Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: hylmQmJYFKpkOXTSjv3ag0HyF2TGo2hbH7H0Mx6cPeM=
Subject key identifier: 29:10:43:67:21:AA:E2:6D:EE:61:0A:EC:50:84:B5:E0:E3:52:44:36
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 0199FBEA89292A5A328E8C1DF6447D7F94B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: +kaUDYFim+6nEs/9lv0yPgn+s3wPoh/sjal4hTOReBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:89:29:2a:5a:32:8e:8c:1d:f6:44:7d:7f:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=2910436721aae26dee610aec5084b5e0e3524436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:2f:83:61:a1:ea:3e:67:dd:c1:aa:f1:8c:
ea:77:da:a8:4f:b2:e9:98:c2:61:49:2e:39:d2:ba:
eb:e8:fe:b1:95:b1:1c:6b:2e:65:1e:d5:1b:71:e0:
5b:01:fb:05:14:c2:1c:6e:61:ae:04:d2:c0:09:fe:
7c:21:39:b0:8f:41:92:ec:80:18:e5:d2:90:1f:79:
b7:f3:84:81:7f:b6:f1:62:bf:00:34:5b:e5:d0:44:
e1:47:77:f1:d1:0c:d1:c8:20:07:fa:6f:34:c7:8d:
ec:46:bf:fd:aa:46:d6:ab:38:6b:2f:8b:a2:77:86:
97:2f:0e:91:96:fa:11:09:47:4c:71:d3:57:ae:6e:
c8:20:45:8d:00:55:72:5b:c4:d0:07:98:64:4c:df:
3a:46:93:a3:1c:9c:20:fc:ff:b2:34:9c:a7:7c:d5:
c9:5b:14:8a:4e:47:14:b4:4b:0c:e1:94:23:fb:92:
00:2f:a3:da:d7:24:dd:fc:f2:23:55:02:71:89:81:
ba:93:9e:96:7e:7d:0a:28:67:5f:84:60:61:e7:0c:
27:31:4a:26:63:32:03:f3:5c:fc:3c:04:1f:1f:76:
19:16:4a:4c:cf:9f:c8:82:00:c1:81:05:7d:d6:92:
52:7a:d9:f4:d1:47:12:84:bf:4f:68:81:15:f9:79:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:10:43:67:21:AA:E2:6D:EE:61:0A:EC:50:84:B5:E0:E3:52:44:36
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:3e:d2:55:ba:86:e6:b4:cd:32:32:b0:53:e5:14:21:6c:
32:48:f9:cd:7b:8a:b5:1c:24:74:80:b2:15:e9:b9:87:fd:d8:
c2:a1:78:38:35:46:08:dd:d3:c3:ea:71:f3:76:36:b7:52:3c:
ad:83:15:4f:f3:e5:ee:10:1a:68:9f:cc:57:8b:45:2c:08:6d:
7a:15:15:b3:a7:39:7b:2b:80:f3:35:34:3c:ef:c8:1a:86:a7:
50:28:90:6d:b1:6e:a5:ab:be:4e:c4:71:49:79:47:04:50:c8:
56:8b:8b:9d:57:78:1d:25:b6:08:16:19:47:0f:2f:63:35:fe:
7d:d8:a8:a1:a9:ee:e3:30:49:d4:f9:d2:8a:a3:7f:39:5f:91:
78:6e:72:e7:22:2c:23:92:6f:a6:c5:13:20:85:37:b0:15:2e:
f3:23:f7:46:37:20:51:ac:d4:ae:c2:29:c5:ed:de:cd:19:29:
38:c6:6a:32:2e:5a:7d:a5:33:99:89:ce:00:ce:31:2f:33:ab:
b0:3f:58:39:3b:8d:69:7d:c0:a6:bc:ad:ad:ca:e0:fb:f8:3c:
ad:01:a9:93:70:94:79:c5:5f:98:c3:5f:16:20:2e:0e:22:f0:
b2:e0:7a:63:41:f8:ac:93:ca:6c:90:7c:5d:6a:8b:23:78:03:
c0:1a:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:47 2025 by rpki-client