Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: COc87GOf58dDv45FqgFbeMXMZBmwiIHuP4Go67eaJu8=
Subject key identifier: 66:C9:35:EE:6D:A0:12:AF:4E:8B:F6:01:E1:A5:95:7F:EA:91:EB:2A
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 0199FBEC099D654119862FB9D5C4B5FBB292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 01B3
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: 4QtpTkWk3s4v13x6ZatsV0twrrfFTTnyf4S3oF6Q+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:09:9d:65:41:19:86:2f:b9:d5:c4:b5:fb:b2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=66c935ee6da012af4e8bf601e1a5957fea91eb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:8c:18:c8:f2:90:1c:20:42:6d:d1:c6:ef:
1b:be:a7:52:b8:39:f4:85:ba:05:13:15:bb:e0:14:
24:10:ba:89:80:bc:57:3e:90:6d:a1:87:d3:03:f4:
76:e5:11:81:d7:b9:1d:fd:79:60:07:ef:4b:e9:3b:
0b:1b:e9:61:d3:6c:7d:3c:cf:b9:e9:23:78:69:ba:
4b:f9:80:90:9b:e0:e2:82:55:c2:ad:88:af:8a:cd:
03:e5:95:00:6e:d0:3d:fb:95:85:d0:a5:b4:81:6c:
cb:a5:a0:e9:33:1d:15:23:0e:85:d2:ad:31:90:a1:
ea:a4:de:83:64:f0:e3:ef:63:ac:1f:1f:8f:db:83:
a5:5e:95:1e:d8:cf:26:0c:66:38:f2:dc:27:d1:d1:
ad:77:66:04:f1:40:b3:17:71:44:d7:4f:3d:b3:5c:
c7:1b:01:b9:c9:50:78:ab:0b:4c:f3:8f:60:b1:0e:
77:9e:5e:72:91:aa:34:df:9f:e9:62:42:e6:74:2b:
d1:52:35:85:8b:68:77:33:17:8e:81:4f:f6:82:dc:
21:da:af:ab:4e:93:13:92:3c:64:84:f6:48:9a:d9:
e9:4d:a6:f6:5b:6a:ab:86:38:fe:cd:45:36:f1:3f:
94:1e:ed:27:c7:0a:ae:50:82:b3:5c:8c:85:8e:74:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:35:EE:6D:A0:12:AF:4E:8B:F6:01:E1:A5:95:7F:EA:91:EB:2A
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:d6:2d:c6:7d:26:f6:98:f1:c4:d4:57:a6:0a:17:02:4f:
55:a6:cc:47:3e:6f:9c:a4:76:ec:59:80:10:30:11:0a:4e:cd:
d9:54:72:a7:ab:b0:ff:59:18:6f:9d:c2:c3:03:9f:24:67:9b:
8e:45:9c:42:8b:11:aa:b9:8b:37:bb:96:89:1f:1d:d3:ef:cc:
97:e5:b0:57:f9:61:26:41:64:c2:44:60:b7:ce:9f:ca:ef:3d:
e7:46:72:bf:30:db:00:7a:3b:46:0f:80:ba:12:a7:d2:96:51:
af:28:84:f2:ef:3e:8b:46:67:44:a4:53:38:02:b0:f2:df:fe:
0d:a3:8f:2b:7d:7a:3f:09:2f:5b:80:43:61:d0:51:26:a9:d7:
ac:32:df:90:b0:7c:8c:b7:80:0f:e2:b6:0d:56:ee:a1:5a:9e:
32:06:10:0a:02:24:99:99:eb:f4:45:f4:3d:32:49:96:fb:54:
b3:a6:f6:a2:d6:67:75:0b:40:71:5a:f0:4c:f9:45:5e:45:83:
40:46:81:c8:a4:a0:14:7a:26:2f:6e:52:54:5b:f9:fd:d9:f0:
da:37:d2:75:0e:ec:3b:b2:f2:82:99:7d:70:02:30:90:e7:58:
9b:ac:b4:96:05:79:2f:2b:9a:a8:c2:44:f9:2c:33:79:71:9c:
42:cf:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:32 2025 by rpki-client