Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: B5OpPvDh37EWxlJrzeipHFpuKnJrmJzaHqgwKktJY/s=
Subject key identifier: 9F:00:4E:73:C6:20:54:C9:96:F6:3E:DD:C5:20:59:56:16:B5:CF:E9
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 0199FBEA734D4942952868EECE0E46EE9556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 07E9
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: 01jOFsBFgc5rQQGziy6mnEExC6RkWF6jnXA4lv2PeMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:73:4d:49:42:95:28:68:ee:ce:0e:46:ee:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=9f004e73c62054c996f63eddc520595616b5cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:5d:01:90:47:48:3c:6b:fe:a8:86:22:62:
11:ba:71:81:ed:56:5d:20:d5:39:92:17:51:d4:78:
44:d8:35:61:90:a5:20:76:a8:31:c7:7d:21:3b:e5:
15:1e:f2:89:64:97:97:8c:15:a1:5d:a7:b3:ff:44:
fb:da:d9:67:e6:cc:4d:7e:4a:e7:64:e3:dc:0f:6c:
9d:88:20:fd:84:c5:83:da:17:b3:3b:9a:68:2f:1d:
ea:8b:78:fd:9a:35:d1:f6:41:c9:36:ce:90:65:7f:
1b:b0:0e:17:e3:c7:20:6c:dd:74:ef:a1:29:10:52:
a4:c5:b8:ec:bf:a7:0b:9d:fb:e0:99:c3:6a:33:f0:
df:ca:f3:b0:7e:d1:e3:10:52:ed:ff:2e:f4:68:61:
32:85:f2:5f:21:63:e6:51:82:6a:1f:fe:7e:bf:cc:
82:da:94:4d:10:56:4b:f3:be:de:d5:6d:90:df:c7:
25:4f:2e:fa:67:c9:30:d6:76:80:b5:8e:b3:f2:77:
ef:5b:74:46:b6:58:ab:fb:93:79:b5:6d:00:d0:ee:
38:9a:91:e2:81:d3:b8:72:c5:90:28:16:2d:77:ef:
cf:ee:4d:5a:14:7e:7e:05:3f:87:0e:05:fa:46:5e:
f2:c4:ac:3f:93:16:b3:e9:6c:fc:b2:8e:8f:89:1c:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:00:4E:73:C6:20:54:C9:96:F6:3E:DD:C5:20:59:56:16:B5:CF:E9
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:1f:b5:7b:36:66:fc:54:9f:5c:8c:d8:bf:89:39:de:ab:
2a:bf:ba:12:df:76:05:af:e4:47:e4:6f:eb:f5:5e:26:43:69:
58:c8:d1:4f:28:08:4e:08:59:ad:7f:6d:94:32:59:a6:2f:41:
0d:18:9d:e8:1e:1a:71:f7:88:70:3d:43:18:e3:2e:aa:b0:1d:
0b:c3:6f:d6:7c:f6:b5:e5:0d:0a:3c:c3:d2:e8:12:53:9b:7c:
bc:82:1e:6c:96:8b:88:58:79:a2:af:93:fc:56:03:0b:54:52:
59:6a:f8:3e:7d:b4:02:6c:25:f0:9f:f3:41:82:11:fa:7a:29:
54:b1:ce:f3:e2:f9:ff:e8:ea:cd:5a:45:40:82:6e:9a:6d:b3:
e0:06:68:94:e9:e7:10:5d:58:1e:6d:2e:53:2f:d9:6d:ce:6d:
42:75:89:5d:f1:75:81:d7:ea:07:62:61:36:49:9b:e8:14:57:
f3:3f:20:8b:7b:9b:d5:ec:e3:6a:69:c8:bd:7b:f0:27:1e:57:
71:26:cf:84:e8:3c:d6:e3:f0:5e:3c:38:75:e9:33:c2:b4:74:
b5:b0:7e:0f:3d:61:7b:75:84:d9:cd:58:16:91:33:23:29:d3:
51:83:23:8f:45:0a:df:b8:03:0b:40:8c:f6:ab:a4:0e:b2:d4:
c5:6c:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:37 2025 by rpki-client