Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: FEuqNrScpD0DX+XQjj1ybR3lrWtaX+i/EELbY2ieLwo=
Subject key identifier: FC:C3:3E:FD:49:07:12:37:45:D6:10:95:45:0A:3C:22:DA:DD:B9:13
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0199FBEBBE16CE7545809E5AA8021BCFAB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: 0sCb8ksHJow+ObJrviS6ga6kmBuHQpHqrv1xtf9Y4h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:be:16:ce:75:45:80:9e:5a:a8:02:1b:cf:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=fcc33efd4907123745d61095450a3c22daddb913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:3e:ea:e6:3b:6a:f4:ad:c8:3e:d5:00:47:
cf:23:c9:14:0c:83:f8:fe:69:5d:a9:4f:ba:16:e4:
09:60:51:9a:38:7b:d9:63:41:33:02:4b:df:6b:65:
24:9b:6c:4b:93:9e:93:5f:86:cf:b8:f5:1a:a5:48:
f8:1b:9e:d3:60:d7:4b:03:bf:dc:dc:04:4d:24:ff:
9a:b1:91:95:e3:0d:83:8b:b9:cd:60:ef:9b:40:64:
c3:42:e6:53:11:86:64:5d:19:13:f9:17:19:33:82:
27:57:a6:84:d9:34:8a:42:da:2c:3f:70:24:e2:e8:
89:85:1b:41:cc:53:00:d8:2a:57:70:e2:e6:b7:7e:
de:cb:9f:a6:c2:ad:ae:53:a4:5b:cb:db:32:b0:a3:
e5:4c:d7:01:43:9d:21:5c:9a:f6:2c:b2:d0:0c:a3:
49:0b:7d:0a:18:8c:14:6f:f0:cc:1a:ad:5b:a6:e9:
9c:e4:4d:78:52:09:19:c6:c4:64:b7:33:d5:52:0c:
83:eb:7e:b8:bc:b2:e5:77:43:05:ae:4d:51:47:73:
21:9e:3e:c0:7a:47:49:01:fa:29:c4:ff:6a:1e:49:
1f:a9:18:ed:90:fd:32:7f:63:c7:90:23:b7:09:e9:
70:d0:67:19:05:a3:d8:9e:12:d6:d2:c0:47:f0:49:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:3E:FD:49:07:12:37:45:D6:10:95:45:0A:3C:22:DA:DD:B9:13
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:f8:26:8f:2f:fb:58:9f:5e:68:f8:f3:24:66:08:dd:3f:
8f:67:4e:bc:2a:38:8f:f8:20:dc:78:3a:19:5a:b7:c3:e8:74:
ac:ab:12:11:06:88:c4:93:7f:01:b0:ee:94:69:e5:c8:e5:77:
e9:ad:de:5c:1b:a5:24:b9:21:ac:b3:c6:88:1c:14:22:41:76:
95:62:7f:81:a1:30:b8:27:26:f4:be:4e:0f:0e:3b:76:35:3b:
ec:3e:64:33:da:e1:a8:3c:d7:60:e0:69:31:4e:93:f7:34:ec:
72:2e:e4:b2:69:b7:29:a8:da:df:72:c2:eb:53:1b:27:5e:7f:
f7:8f:c3:ae:8a:90:77:39:dd:7b:c5:43:82:ef:3c:5f:3d:00:
c0:59:db:c9:12:e9:25:4d:02:6f:3b:64:a7:62:4f:00:2e:2b:
dd:49:31:2f:4f:60:2a:57:98:58:7e:c3:34:2b:9e:ab:fe:5c:
5b:87:25:ab:e6:c2:50:60:27:0d:d0:b2:47:1f:a2:72:c0:f5:
b9:8a:39:6c:d5:32:15:4b:39:71:f3:06:42:39:b8:4a:a4:84:
2b:a4:e7:fc:68:02:8b:df:f2:25:30:a9:c1:b3:32:59:fa:a9:
b8:8c:40:6d:2f:53:f2:7a:ab:10:d0:46:dc:9a:53:db:0b:27:
2e:c6:48:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:03 2025 by rpki-client