Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier: nlkK0qt2M/hazGNJFFqcfO/rsNVkbN1bW20wXWrVZd0=
Subject key identifier: E9:E3:E2:79:C2:62:1D:2D:DA:7A:9D:70:68:8B:96:6B:86:E4:D4:B3
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial: 0199FC8F8C101C534FD00B832B302037BD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number: 1042
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: RkE06zokzM6Nkd2V84LDab17GqW2dg9aWnS2OW3mxME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8c:10:1c:53:4f:d0:0b:83:2b:30:20:37:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=e9e3e279c2621d2dda7a9d70688b966b86e4d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:06:7c:45:4f:71:04:1a:e4:e2:54:f7:53:
fb:9c:e3:b1:52:fd:39:d2:86:32:3f:5a:d7:10:6f:
8d:8c:7b:7a:78:ca:97:bb:11:4c:9b:51:63:ca:2c:
d2:82:69:2f:96:97:3e:07:bb:3e:7c:f7:32:f0:d5:
5e:76:08:6a:53:46:10:cf:99:d7:ab:c6:1a:59:2a:
f8:57:87:36:a7:9d:35:c6:5f:67:50:fa:ff:42:ae:
03:84:df:d7:24:d1:3d:e1:33:e9:8d:e8:5e:70:3b:
96:64:5a:f4:8c:96:61:a8:8e:a3:2e:9d:bd:56:27:
14:1f:fc:45:a3:c4:df:98:51:5c:d1:98:14:c9:60:
be:90:58:8d:9b:7b:3c:ad:80:3a:9b:56:f9:82:fc:
10:5b:1c:1d:ea:3b:24:43:d3:2f:5d:ca:a2:cc:51:
87:78:a0:59:ab:45:16:dd:23:a5:0b:5a:c3:2b:4d:
eb:46:20:f8:62:f9:61:63:73:11:e7:2c:33:de:31:
f0:77:04:f3:8b:4d:42:c7:31:d6:d8:1e:15:11:39:
5a:ee:26:1b:7f:51:58:a0:19:88:63:fd:ee:47:c8:
fd:a0:63:4e:c0:1a:47:b6:78:86:25:5a:1a:00:4a:
55:f5:59:43:cb:19:7d:46:f3:bf:40:b0:fb:81:07:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E3:E2:79:C2:62:1D:2D:DA:7A:9D:70:68:8B:96:6B:86:E4:D4:B3
X509v3 Authority Key Identifier:
keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:28:33:44:07:10:6f:43:ee:3c:ba:7d:26:0c:7f:c6:4a:90:
9f:70:b2:d5:50:68:36:13:52:90:58:73:6a:d0:97:27:1a:d0:
b0:9b:b8:17:05:c5:4f:0e:23:54:c1:0c:7f:d0:16:9d:40:bf:
a1:90:08:1c:e9:22:49:fa:8e:19:df:0b:86:34:f1:22:ab:c9:
c6:f9:96:9b:11:fd:20:71:88:23:13:8d:be:ab:54:96:4e:ed:
8c:fb:3c:db:98:59:7f:70:ba:87:a3:7a:00:41:72:c9:70:f4:
43:aa:eb:b1:26:3b:34:3e:3a:ce:f4:ab:1c:fe:56:5c:4e:73:
10:49:bb:8d:29:99:ff:34:79:b4:47:38:7a:8e:40:bf:1a:44:
a7:bd:c6:b4:dd:4d:5f:35:17:3f:84:11:f3:9e:7a:35:18:67:
2a:05:e3:14:78:05:98:6e:3c:bd:16:58:95:80:71:1c:88:57:
39:64:d8:6b:d4:7d:9e:4a:07:df:9b:70:92:74:de:b5:2d:72:
9a:e5:6c:83:dc:e5:97:1b:7d:98:02:a4:7f:92:4e:44:ba:0f:
8c:e6:f5:c8:e1:56:21:fc:e1:b6:47:1a:49:4b:1f:45:35:f4:
5d:7d:a1:a4:e1:1e:fc:ad:54:7f:43:00:41:a2:ea:49:cf:91:
22:1e:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:53 2025 by rpki-client