Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: xDlgd3jCIz8U/tL/nCKjzns29fUXh2t0GTiukYvWfw4=
Subject key identifier: DB:EE:75:EC:57:F4:F4:DD:74:54:D9:5E:87:01:70:41:60:98:44:7A
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 0199FC8F469F0E382C1D4DC672C0AAB9216E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 06C1
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: Z6mHsNbGMX3VWk2hwZJyLISYLIVfbve15YA/YmIt9Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:46:9f:0e:38:2c:1d:4d:c6:72:c0:aa:b9:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=dbee75ec57f4f4dd7454d95e870170416098447a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:b6:f4:13:4b:d7:bf:fb:93:2f:12:ce:24:
db:5f:87:40:8a:ef:f5:a8:8f:e5:30:c8:5d:fd:8c:
10:8f:34:f8:4d:36:9e:39:0a:5a:40:e2:7d:42:20:
1f:37:c5:67:1b:cf:8c:88:ab:83:d5:b5:36:e9:3f:
0d:57:d1:98:2b:b4:ec:42:0f:3c:28:82:a4:f3:2d:
99:13:34:85:86:53:c0:ad:7c:d3:92:e3:85:cb:cf:
1d:8f:40:a6:12:b0:d3:97:0c:dc:cb:fa:12:f5:75:
45:e7:1d:90:86:13:85:85:f8:f1:64:77:47:d8:57:
55:21:cf:55:3d:cf:ad:52:29:43:2c:45:57:3d:41:
0c:76:f5:31:17:bb:98:95:24:58:12:7c:ba:e8:fc:
fa:c8:70:41:cc:0d:89:39:7c:83:cb:b1:69:7e:ea:
fe:32:55:b8:5a:91:91:0c:c5:a3:62:a3:f9:56:82:
92:ec:79:79:60:38:0d:1e:0a:ab:9a:06:51:c7:17:
32:16:cd:b9:a4:b2:a8:d9:41:e8:3f:51:70:16:d1:
bd:9f:37:a9:57:a4:b3:db:db:1f:0f:f5:b5:b8:e6:
7e:30:4d:34:49:ec:53:92:8f:d7:3f:c1:dc:87:45:
3c:14:88:d1:af:d9:2e:0e:4f:83:2a:68:00:d7:0f:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:75:EC:57:F4:F4:DD:74:54:D9:5E:87:01:70:41:60:98:44:7A
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2a:93:ef:c0:b3:69:0c:99:a9:1d:e1:61:7b:b6:70:dd:f6:
7f:d4:e6:fc:c6:71:5d:d7:e2:20:db:3d:a7:b8:75:a5:42:19:
20:9a:bb:22:1b:02:7b:0e:00:3f:c1:c9:d4:36:8f:79:75:43:
e8:81:25:bc:f8:fc:1b:59:a6:62:37:73:b2:06:b6:f0:e2:30:
fb:5c:04:15:15:4f:bb:bd:a0:21:74:01:36:14:40:d7:cf:5c:
94:7c:11:aa:b8:8f:a8:0e:c3:53:7e:e0:30:57:44:e3:65:b6:
1a:47:a3:90:82:17:47:92:e0:3a:75:84:10:54:59:a9:7a:39:
8f:92:64:b3:c6:88:7f:e9:05:ff:f5:4e:3f:98:2a:2c:b8:5d:
78:f4:db:f8:13:80:98:fe:c0:5f:41:0b:57:61:9b:98:70:3e:
30:bd:45:b0:86:8b:02:b6:d9:a2:b9:7e:f0:18:21:00:9b:2b:
b4:d8:49:6e:a1:0b:a4:06:ef:f0:8e:c6:f7:b0:9f:26:35:8c:
b5:13:be:fb:97:0c:f7:93:d5:9f:44:8e:c0:0f:a4:75:ab:dd:
18:65:01:ac:77:b3:42:37:f4:3f:44:6b:06:da:42:c7:bf:a1:
f2:52:55:86:5a:45:57:af:25:c0:ff:ba:2e:0a:69:d2:46:e9:
2c:0f:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:56 2025 by rpki-client