Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: kznyJc8f571v1b2cGRKuSU4+rctBV/jDJLjJga6aaxc=
Subject key identifier: 83:F1:37:A5:D0:C9:3B:0B:1E:05:21:7A:C9:48:E7:EA:83:C2:6D:74
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 0199FCC6D19DD17A215944DECBF925BF4FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 13F9
Signing time: Sun 19 Oct 2025 14:01:52 +0000
Manifest this update: Sun 19 Oct 2025 14:01:52 +0000
Manifest next update: Mon 20 Oct 2025 14:01:52 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: GJAbGVSwpdBFx4v7eDXy/aUyZcH/UW1SOTxtc7+DaCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:d1:9d:d1:7a:21:59:44:de:cb:f9:25:bf:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Oct 19 14:01:52 2025 GMT
Not After : Oct 20 14:01:52 2025 GMT
Subject: CN=83f137a5d0c93b0b1e05217ac948e7ea83c26d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:51:af:39:65:ef:86:2a:55:b8:73:cc:b9:
ad:ec:d9:83:b0:58:a1:2f:24:71:80:6b:e9:8d:eb:
e2:9b:79:cc:69:a1:79:52:49:7d:a4:bc:c0:99:78:
20:11:f4:66:72:c5:df:37:9d:47:d8:aa:6f:4d:b5:
7f:0e:e7:28:70:61:9d:dd:fc:7d:c7:15:25:a5:18:
e6:be:9c:c1:7b:35:eb:33:9c:8e:06:9f:3f:df:5f:
32:7d:52:a9:94:54:dc:0c:38:ec:5c:64:14:0f:5a:
a6:71:fa:34:e9:7c:a5:ff:13:b9:61:b9:58:69:2a:
cd:c1:f4:4d:70:b5:f4:f0:bd:ce:1a:f8:89:2d:74:
d4:cb:35:ed:e4:18:7c:8b:ed:80:32:12:c8:44:3e:
de:ef:a9:7c:98:5a:bb:d2:72:e1:f8:1e:37:20:43:
25:e3:a7:c2:13:01:44:83:33:12:15:ec:44:53:9c:
ec:fa:06:29:55:d9:c2:c7:b9:74:a8:3d:de:fa:b1:
28:e2:6a:66:f3:34:11:02:1c:c2:99:ec:56:0a:47:
77:d0:5d:52:53:91:ef:be:7b:5a:34:25:61:71:10:
88:99:9b:f3:17:19:d6:6d:36:58:a3:30:d6:87:3e:
90:0d:8d:e1:98:e9:00:ab:ef:83:6b:23:f8:c9:01:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F1:37:A5:D0:C9:3B:0B:1E:05:21:7A:C9:48:E7:EA:83:C2:6D:74
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fa:7a:72:f7:3f:d4:c1:c4:34:bd:b5:87:d1:6d:da:17:a3:
13:73:88:43:a7:a4:2e:43:13:f3:af:57:05:85:d5:a4:ef:3c:
24:74:14:9d:6c:64:8e:24:eb:47:70:ab:56:e0:f6:be:14:f3:
94:16:e4:5f:63:ba:a5:28:25:1a:01:fd:69:c2:9c:bc:c9:8f:
3f:bb:a5:b4:18:49:42:2f:32:33:5f:b9:aa:10:14:7a:4a:72:
51:e7:94:11:81:c3:e5:55:dc:c2:1d:7e:3f:cc:b2:9a:f4:0b:
25:be:f4:f5:2b:6e:5d:8d:ad:6a:d0:5b:ff:f5:b2:eb:b7:dd:
30:f0:4c:7f:40:cd:d9:95:0f:8c:2c:76:25:ed:86:c7:e2:65:
51:6f:61:fc:b9:5b:89:03:0e:1d:a9:1b:0d:11:61:6d:a6:fe:
21:4e:c2:65:c0:44:38:cb:53:0a:61:61:45:3c:98:50:61:32:
5e:fc:9a:44:c3:ce:4b:4c:8b:14:fe:60:ab:81:0e:27:b3:95:
2c:58:76:e3:83:af:e9:d4:36:0f:90:63:94:a6:13:d5:b9:9f:
4b:f2:4d:ad:ac:3b:d3:67:66:fc:89:ce:85:73:d8:72:6f:2a:
6d:d3:e2:52:b3:cb:b8:1f:e9:8c:74:d1:2e:66:5d:f5:05:de:
ab:e8:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:19 2025 by rpki-client