Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: y4KugMI1nni4ZVCPBd1At3DBrNMtZMQR8gxLmJ5Ywao=
Subject key identifier: 20:5C:EC:85:3B:6D:02:73:A0:F9:FA:31:64:63:75:20:B9:D9:D9:A9
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 0199FDD8CEFFDECC72D05A856A1C8E67B162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0B71
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: BgCkkCUXTUojINbZEc9FXrfgwaqr/k3mD1zhZMjXSfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ce:ff:de:cc:72:d0:5a:85:6a:1c:8e:67:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=205cec853b6d0273a0f9fa3164637520b9d9d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:c6:9d:de:86:0a:b1:c2:1e:be:49:ed:7f:
05:e6:78:b3:9c:e3:4b:f9:ad:b8:1f:11:f3:94:a2:
48:7b:93:4e:42:b1:e9:f1:34:90:e1:eb:31:2c:2f:
02:fe:0c:e5:e6:a3:a9:38:89:3f:66:da:58:bb:b4:
65:48:62:a8:08:ec:84:86:d9:f4:40:13:c6:b3:3c:
ac:23:99:5a:7f:74:6d:ab:82:79:2c:dd:f3:c2:93:
ca:b5:ca:dc:68:04:95:a4:48:db:0c:4c:d8:7d:52:
5e:90:3e:02:44:80:e7:02:5f:d8:2a:78:5c:d5:bf:
0b:d0:aa:be:88:37:72:60:cf:dc:25:ab:1a:8a:c2:
d5:b6:3a:f5:ac:80:74:b8:a8:42:56:28:d1:54:88:
c1:fa:08:70:ce:ba:02:7d:7d:56:cc:2f:a3:f1:b6:
5b:6d:52:98:ec:1c:47:76:36:14:86:da:ca:b4:65:
98:ba:0e:75:1b:0d:5a:8e:9d:13:ab:41:8b:1a:86:
84:38:74:dd:61:80:a4:72:8e:b9:2b:99:41:d6:64:
a3:66:27:7c:6b:b3:fb:6a:5e:5b:5e:7d:43:07:13:
21:be:53:4a:59:a7:8e:05:a4:63:aa:66:2a:63:40:
df:0a:58:c8:e1:f2:f0:a5:88:50:8c:bd:b1:1e:3d:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:EC:85:3B:6D:02:73:A0:F9:FA:31:64:63:75:20:B9:D9:D9:A9
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f5:ff:f1:65:0d:a9:2b:ed:72:77:40:90:24:14:c8:65:e5:
0e:6e:5d:48:f8:72:1b:42:e0:14:c9:7f:5e:05:95:aa:c4:71:
3d:5f:86:e7:42:a5:b9:a0:20:c8:bf:cd:14:9f:25:a1:81:73:
e9:73:f8:68:27:f3:9f:5c:74:5c:05:ad:1b:3a:66:01:d6:5e:
61:7c:77:83:46:a4:55:d2:e0:fc:36:38:b7:07:14:c7:4c:27:
db:1a:d2:e9:63:fe:70:7e:56:c0:00:29:05:00:18:ee:67:b7:
d0:b5:22:3b:a3:35:cf:06:73:28:d1:63:01:e4:62:a2:d5:88:
5b:8e:bc:b3:87:df:54:be:c5:92:eb:3e:b2:29:a9:1c:a8:bd:
b5:83:f8:26:f1:55:ac:f2:b7:c8:c8:69:1b:d7:f9:ae:5d:65:
6b:f9:3c:1e:a3:43:a8:91:d1:46:0f:b1:97:df:6a:bd:cc:83:
78:3e:47:03:5a:4b:25:61:5b:21:ba:e6:04:06:f0:6b:e8:3c:
3b:72:f5:ba:c3:7e:33:dd:b4:01:41:85:ab:82:0d:16:2c:fd:
7c:46:3a:fa:fa:de:7d:c2:c1:19:c2:4d:f6:e1:74:49:c5:73:
2e:25:66:b0:4e:cc:6c:a8:35:0b:ae:dd:55:e3:f2:59:bf:18:
cb:b6:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:45 2025 by rpki-client