Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json)
Hash identifier: rTHdpf/JvfGsikSSzGPH/uXDHZGzQTllUgY5AjZogOI=
Subject key identifier: DB:BB:AB:5E:3F:30:33:5E:85:79:0A:53:4A:3B:36:00:F4:88:F0:51
Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e
Certificate serial: 0199FC5918CC86C008E374D68A37282A2C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 12:02:01 +0000
Manifest this update: Sun 19 Oct 2025 12:02:01 +0000
Manifest next update: Mon 20 Oct 2025 12:02:01 +0000
Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: d5Tp9bmnUW8M6g4YmKsSCe9J37hQdBIFOdM7ax5codo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:18:cc:86:c0:08:e3:74:d6:8a:37:28:2a:2c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e
Validity
Not Before: Oct 19 12:02:01 2025 GMT
Not After : Oct 20 12:02:01 2025 GMT
Subject: CN=dbbbab5e3f30335e85790a534a3b3600f488f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:67:c4:6f:1f:24:a4:0f:f2:b2:9a:63:6b:
93:78:c9:f4:78:8b:36:ee:c5:3c:5c:fa:66:3c:c7:
f2:29:75:0f:ca:d8:86:0f:48:df:07:95:b4:64:03:
2b:ea:f2:3c:e5:76:30:30:e9:6b:ab:19:aa:a1:0e:
5c:df:0a:10:f2:7e:22:48:78:d6:47:07:1e:d8:56:
0b:03:0c:07:88:16:90:b2:81:53:e4:8e:26:80:f3:
5e:8d:82:40:88:4c:ca:be:8e:04:65:89:ee:ba:39:
3c:ba:8c:73:f9:f2:82:12:08:19:c9:ec:39:4d:17:
e3:d5:ed:0b:f7:82:e3:cc:7b:48:0a:cd:ab:d9:ca:
b7:5b:1d:f9:a2:9c:4a:54:18:a3:40:9a:b1:79:2c:
65:11:97:20:2f:94:f6:68:87:79:24:9f:e6:cc:8c:
f5:6f:45:09:1e:ee:86:5c:12:08:7d:40:60:d9:3a:
b7:a4:9f:bf:f9:b8:e0:42:dc:a6:7f:1f:d0:2e:e2:
72:28:b7:f6:ad:6b:ae:c4:51:80:ab:5f:3c:db:76:
1a:04:77:4d:2f:62:82:b9:fd:ba:32:88:74:51:e0:
eb:65:b5:1c:03:b0:4e:84:ee:ba:84:41:56:4b:54:
d9:de:ce:0a:ff:07:79:be:f5:2a:b8:c9:5d:d2:f0:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:AB:5E:3F:30:33:5E:85:79:0A:53:4A:3B:36:00:F4:88:F0:51
X509v3 Authority Key Identifier:
keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:61:d7:0b:56:8c:76:f1:6a:19:bf:37:84:ec:53:db:6c:88:
da:f9:23:33:75:a4:0e:a7:41:0a:f6:3e:c2:06:eb:db:bb:c9:
80:52:fe:3d:67:a7:b0:32:10:4c:b1:f5:31:d5:81:c5:53:04:
c5:fb:fa:4c:05:bb:b6:b4:0c:8d:6a:ce:78:3b:cf:72:a9:82:
7d:0e:1b:d7:eb:ec:76:eb:b0:8b:34:d0:1d:2c:db:43:93:d9:
2f:fb:0d:c0:b7:7f:80:ef:d9:e5:33:e1:dd:e3:16:09:83:a0:
8a:0e:11:02:66:41:1b:35:bb:e8:a5:a1:a3:4d:4f:d0:29:59:
96:d4:67:e6:bc:e4:f2:6e:b4:d4:3c:76:20:38:c1:db:cf:87:
a3:8f:a2:42:ca:72:93:de:d9:57:58:04:b3:80:5d:3f:35:15:
4f:5f:9f:3e:5a:68:c9:74:75:d7:39:78:ab:d9:ec:97:3b:7d:
46:3a:34:72:ad:5d:bf:62:87:1e:05:ef:9a:99:a9:1a:f5:1f:
b4:a9:f7:a1:14:dc:41:97:2b:c0:7c:17:20:02:39:61:be:d0:
6e:1d:e6:60:41:92:ba:e0:55:15:41:05:2e:9d:aa:24:a1:65:
5c:11:cf:97:5a:ee:46:e6:a2:c0:ee:8b:44:0f:3f:df:34:24:
3d:e2:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:57 2025 by rpki-client