Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: fBkdc+23h/ScJKPXPXNnNvVsvnUJ6l9IFv2yEELsA9o=
Subject key identifier: 50:86:5A:01:3A:F5:19:F8:12:98:1C:55:BF:01:A5:62:05:93:2E:F6
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 0199FC5889A721523C8F736359B5698DA31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: qN9ghDD97HGbTTNyV9dqCZ9Qt5iiUeRdXf4zYrdGKjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:89:a7:21:52:3c:8f:73:63:59:b5:69:8d:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=50865a013af519f812981c55bf01a56205932ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:d8:cc:03:e5:e3:22:f8:b8:5a:e8:73:1e:
05:b3:33:64:8a:c7:9e:c4:43:17:d5:4e:cd:7c:d9:
09:48:c3:29:0d:21:32:1e:36:0d:a0:6c:8b:8b:5e:
32:b8:32:13:36:ce:bf:b1:f3:c3:50:3a:78:93:51:
42:5b:1f:5f:e9:24:8b:21:57:92:30:81:58:47:8b:
2a:a9:86:f5:bc:d2:02:1a:72:4b:c3:6b:0c:3f:9f:
4b:5a:65:6e:7d:74:c5:90:8a:3e:bd:62:10:66:4e:
ef:a0:74:9e:7a:13:be:a7:ff:f5:fc:09:36:52:72:
12:f6:ef:9d:ce:18:42:af:f9:c1:c1:c4:0a:ab:2e:
d6:61:c0:63:22:74:1c:41:a8:a9:f1:e4:4f:3c:e4:
0c:74:3b:21:62:a2:70:3a:f9:a5:49:f4:53:0e:d1:
57:0d:c2:b2:72:ae:d9:7e:15:50:ae:15:e9:3d:55:
5d:80:ae:03:87:9f:5b:9f:01:9b:94:19:25:b9:95:
0b:04:46:f5:1d:91:da:1e:4d:df:06:a1:e5:9c:6d:
a4:9a:e1:84:81:4e:3c:54:60:33:a5:98:76:fe:d0:
c9:a3:12:e4:35:13:b4:03:ba:8c:06:67:55:95:03:
c1:93:48:4d:ee:90:91:50:50:d1:b5:95:61:88:0d:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:5A:01:3A:F5:19:F8:12:98:1C:55:BF:01:A5:62:05:93:2E:F6
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:93:62:02:0b:90:16:f4:29:20:0c:ca:68:89:a3:d5:8f:
b0:ec:25:e1:d6:0f:9e:08:ee:a6:ec:49:e9:31:c9:ef:f3:b2:
6a:c6:ae:43:99:f3:a3:0d:32:de:4f:69:fb:19:57:92:1b:8b:
0d:4b:be:bd:42:cb:50:60:bd:86:45:c4:9c:c1:69:e8:67:4c:
c1:62:ec:ed:93:93:6f:fb:6d:88:2f:80:57:05:78:58:32:bc:
52:9b:47:f5:31:ce:5e:4d:c3:ef:d8:1e:74:6a:f2:52:bc:a5:
d2:75:b4:ab:36:ad:17:46:2d:64:cb:6e:ec:f4:87:3a:5a:05:
21:f6:5b:c4:7e:f9:c3:75:0a:c6:b8:4c:e0:87:dc:4b:01:de:
c4:97:bc:a9:3f:6e:42:ca:37:5d:17:d3:bb:26:b9:9a:cb:6a:
fe:a7:7b:d8:34:e7:90:cc:6b:4e:55:49:8d:81:43:50:0d:c0:
53:27:f5:42:59:d1:96:82:5a:fb:2d:47:55:cf:d8:95:c2:f6:
62:fc:e1:a8:8c:83:aa:a9:44:29:06:bc:7c:e8:43:00:0d:fe:
14:6b:c0:80:f2:f7:bb:40:6c:76:c5:4d:12:eb:ce:39:98:7a:
63:68:0c:a3:c6:37:60:58:ff:d7:4c:07:4c:e4:3f:a5:32:47:
55:57:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:11 2025 by rpki-client