Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier: Jh6YfCtu9jC7Ph8OeTgFtXJhhYc3ai1kwuCJOmR3+9k=
Subject key identifier: 87:7B:56:39:66:76:CA:E0:67:8F:A5:26:D5:B7:F5:F4:C2:15:C5:D8
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 019A01B4A721D1A4087988245352BEF99171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number: 0423
Signing time: Mon 20 Oct 2025 13:00:07 +0000
Manifest this update: Mon 20 Oct 2025 13:00:07 +0000
Manifest next update: Tue 21 Oct 2025 13:00:07 +0000
Files and hashes: 1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: DzHhcMQYBZ4f2JYygY0WEy+Z0I/sdB+Jk+Hz8RQc+Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:a7:21:d1:a4:08:79:88:24:53:52:be:f9:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Oct 20 13:00:07 2025 GMT
Not After : Oct 21 13:00:07 2025 GMT
Subject: CN=877b56396676cae0678fa526d5b7f5f4c215c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:d2:47:94:a6:8f:79:6d:98:79:b0:89:05:
91:e7:1d:91:53:cf:87:ee:38:41:2b:63:03:c0:95:
53:be:ea:ac:f1:41:04:25:32:15:b1:ec:05:df:d3:
89:e7:6c:e1:33:f4:a7:cd:ad:f8:a8:f6:79:d7:76:
a9:3e:31:31:f0:11:8a:7d:c4:d3:4c:2a:69:bb:33:
8e:6c:0e:49:31:e2:75:e2:3d:f3:00:2f:73:f1:d8:
27:45:04:45:d7:5b:b5:f8:10:bf:3d:63:12:8d:fa:
42:e4:36:cf:b8:a9:f4:48:27:d6:85:30:a5:89:3f:
f5:a4:0c:2a:90:97:65:bc:d3:6b:fc:2c:b5:2a:6b:
e0:e7:d4:3d:f0:79:d4:f9:f7:53:f3:84:76:46:92:
b2:5c:4c:27:3e:e6:4e:2e:66:f7:af:15:02:bb:23:
d7:ce:0e:a0:18:88:e4:27:d7:13:2a:56:ed:2b:34:
17:0c:cb:3a:16:dc:5c:68:fe:09:8d:8d:bb:72:b1:
3e:2a:27:1e:0e:70:a8:68:ac:d7:f8:83:29:49:10:
07:55:bd:f7:fe:df:ce:4d:a7:38:39:c7:87:2b:c9:
52:5b:db:b1:b0:44:b1:28:ce:d2:d0:9e:93:b7:d3:
90:30:5a:ed:80:ac:a7:8c:3c:08:43:2c:ad:ab:a0:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:56:39:66:76:CA:E0:67:8F:A5:26:D5:B7:F5:F4:C2:15:C5:D8
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:39:82:51:b5:87:ff:51:73:8c:3b:3f:a5:3d:7e:ec:c7:
bd:f4:a8:31:ec:3e:df:7f:c2:50:f2:8c:6e:55:f9:cb:73:36:
40:01:ac:e0:54:7b:69:71:09:93:fa:4d:cf:b4:2d:94:fd:70:
ee:1e:c8:1e:ee:cc:9b:20:f8:cb:9e:3e:84:10:bb:7f:41:fc:
58:4f:48:03:d7:23:89:10:4b:1c:d1:3f:d6:a3:e5:c3:c9:6f:
ef:bf:c4:76:50:b9:c8:a2:5a:22:23:4f:e0:03:ec:7e:72:9e:
7d:3d:15:1a:79:64:06:ff:64:02:76:5d:26:07:c7:24:2e:dd:
01:5a:fd:f9:14:3d:5e:e7:d3:f2:56:8a:0e:4a:e6:fe:6f:6c:
bd:50:2d:21:20:26:13:ad:14:8a:83:b8:e0:a2:ce:de:2e:1c:
70:13:7b:14:2a:33:97:6c:bc:d6:ad:ca:8b:f9:e1:e7:83:e8:
8f:3e:ba:25:d9:d1:73:da:47:2c:42:1f:cb:b8:a6:52:be:35:
fe:f8:a4:0d:ea:b2:0b:51:61:af:1f:a4:43:88:ff:84:4e:94:
48:05:5b:de:a4:be:60:29:84:93:43:4f:e6:41:a3:f4:e0:79:
b0:a8:9e:b5:89:d1:96:8e:12:ea:a4:e2:ef:48:b0:5e:1d:2b:
b3:f7:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:32:07 2025 by rpki-client