Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: qMhOjqG+dGK5gKEi5IvknnPPFRMr7GjG3VyMQ63t54E=
Subject key identifier: 80:5A:52:37:81:74:D1:C5:DB:9B:C8:7D:2C:28:A3:F2:14:EF:93:30
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 0199FBEB0C909051C1BD11FBF7080FD8C124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0F9E
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: iyzTHMNGCOnUDffOhJKNh6Op4129D31E2yzQfKu24hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0c:90:90:51:c1:bd:11:fb:f7:08:0f:d8:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=805a52378174d1c5db9bc87d2c28a3f214ef9330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:8b:6a:8c:6e:c1:2b:6f:9e:e7:70:a2:71:
8c:84:2a:fe:82:87:b8:68:43:c2:03:ad:6a:eb:8e:
a2:10:9c:d6:4e:13:e5:71:a4:7f:b2:78:64:76:65:
5d:2c:8c:a1:a8:0f:19:8d:6b:fa:97:81:1e:00:43:
be:36:2a:b7:50:1a:b6:f7:14:3a:4e:c8:bd:41:8a:
93:2b:83:7b:43:76:3c:59:b3:c7:0d:b5:b3:d5:74:
26:d4:48:3b:6b:27:b3:43:2d:0d:5f:1d:31:94:d7:
80:85:2e:79:0f:3f:11:0b:f7:f4:0a:5b:2f:a6:ba:
ae:23:2c:fe:21:9c:c3:6d:be:98:6b:f9:4b:32:02:
61:83:cc:8c:ae:e9:cf:c9:df:ec:26:f6:90:eb:60:
ed:81:f5:b0:71:9c:e7:b6:b2:be:90:ad:a9:28:63:
47:b2:72:9c:66:3f:7a:84:5f:90:dc:4e:dc:a5:72:
08:14:d8:94:24:c1:cf:7d:56:fe:c4:8a:99:01:8e:
21:5c:38:94:46:f2:cb:04:8c:2d:0f:51:ae:9c:06:
9c:63:ac:47:88:f6:56:77:8d:42:04:8f:14:45:32:
a3:99:5b:db:bc:bf:a4:db:e6:e9:2e:7f:c0:95:cb:
88:3d:b1:2f:fd:3b:a9:df:cd:e4:5b:61:2c:31:cf:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:52:37:81:74:D1:C5:DB:9B:C8:7D:2C:28:A3:F2:14:EF:93:30
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:82:0e:aa:05:91:db:d4:e4:04:ab:c1:2d:9f:d3:78:52:
36:78:3f:26:fd:ca:c1:dc:27:2f:c9:07:eb:4f:84:21:0e:e0:
90:e0:1a:03:68:03:9d:6c:e1:d1:05:d3:94:1b:75:2f:44:bc:
c5:1c:ef:7c:b2:32:0e:b4:2d:57:6a:d7:99:95:89:34:6f:ef:
d2:31:ce:9f:a9:ac:7d:8f:d1:02:07:a4:00:2a:27:0f:12:00:
ae:ed:68:ef:ba:47:74:25:0d:f4:d5:86:be:03:3a:cf:6b:58:
a6:f0:8f:85:8a:48:30:7b:01:5e:d5:65:7e:79:52:13:34:28:
ad:46:e5:e5:c5:c6:f7:86:0d:ed:a2:d2:8d:95:1b:1a:af:14:
77:f0:0b:0b:7f:89:5a:f9:f1:d6:9b:69:3b:c4:d6:d0:59:f6:
8f:44:84:27:a4:44:4e:d1:9a:b2:dd:07:4c:1c:a8:99:74:2a:
6c:4e:47:61:29:5f:ee:7e:ef:02:37:cf:2f:a8:ee:aa:bf:e6:
e1:ee:0f:a4:51:65:63:c7:87:50:ea:ab:d9:f1:cd:5e:8a:a3:
9d:03:6f:f6:d7:ee:94:53:c9:89:dc:18:be:02:b7:fb:71:7a:
ac:73:1d:61:5e:09:4d:37:eb:9a:4c:e5:ca:d1:f8:46:39:05:
62:c8:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:48 2025 by rpki-client