Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: q5YlPV1zy7zFjAy55CRPIuzF7/TmX1ikEgyGvSyIp1o=
Subject key identifier: 6D:FC:AC:75:F6:1B:B3:A9:84:6D:D3:53:85:6A:D8:BC:E6:A9:D8:F9
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 0199FBEBDB9D18B2188FA3FA85EAEC3B9B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 09BB
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: Xc1Jsw2+d228vZDCStl7B3OJE3NiszHMHytG1y5RMUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:db:9d:18:b2:18:8f:a3:fa:85:ea:ec:3b:9b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=6dfcac75f61bb3a9846dd353856ad8bce6a9d8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:b3:27:2c:eb:78:17:91:61:47:4c:3a:56:
6d:5f:41:5e:f3:32:c7:ae:0f:0f:0b:4a:c6:40:fd:
99:c6:45:d0:0f:6a:f7:29:d3:95:18:d5:2c:c0:07:
5c:de:91:23:a8:a3:f7:6e:2c:35:4e:07:d4:af:1f:
41:c1:2f:d5:60:73:22:60:15:b5:9b:82:86:89:2e:
53:e8:02:c9:e9:ce:06:90:fc:6c:e2:26:2f:97:c4:
48:25:ec:e6:dc:cd:56:f6:ff:5c:aa:ff:4c:c4:40:
d2:23:6d:20:6d:32:fe:d5:7c:14:d4:cb:fc:b9:77:
5c:fe:a3:0c:da:f7:58:ab:4d:25:1b:2c:03:83:83:
c2:a6:4f:98:22:9e:1c:d2:51:dd:92:9b:06:67:26:
55:25:7e:a7:63:dc:91:1d:cf:8d:f2:5f:8b:99:51:
63:3a:13:91:19:89:15:dd:03:63:48:f9:57:08:fc:
15:10:66:c3:bc:5f:c0:91:09:0e:de:c4:21:1b:e6:
e7:29:c2:44:18:7a:86:ec:2d:c4:dd:92:9d:59:43:
eb:fc:f5:9f:7e:1e:ed:24:f5:f3:dc:5e:89:ab:ef:
9e:d0:01:06:2d:5a:f2:40:91:ae:5e:20:e3:88:41:
6b:94:f1:0c:91:1f:27:31:31:05:6e:83:e0:24:12:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FC:AC:75:F6:1B:B3:A9:84:6D:D3:53:85:6A:D8:BC:E6:A9:D8:F9
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:71:05:56:fa:bb:c4:a0:f2:68:9e:ea:3e:2e:bc:5e:0f:
a1:bd:0f:50:b5:27:fb:40:86:d3:60:54:35:87:73:ba:bc:6b:
12:31:b9:13:01:ef:db:71:5e:ee:7d:b8:2d:9b:a1:2e:3e:4b:
49:5f:32:39:02:c0:7f:b4:14:94:5b:c0:ca:05:b0:25:2d:c7:
4d:f0:6c:e3:63:39:06:7f:73:d1:79:1f:c2:51:99:02:70:a9:
80:91:75:0f:a0:88:28:74:a3:05:31:b2:3f:48:d7:e1:2e:4c:
33:4d:10:6a:a6:ce:aa:ed:49:b5:ec:d4:3f:94:eb:1c:0d:8e:
89:77:6d:e0:7a:07:8a:aa:92:5b:9a:88:92:58:e9:2a:e1:66:
69:88:f5:61:b4:38:8e:a4:76:6d:ea:0c:7c:70:9c:77:9f:52:
22:2a:02:cf:2d:42:5e:36:50:aa:66:3b:78:6b:f4:ba:ca:0f:
fa:30:2b:dd:c6:db:d0:95:ba:b2:9b:a8:50:f1:04:15:e9:87:
d7:82:9a:82:23:90:28:20:cb:d0:72:0a:c0:b0:77:f7:c7:97:
22:91:b9:a6:56:e3:5a:c0:a9:58:5a:82:cd:25:2a:2b:05:a0:
3b:ce:25:17:ad:fa:f5:fd:74:27:35:9a:43:8f:5c:61:54:75:
d2:e6:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client