628BDCEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 08C2
Signing time: Sun 19 Oct 2025 10:02:59 +0000
Manifest this update: Sun 19 Oct 2025 10:02:59 +0000
Manifest next update: Mon 20 Oct 2025 10:02:59 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: C0OOC8Kt6CpH4TqnxXHAqcNuy9m5e7QZMKXOBuLSwcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1e:d0:43:a2:09:e9:48:3b:80:26:28:bd:ce:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Oct 19 10:02:59 2025 GMT
Not After : Oct 20 10:02:59 2025 GMT
Subject: CN=f3c1b4c18d120f019b216065cdbaa4fa5e069e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:74:de:9f:7e:fe:3c:46:64:59:4c:4b:76:
3a:af:79:21:07:aa:1e:f4:72:05:68:75:5d:1b:29:
52:5e:62:e7:1d:ac:9d:5a:71:11:4b:89:6e:e3:f6:
f4:2b:be:87:4a:48:29:92:c5:3c:cb:d1:e1:83:a7:
11:0c:5f:6f:d9:d4:a8:26:25:75:d1:5c:a8:a8:c2:
d8:a4:7b:03:e4:3a:ee:5b:78:54:e8:22:96:35:d3:
6d:52:a9:b5:ea:61:3c:39:62:36:7c:f8:a3:44:aa:
73:e4:9f:d6:5b:fd:85:fe:7a:af:3c:f4:58:56:d1:
29:95:ec:7a:13:22:44:72:86:17:99:91:44:52:09:
f5:c3:73:98:9a:e8:31:3e:0d:3a:ce:7e:79:a0:6f:
48:7c:e6:a3:e2:ca:c7:84:ae:87:71:f7:8a:d8:55:
2b:5a:29:e8:49:a1:c4:fc:c1:16:bd:4d:da:04:25:
a2:76:79:5f:8f:e9:a0:c1:c6:0c:4b:dd:bc:be:b6:
27:71:e0:73:ca:04:aa:88:97:ce:b8:2a:8e:c3:e5:
a9:41:89:7a:ea:16:0f:e8:b6:d0:a3:bd:40:5e:27:
aa:f8:bc:24:26:85:0b:39:85:41:f3:8e:cb:e2:a5:
5d:a3:26:d0:a6:b0:5b:cb:39:7e:77:19:6f:9e:a5:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:B4:C1:8D:12:0F:01:9B:21:60:65:CD:BA:A4:FA:5E:06:9E:63
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c7:09:99:68:77:c7:34:68:e1:ea:d6:7e:a2:9d:4a:5a:34:
93:10:60:ed:62:02:8e:3e:9a:a8:ee:b1:8c:62:4c:66:c4:da:
5a:cc:02:2f:f1:64:6c:24:a1:3f:6c:25:25:96:05:f5:90:15:
d7:2c:1a:d8:40:9d:91:ff:07:9b:df:76:86:65:3e:b7:87:ca:
f7:a2:65:97:7a:57:bc:13:14:82:b5:fc:0a:aa:1a:ec:a9:cc:
11:c4:7d:d7:ab:5e:cc:5f:3b:01:a6:3c:15:23:74:85:3d:a6:
a9:0c:08:9f:a5:1b:6b:fc:22:19:3f:25:2f:01:07:60:43:f6:
45:b7:1f:7e:78:e5:5e:50:ba:10:db:e1:cf:52:4d:c8:d0:11:
07:19:00:88:fc:0d:95:ed:ea:96:a4:26:12:7a:26:78:08:d3:
24:f0:ac:ff:f6:37:85:86:c7:81:1b:c9:a4:fd:e1:47:52:6d:
58:80:73:94:1f:2d:2b:99:83:63:ff:78:0b:77:8f:4c:54:0c:
9a:60:50:2e:fb:3d:72:af:4a:57:ea:3d:09:fa:f7:ca:4c:25:
f9:b1:9b:40:5e:06:0c:90:85:9a:16:f2:91:86:3a:cd:dc:20:
fd:c6:0e:86:16:f3:8f:0d:bf:8b:29:44:6c:c7:78:96:2e:26:
75:de:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:44 2025 by rpki-client