Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
File: l3rc9I_t4Rk44XfcBNxnnGktjBw.mft (raw, json)
Hash identifier: So5aja7oo8lCAXhWUsrQdnMHDtjhrQvq+vPajr4MjKA=
Subject key identifier: FB:75:10:8E:A6:C5:42:72:E3:F2:02:DD:B2:11:7A:AC:B6:A9:08:16
Authority key identifier: 97:7A:DC:F4:8F:ED:E1:19:38:E1:77:DC:04:DC:67:9C:69:2D:8C:1C
Certificate issuer: /CN=977adcf48fede11938e177dc04dc679c692d8c1c
Certificate serial: 0199FBEB2497E4DDF956819743E8F75F9070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
Manifest number: 93
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: l3rc9I_t4Rk44XfcBNxnnGktjBw.crl (hash: /K4k2KENqaarIP/mEDoSBIwtFzM//XOU9I65VFl3C1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:97:e4:dd:f9:56:81:97:43:e8:f7:5f:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977adcf48fede11938e177dc04dc679c692d8c1c
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=fb75108ea6c54272e3f202ddb2117aacb6a90816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:48:97:47:fe:a7:9c:1f:34:cb:a8:0e:91:
71:04:c4:8d:18:89:9e:b5:60:5f:ae:c4:d4:0a:0f:
ce:45:de:d7:dc:3c:26:7d:87:f6:77:02:d8:b6:ea:
17:4b:c8:de:d5:17:37:11:56:0b:94:8f:fc:50:f4:
1a:5f:a0:49:fb:1d:ff:31:ed:3e:5d:c6:7f:dc:f4:
bc:78:82:a6:0d:f8:e1:6a:1b:2a:4d:1e:e5:7e:16:
d7:63:8b:aa:e6:83:69:9a:c9:44:b6:c7:24:9b:22:
f5:ca:20:54:90:92:2b:fe:34:5e:07:bb:55:63:45:
46:95:21:be:0d:00:f8:92:ff:28:1e:a5:37:34:9c:
d6:a2:30:dd:51:32:2f:39:dc:2c:86:1f:a1:1d:76:
d4:b8:27:0c:24:74:7d:f7:1e:79:9f:1b:97:36:2a:
dc:bd:e6:6e:6b:78:46:3f:6e:2f:91:66:3c:e5:ae:
c4:74:24:29:b1:cb:ef:84:7d:eb:ae:9c:30:4e:7d:
7a:d0:c3:5b:01:aa:4c:46:77:1c:83:5a:0a:38:f1:
8f:50:10:6c:ee:12:8f:78:d5:ab:92:ab:44:87:fd:
74:03:78:0a:d8:11:9c:69:94:94:69:ca:6d:73:f0:
09:ab:3b:ec:0e:fa:34:02:e4:d2:4a:78:f4:e7:fd:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:10:8E:A6:C5:42:72:E3:F2:02:DD:B2:11:7A:AC:B6:A9:08:16
X509v3 Authority Key Identifier:
keyid:97:7A:DC:F4:8F:ED:E1:19:38:E1:77:DC:04:DC:67:9C:69:2D:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3rc9I_t4Rk44XfcBNxnnGktjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fe6725-7609-4bc2-b48b-25477dad9434/1/l3rc9I_t4Rk44XfcBNxnnGktjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4e:d7:f4:f1:58:ae:38:80:64:cc:e6:d3:4a:50:55:c2:e0:
4d:2e:7e:f1:ca:8b:88:93:a9:99:6f:53:a1:6d:32:46:cf:8d:
71:9f:0e:55:4c:38:83:42:97:f5:62:48:2f:55:44:85:ab:53:
5a:46:62:03:6d:36:f5:58:5b:d2:8b:f6:e6:dd:6f:41:41:cd:
75:9c:0b:92:2d:32:76:2f:7d:69:8c:73:cd:ab:12:2c:c0:b3:
1f:bc:a7:a2:f6:05:2f:93:46:95:ff:85:63:85:5f:fd:20:bb:
d0:0a:ae:38:8e:b1:cf:ac:1c:ac:08:44:29:69:a5:f9:3d:e6:
b9:49:2e:0e:73:0d:f2:36:48:3a:06:d5:60:43:ff:d7:2c:c5:
3b:c3:35:bc:d5:27:d0:b0:1c:c2:ae:e6:b5:7b:74:b7:16:0d:
fb:4d:2f:48:9d:90:5e:44:26:e4:a7:e6:45:31:85:9e:15:17:
3b:53:3f:f1:8c:df:48:7c:3f:e7:a6:34:be:22:91:c2:e2:f0:
43:bf:54:06:09:13:59:94:3e:7a:30:a8:69:d3:c8:b9:fc:0e:
4e:9e:5d:40:ab:29:7f:12:46:6c:37:ca:2a:d6:a2:ae:a0:fa:
cf:fb:49:f7:8d:16:51:30:e5:5f:bc:0e:08:c9:20:b5:2d:d0:
e9:ff:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:50 2025 by rpki-client