Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: ztCKmYRBjLdPYRdEGElWBqchQ/mZxWaYYZLyLBefBGM=
Subject key identifier: 03:EF:BF:6B:BF:56:A0:E6:4F:54:55:50:9D:D9:B2:3C:8E:BB:D8:DB
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 0199FBEA8D8E6FE04ED593C32C30CE7CBDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 09B4
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: 2fxbSecUKMfxPJWbNrtYzhCA8jM6gZoQEYyDsTw5v0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8d:8e:6f:e0:4e:d5:93:c3:2c:30:ce:7c:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=03efbf6bbf56a0e64f5455509dd9b23c8ebbd8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:58:bb:2c:22:19:38:2f:75:e2:12:98:1b:
31:82:1f:98:b8:93:00:7b:40:16:a2:86:8b:b9:9f:
54:24:48:48:3d:40:2e:3c:88:a5:d7:d3:05:76:35:
68:53:8a:fa:54:6f:66:1f:db:be:3f:69:f6:66:33:
ac:6e:56:e2:b6:09:02:37:19:52:a4:21:e6:e8:7a:
78:da:cb:1a:b0:f3:db:aa:ab:b8:69:83:96:6e:50:
d1:26:f1:cc:ab:eb:54:7f:57:6d:51:7d:73:92:47:
26:4a:92:59:d9:b3:1f:4d:e2:d9:a8:66:ea:58:a3:
6b:c7:e0:90:8d:a5:fd:50:fe:2b:20:d9:64:db:9e:
7d:f4:28:ce:ef:99:9f:f7:60:39:78:16:42:23:fb:
bf:62:ff:c0:87:a5:33:ec:77:29:d7:bb:e7:8e:4a:
4a:61:4b:6b:84:92:17:a8:20:a2:9b:96:07:20:2f:
74:a9:b1:79:99:4e:74:9e:76:d6:ba:5d:6f:b5:6b:
4a:9a:f1:03:16:28:78:bd:f2:a4:29:b8:e2:63:39:
aa:ad:a1:63:e0:0d:ec:76:fb:81:d5:63:e3:cd:b0:
3b:5b:a3:73:d6:5f:cd:2d:1f:d2:a2:60:02:73:8b:
2a:14:4b:cd:b8:74:f0:d6:7d:89:ba:5f:ad:1e:7c:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EF:BF:6B:BF:56:A0:E6:4F:54:55:50:9D:D9:B2:3C:8E:BB:D8:DB
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c9:93:81:aa:50:62:61:8a:28:4d:29:60:9f:f3:71:4b:8c:
bc:2e:92:e7:25:cb:fc:28:37:84:25:af:cf:e8:7a:0c:47:2d:
66:6a:3e:84:f3:7f:8c:e5:06:d3:fe:4f:16:52:bc:7f:55:5c:
80:dc:10:2e:10:6c:a2:ef:4c:5f:6a:a0:db:b4:90:a0:11:bc:
2d:10:34:8d:78:d7:a5:ee:75:05:97:ae:46:07:2b:14:01:34:
cd:8c:93:7e:a4:a0:db:7a:fa:0d:de:0d:e4:80:fa:a1:a7:7a:
5e:24:17:db:be:11:cb:c1:27:90:7f:2e:da:60:86:b0:1c:80:
0d:a8:29:4c:4b:cc:0e:1b:96:3b:5e:e1:a4:20:2b:57:e4:2c:
5b:bb:df:c6:12:69:68:f1:6e:1e:65:7a:12:ac:b2:7a:90:c1:
37:93:7d:97:67:bd:76:28:db:9c:a0:09:da:4a:a1:39:b3:0d:
06:a3:03:0e:d7:0c:e7:cd:98:ef:b0:39:9f:10:7e:90:ed:22:
32:2c:cf:2f:11:c1:b6:82:99:a8:fe:b0:ba:61:67:38:30:02:
42:e2:0a:af:c1:10:38:ef:58:1d:c6:65:1f:14:6f:ed:9d:a4:
62:bd:16:a9:4d:b6:a0:9d:a9:90:95:43:b4:dd:d9:74:0d:7e:
82:92:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:26 2025 by rpki-client