Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: /jvQVWJ436DIzIru3FU38Aa3vFCAEFy1Rehn5hZUZIA=
Subject key identifier: B3:85:99:E1:F8:3D:C3:44:97:55:A2:5A:BD:E5:FD:BD:BD:D8:BA:40
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019A0035C829CBE6DA1DB55FB04EC7E82BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:55 +0000
Manifest this update: Mon 20 Oct 2025 06:01:55 +0000
Manifest next update: Tue 21 Oct 2025 06:01:55 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: pQbGVjyEbt710urTDHIrOL6EAM478/A1QCqEjAqOeC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c8:29:cb:e6:da:1d:b5:5f:b0:4e:c7:e8:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Oct 20 06:01:55 2025 GMT
Not After : Oct 21 06:01:55 2025 GMT
Subject: CN=b38599e1f83dc3449755a25abde5fdbdbdd8ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:b4:91:2d:37:b8:6b:ac:74:13:5c:0d:6a:
20:08:ed:98:f4:26:f8:03:3f:1f:f4:7a:6f:f7:a2:
15:1b:a0:4a:1d:da:14:11:fc:51:ad:02:fd:9f:c8:
78:09:58:96:1f:22:f1:23:2d:0c:7a:4c:db:13:41:
06:78:7e:fe:0e:ca:a6:25:fb:b6:85:e9:7e:c3:85:
3b:34:93:cc:18:f2:ac:b1:ef:ea:1a:ac:15:c2:33:
65:3c:a3:a7:53:c4:cd:d7:92:31:56:02:0b:e7:d7:
98:21:24:65:3e:85:ee:8d:50:dd:91:b1:71:73:a1:
97:5d:ba:33:a6:c4:a1:78:e3:37:b1:35:b6:c6:8f:
ed:bd:d6:8d:05:85:32:53:1e:c2:ff:b1:e8:6b:eb:
56:1a:cf:f7:7d:0d:7b:76:0e:e1:40:f2:d1:4c:d5:
15:d9:e5:81:7c:87:ca:dc:77:5c:0d:19:71:6a:71:
3d:c6:93:ca:1c:a7:49:35:e3:35:ca:63:be:7c:1d:
36:d2:b5:73:fc:4a:f0:b3:f4:4a:55:28:32:de:4d:
a7:97:90:93:be:bf:32:94:19:4e:ac:11:60:1f:32:
c6:01:6c:d3:7e:42:31:35:d8:ee:3d:ef:f1:1d:3b:
47:46:b2:f0:a8:2d:0b:20:8a:f1:72:95:ae:20:bb:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:85:99:E1:F8:3D:C3:44:97:55:A2:5A:BD:E5:FD:BD:BD:D8:BA:40
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:86:fa:ad:6a:11:72:53:51:81:3c:b9:dd:ca:62:58:70:28:
fc:d6:46:67:e5:ee:7e:59:cd:69:ee:42:ea:3b:c5:c2:11:6c:
36:c1:0c:f0:b2:59:63:92:a3:5a:a5:af:29:74:83:a7:59:0c:
e8:fd:40:2c:36:55:ca:47:d0:8a:7d:1e:d8:4d:81:30:fc:f8:
2d:8b:9c:74:b8:12:2e:0d:55:b9:ad:99:ee:c1:38:2c:2e:df:
62:53:f3:3f:04:f9:67:a2:c2:1d:ec:4f:25:5a:c6:a8:94:38:
1f:5e:db:01:11:cf:0c:d3:09:b0:ac:7d:81:21:3a:55:63:74:
b5:02:a9:43:4d:53:0e:08:da:ae:59:5c:4a:1e:5c:d1:a1:61:
28:49:21:35:32:55:c3:3d:8b:12:d3:69:dc:96:6b:6b:58:c8:
ee:f6:96:a4:4b:7e:0d:fe:8b:ee:62:4f:dc:b9:56:ed:58:38:
65:6e:ce:fc:ad:c0:3b:11:c9:7a:e5:ff:36:bb:5e:ae:73:3a:
c9:10:23:26:05:7c:e4:bd:de:15:02:ea:a0:94:83:31:68:2d:
49:07:c3:17:e8:22:54:18:7c:f6:b2:c0:bf:48:ff:96:23:6e:
64:ba:66:d3:ec:44:78:f4:91:8e:8f:c0:6b:b1:79:24:5c:59:
e5:9f:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:49 2025 by rpki-client