Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
File: FyesE93M6XjmP3r186adq0mS1kU.mft (raw, json)
Hash identifier: aKA5Vb55MIvl6pRTCHt94tKiAQHzTdYqz7nCUAaK/Rw=
Subject key identifier: 7A:93:6D:97:16:31:C6:44:EC:BA:02:80:77:DD:28:53:50:B0:7B:0F
Authority key identifier: 17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
Certificate issuer: /CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Certificate serial: 0199FCC63E42AFC6F036D98A68C59BC05F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
Manifest number: 0A41
Signing time: Sun 19 Oct 2025 14:01:14 +0000
Manifest this update: Sun 19 Oct 2025 14:01:14 +0000
Manifest next update: Mon 20 Oct 2025 14:01:14 +0000
Files and hashes: 1: FyesE93M6XjmP3r186adq0mS1kU.crl (hash: x9SlG+PD/CAsD6AoSQEOOzYVnTVMybvpR4xhYXbO4KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3e:42:af:c6:f0:36:d9:8a:68:c5:9b:c0:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1727ac13ddcce978e63f7af5f3a69dab4992d645
Validity
Not Before: Oct 19 14:01:14 2025 GMT
Not After : Oct 20 14:01:14 2025 GMT
Subject: CN=7a936d971631c644ecba028077dd285350b07b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:18:f8:3e:67:fb:dd:dc:9f:21:bd:68:a8:
55:5f:2d:d5:48:d5:6d:b1:d9:6e:e4:ba:49:18:fe:
ac:ab:04:73:e4:28:a8:2c:c8:5e:2c:58:82:2d:18:
8a:bc:60:32:b7:3b:88:32:2a:ab:60:a3:ac:94:d6:
c0:d0:ce:6c:96:d0:ec:45:cb:e0:ef:1c:0c:7e:67:
62:14:e5:6f:a7:19:58:cd:4a:0d:bf:3e:f3:7b:96:
86:f9:2c:b3:ab:ff:ee:19:54:56:75:23:99:d8:9f:
3c:b3:7f:45:bd:8d:29:80:63:e1:1f:45:03:ba:a3:
aa:16:21:7b:c3:00:96:cc:3f:60:ec:f9:d8:e8:3d:
a3:47:6b:12:32:f1:b4:33:06:96:3a:c2:8c:0d:95:
4a:5c:31:7f:9b:84:49:da:0c:4a:6c:71:4f:45:cd:
2f:13:c5:42:be:6a:38:4d:37:f0:5d:8f:e8:e9:bd:
38:4e:52:56:60:20:10:22:66:89:a6:7a:6d:50:b3:
c5:58:ff:00:6c:48:c5:a2:87:7e:b4:6a:03:47:d3:
bf:47:5b:e0:5f:bb:0a:15:da:96:78:a0:aa:a1:7b:
d2:ce:0a:c1:45:96:75:0d:20:ca:23:d8:59:45:ac:
60:35:05:1c:f2:e7:6f:70:2e:bd:b7:ae:5b:63:4a:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:6D:97:16:31:C6:44:EC:BA:02:80:77:DD:28:53:50:B0:7B:0F
X509v3 Authority Key Identifier:
keyid:17:27:AC:13:DD:CC:E9:78:E6:3F:7A:F5:F3:A6:9D:AB:49:92:D6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyesE93M6XjmP3r186adq0mS1kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7573b-7fe4-4de8-8882-43bcdb740323/1/FyesE93M6XjmP3r186adq0mS1kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:cb:8d:a0:62:e4:c1:e4:12:1d:1d:d6:00:a0:18:e2:77:
68:90:41:fd:2c:a4:23:44:9e:f5:b7:92:d2:bb:15:af:72:22:
49:e8:2e:c8:63:ae:c7:a6:b7:9f:e1:39:7e:b4:c9:a2:59:07:
40:4e:40:04:97:cd:79:7b:63:b4:05:a0:30:8d:bb:d5:20:85:
30:a8:cc:58:7e:aa:19:16:d2:76:c6:a7:2c:40:83:b8:6d:72:
9e:7a:54:f6:5c:f7:91:47:79:15:34:cf:01:06:89:48:9d:ec:
c1:e4:2b:84:fc:18:9c:a5:31:74:b1:c2:24:67:03:1b:9c:35:
20:78:1f:ac:f3:a6:97:be:d5:91:e1:5a:3a:78:64:64:93:35:
12:44:4a:de:04:21:ef:ff:30:15:4a:bd:77:9a:ee:1a:8d:0d:
10:06:cd:5a:f5:5f:50:79:5e:e0:43:64:fb:6c:c7:2f:d3:4b:
a3:d1:26:35:02:2a:a4:dd:39:16:b3:95:4a:84:d2:07:f0:77:
8a:af:01:98:40:5a:54:1a:af:37:93:04:cb:ef:ec:6a:c0:da:
70:3f:43:d5:83:2c:d1:bc:b9:48:86:4f:16:ff:a2:a7:7b:1b:
d1:7f:77:e7:1d:c2:15:4c:4b:c4:d5:23:ad:ac:00:6f:cb:82:
b0:d8:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:34 2025 by rpki-client