Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File: _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier: 1ID8xbTKMG7FB2fGBdQM/sjoR3uwusmRkPnYOTvFUl0=
Subject key identifier: 3C:28:87:99:04:EB:37:D8:8B:AA:48:AF:8B:02:3A:45:8D:74:B2:80
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer: /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial: 0199FBEB9EFC8E87DADB04A239795D645CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number: 01CE
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: gXKPnfi68uwWGFe1YwqZFZmeinKush0LcAc6+qiTKLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9e:fc:8e:87:da:db:04:a2:39:79:5d:64:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=3c28879904eb37d88baa48af8b023a458d74b280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:46:35:0c:4d:79:11:38:02:35:55:e5:08:
41:93:e2:82:f4:b3:1a:e5:67:7e:f7:0c:0a:11:cd:
4b:98:2f:b3:c6:ea:24:30:aa:e9:01:57:e6:5a:2a:
e1:91:e8:c8:89:b2:67:d9:87:5b:5d:23:3a:e1:77:
ab:9e:66:ea:d4:64:f1:cf:8d:07:ac:df:74:02:09:
c8:47:00:d8:2f:18:15:30:a0:bf:90:d3:52:05:c4:
24:8a:9d:4d:b0:18:87:bd:44:a4:d1:10:b0:a9:0a:
b8:2e:32:04:2f:94:3c:2f:51:af:6c:13:db:9f:32:
ae:7d:1c:f9:f2:3d:5b:36:bd:f6:0b:40:9f:28:4b:
81:d1:4f:14:7d:62:5f:05:62:55:e6:85:5f:75:0e:
7c:00:6c:27:b8:da:5a:de:b3:7d:c9:7c:70:62:6c:
bc:98:a3:06:c9:40:70:e7:90:6f:2b:eb:a3:8d:57:
6b:2e:b6:5b:35:ba:fb:8d:35:95:99:81:99:80:39:
a9:2a:b6:e2:42:9f:8f:97:76:6d:56:f4:38:18:4c:
6c:30:df:d3:49:23:d3:20:66:6b:ca:5f:35:e8:7d:
8f:2f:ec:c2:7b:39:3d:98:c5:7b:8a:6d:19:03:18:
d4:a7:c4:16:ff:8e:27:ce:d2:09:74:58:a6:78:57:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:87:99:04:EB:37:D8:8B:AA:48:AF:8B:02:3A:45:8D:74:B2:80
X509v3 Authority Key Identifier:
keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:95:dd:82:85:eb:1c:95:68:af:e8:b7:f1:3b:6f:45:65:
75:cf:4e:76:5d:13:75:68:a6:1b:a0:2d:74:23:d2:f7:29:00:
22:b6:05:52:aa:e6:71:78:ad:79:11:9e:7f:79:a3:9e:fd:4e:
c2:88:5e:d2:f8:bd:c8:4b:34:42:31:e4:9c:8d:32:3f:ea:1e:
67:ac:c8:33:7a:ec:1a:80:fe:7a:bd:5c:74:07:7a:23:d4:06:
23:34:a0:ac:82:5e:da:0c:f1:79:fe:01:0c:ad:dd:87:a3:16:
46:71:7b:bb:c0:44:7e:2d:e8:1b:a9:7a:89:f9:5d:5c:8a:52:
83:1c:52:11:98:ae:21:e5:d6:5c:cb:83:1f:26:b2:14:b9:e5:
cd:f2:93:15:7d:5d:2d:df:c1:0a:da:7a:e3:36:54:4a:32:9c:
6f:ea:8d:96:df:8c:da:c7:46:ed:ba:b1:dc:3e:ad:8f:d4:91:
0a:a3:f8:11:6c:af:8f:76:71:a9:d0:e8:bc:9d:bf:15:94:97:
40:cb:5c:bf:cd:f5:a4:b1:96:77:93:29:a1:a3:3f:65:57:00:
cd:a9:20:92:94:42:4f:0b:c9:7d:77:af:ac:a4:34:53:aa:65:
f5:49:1a:29:fc:55:a3:29:c9:87:71:9f:ff:d3:91:26:68:35:
ee:90:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:59 2025 by rpki-client