Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json)
Hash identifier: nqMZhvjLAEsLwl7lBeSP0Daht95IJGgOCFG+8kgCx8w=
Subject key identifier: 73:0E:1F:5C:5F:FB:E4:16:05:60:9C:43:2E:69:B3:D1:FC:72:A6:BA
Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Certificate serial: 0199FC58D8FCF87437E25D607F45AC6CBD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
Manifest number: 04B0
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: G9PaWY+l6IOJj9oDtW6pQIGNLAmNs9iCpyZcick9ELM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d8:fc:f8:74:37:e2:5d:60:7f:45:ac:6c:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=730e1f5c5ffbe41605609c432e69b3d1fc72a6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:c0:68:b7:1b:51:e6:cd:19:1e:bb:ce:05:
42:b3:64:8c:eb:36:b0:6e:86:bc:98:e9:7f:d0:1a:
02:cd:61:25:e0:dc:05:f2:72:71:df:fb:00:db:01:
45:af:fc:32:c7:b5:ec:2c:45:60:ea:79:24:ce:c2:
32:31:a7:22:96:ae:9d:83:53:86:0b:8c:3b:24:1d:
3a:fb:d2:52:c0:4a:fa:5d:b0:7b:f7:69:2b:4d:17:
f4:6e:74:71:d9:42:a9:09:0c:05:44:78:ce:45:1c:
66:ef:e4:5e:eb:f1:f9:75:57:c2:f1:e9:3e:92:99:
60:37:37:a3:32:5b:34:ab:fe:87:86:1c:5b:76:05:
d1:bb:c9:0c:ba:d0:8d:8b:31:ee:d8:50:6d:61:f6:
99:11:fe:a1:59:19:20:d1:ff:5d:e1:bc:93:22:e8:
06:5a:c7:77:98:83:91:2d:b5:46:7f:d6:a9:6d:64:
98:82:3f:91:97:ea:17:32:b1:f4:10:38:ff:e7:56:
dd:1d:98:93:b9:97:80:48:01:62:d6:2d:f3:07:05:
34:97:a7:e6:f2:d7:9b:f1:2b:bd:a9:db:8e:4e:2d:
7f:60:d0:ea:09:e7:ba:7f:03:ee:1b:d9:b4:df:37:
d3:4f:0b:b6:59:4f:35:1f:da:ac:42:cd:fd:79:54:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:1F:5C:5F:FB:E4:16:05:60:9C:43:2E:69:B3:D1:FC:72:A6:BA
X509v3 Authority Key Identifier:
keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:2b:ee:5d:b4:3f:43:79:4a:09:7a:85:f8:60:e6:ea:60:
f4:a2:70:67:b9:c8:2e:98:82:09:03:54:0e:32:e9:75:07:fa:
34:2e:19:1b:60:c2:dd:94:51:8d:f8:7a:7b:2e:0f:cc:12:da:
87:db:c3:30:33:44:19:ca:93:13:3f:cb:30:0d:b8:60:47:6c:
30:3f:0c:21:71:11:79:02:68:b0:5b:2a:43:7b:3b:b5:f3:3e:
2f:1c:52:ca:d0:7b:60:8a:29:21:cb:9f:4d:d6:7d:f8:48:af:
6f:f1:30:e7:e6:16:5c:ad:5c:70:13:3e:3e:2a:5c:95:3d:78:
cf:06:b3:49:a9:b2:f3:c2:93:82:97:f0:c6:1e:84:e9:97:e9:
85:13:62:f1:17:bf:29:2e:41:de:e2:83:a2:2c:4b:22:d3:8f:
4b:00:ea:8d:7a:c6:3a:8b:ac:8f:2b:4c:ef:ba:8a:ec:a7:74:
8e:69:2e:7b:eb:83:16:da:bf:11:89:b1:62:e8:fb:98:ab:9e:
b4:95:d0:66:7a:a6:16:c2:e3:ec:9a:1d:ee:67:c5:3d:01:63:
96:f1:23:55:9f:a4:41:ae:18:d3:99:40:b0:03:8b:ef:29:a4:
76:fd:73:cc:3d:b4:99:d5:10:8e:f1:89:b8:26:0f:ad:54:a0:
3f:15:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:05 2025 by rpki-client