Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: adaKaMR9d3xR8GHeOv/98bpfPhBJZn8xr19ZY5wHvwE=
Subject key identifier: 59:0E:B3:48:35:A5:2B:24:25:DD:C2:DB:F2:A5:0E:63:CD:43:DD:3E
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 0199FD341BDCF202748BED4F2DC44732E253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: wFZrQgLrRjn70j4vPBHB87IPiZvNFS3GsBrq52hP1L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1b:dc:f2:02:74:8b:ed:4f:2d:c4:47:32:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=590eb34835a52b2425ddc2dbf2a50e63cd43dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:08:90:cf:49:5a:ab:bd:e0:f9:26:0d:43:
3e:52:69:57:77:01:86:e9:aa:9f:46:5b:7f:bb:6d:
ae:b8:e6:18:e6:c3:fe:d6:55:22:11:44:f9:18:75:
f1:5f:0f:6b:b9:32:c0:88:b6:25:90:9f:f5:a7:b3:
10:87:84:a4:b4:68:8f:94:13:2e:fe:ed:ec:06:55:
0e:c6:40:0b:32:09:60:ef:6c:9b:b4:42:cd:73:0c:
a0:67:70:54:b9:c1:bf:f2:fc:72:4d:0f:25:44:fe:
4c:33:70:2d:9e:e2:58:d2:61:85:d4:db:1a:58:97:
f3:bf:36:70:54:3a:92:6f:1e:b7:91:b6:89:91:38:
7c:1d:fd:e6:dd:22:1f:dd:3a:eb:d8:27:d9:4a:44:
44:73:ff:69:55:9d:9a:25:6b:2f:ac:62:42:f3:28:
50:09:62:57:f1:c1:9c:2d:ac:32:6c:66:31:a8:c7:
f1:74:52:59:37:ad:17:b5:de:2d:ab:4e:eb:42:e7:
69:3c:26:95:95:44:62:22:fd:19:9e:bf:1c:d5:dd:
8e:b3:5d:66:47:75:7a:2e:42:8f:46:82:af:7d:3e:
93:56:60:57:fc:be:62:8f:c3:a1:a6:0e:29:c5:d2:
ee:0e:ee:47:d7:0e:bd:42:c9:45:34:02:e1:8c:c8:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:B3:48:35:A5:2B:24:25:DD:C2:DB:F2:A5:0E:63:CD:43:DD:3E
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:f9:7f:5a:65:0b:76:48:5f:43:95:39:f8:ca:9d:bf:0c:
34:a5:41:98:1d:61:1b:09:a3:b8:8a:1f:fe:60:21:bc:00:9d:
08:0b:b8:aa:d3:6e:94:8b:ef:fd:d4:3d:d8:92:20:10:97:79:
c9:66:12:1c:06:50:21:9e:46:19:fe:2d:0d:41:ae:c9:be:85:
05:74:a4:3a:e3:f3:69:e3:17:2d:a5:70:43:25:cf:83:7f:53:
53:61:58:9b:61:05:ab:51:94:ec:b8:c0:98:21:9d:12:13:92:
38:f0:5b:7e:9a:60:b1:2a:b7:1d:3b:d6:05:4b:5d:ba:9d:c1:
ce:8c:e9:59:1d:96:94:74:b3:ec:c2:6b:21:11:e4:9c:5b:d6:
a8:8e:ac:57:47:ed:3f:22:4d:0f:ea:96:85:e6:1c:f6:cb:41:
73:35:80:00:26:29:95:e2:fe:78:f1:cf:95:b7:87:97:20:61:
2a:c3:df:14:72:a9:c0:38:f6:22:85:9d:59:48:a3:1c:c5:9b:
f2:3a:b3:e9:ea:5a:6c:50:eb:30:33:97:26:6a:86:69:aa:d3:
60:fb:9a:06:63:d3:7d:59:18:27:15:7b:08:02:ab:53:d9:94:
65:04:68:2e:88:db:dc:f8:bf:f9:c2:d7:06:2a:dd:cb:7d:37:
ee:0a:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:58 2025 by rpki-client