Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier: 3XGbCFCbLWKmbiBCtcJWH844KUnxilICUHn3XcreeNg=
Subject key identifier: F0:B0:5C:D1:1F:09:0E:A5:27:D5:BA:EB:B5:62:FD:9A:DC:A7:31:20
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial: 0199FBEAFD5A6AD24A6FC8E58DE210BCE517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: vKsyp4iVZ1TtX/LTzPq0aQpyHoIbtXY+DIQfTjSIBFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fd:5a:6a:d2:4a:6f:c8:e5:8d:e2:10:bc:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=f0b05cd11f090ea527d5baebb562fd9adca73120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:7c:47:dc:53:1a:55:0e:97:7f:d7:d7:0d:
d9:81:cb:ef:56:9f:06:8f:cf:0a:2a:25:72:a6:42:
c3:6d:27:35:b9:03:37:20:dc:7d:bc:31:26:66:d9:
86:ca:35:34:e2:55:9f:2f:32:34:d0:9f:88:8a:33:
cd:a3:e8:1b:f5:aa:f8:28:91:05:ee:d5:26:37:8a:
0a:89:9b:a5:c2:79:82:9c:18:7b:12:2b:46:00:38:
47:7f:80:43:a4:5f:a5:58:99:c4:36:43:ac:e4:b5:
98:72:d8:95:38:95:b2:b3:40:3e:7e:5e:33:eb:87:
6e:84:b3:c7:c8:43:cc:1f:88:64:61:2b:2e:63:a0:
3c:98:a7:84:48:b2:93:27:e2:ea:3b:40:af:d2:c5:
b8:36:2a:0b:80:dd:de:e0:81:ae:89:af:79:f2:50:
57:90:6f:ac:f2:bb:ee:ed:c2:c5:41:92:69:bf:9b:
02:4a:d6:c4:87:a7:2a:8c:ff:da:23:e2:93:b0:67:
ab:53:16:c4:e8:70:c5:fc:ee:10:5a:50:79:3e:2e:
73:f9:bf:82:82:4e:0f:3f:16:ed:45:ff:9a:88:be:
2d:1f:1f:c8:cf:9a:ba:27:2a:f8:48:0a:67:e2:14:
ee:c9:18:19:67:f7:79:e5:f4:f0:26:e4:d3:f8:fe:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:5C:D1:1F:09:0E:A5:27:D5:BA:EB:B5:62:FD:9A:DC:A7:31:20
X509v3 Authority Key Identifier:
keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f3:aa:d6:2e:ef:78:04:10:8c:92:0d:ce:51:84:8f:f4:dc:
06:58:5b:5f:ba:aa:67:4b:4c:3d:b3:b9:72:dd:d4:39:5f:41:
65:e6:52:88:d7:e7:ee:47:d0:46:43:8a:b5:e4:66:a1:b0:2e:
3b:e9:41:d6:52:b8:32:dd:65:dd:41:50:3c:a3:0c:61:c7:e1:
8e:b5:fd:73:06:32:5b:1e:16:2d:d7:fe:4f:04:cd:f2:7f:b3:
53:d7:08:2e:77:d5:c6:04:a0:30:d7:b2:02:55:26:ee:0e:88:
1a:85:21:ef:4a:f2:30:76:d6:9e:47:5f:bd:2a:11:10:a3:d1:
89:03:25:51:0e:cb:a1:07:7d:90:8d:b5:e8:73:3c:e0:0a:f5:
9d:6d:8a:98:03:91:6b:29:38:5d:fc:02:18:83:d4:db:9f:ca:
15:97:e2:00:4e:5f:be:59:55:a6:d3:82:39:7c:9d:25:fe:17:
ce:75:9c:aa:71:2c:5f:ad:9d:c6:d3:fe:00:ed:d3:f3:cc:53:
a6:d2:8f:b6:c4:d6:bb:c8:85:b0:63:e4:59:b5:ff:46:fa:88:
5c:c9:b1:e0:ed:e5:ab:d5:88:7c:ed:1f:51:e3:d6:72:f9:c6:
8d:db:83:a4:b8:d7:67:85:94:53:08:de:0a:97:bc:4b:d3:b3:
8c:07:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:51 2025 by rpki-client