Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier: ZQedTj6f8k3F2ggZ9F8nPxmeZkOfMjvNol2Tq5U10Nk=
Subject key identifier: 4B:34:6E:98:1E:C0:31:7E:10:A0:C9:65:03:C3:48:F7:EE:7F:1A:F3
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial: 0199FBEB35AABF2F2ABD3B2731D326DD9B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: DZ44iu0cePlA1UmAvBIshcjRkLeQpLqS/gt9qPRvO3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:35:aa:bf:2f:2a:bd:3b:27:31:d3:26:dd:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=4b346e981ec0317e10a0c96503c348f7ee7f1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:c1:36:c4:35:bc:a7:5b:64:45:b5:81:fd:
61:65:54:78:6d:0c:4c:4c:40:6b:fe:c8:ce:1e:fe:
9c:cc:29:a6:3d:c0:a6:8b:2b:24:3b:64:d2:0a:9b:
0b:90:bf:a8:0f:b3:f0:d1:4d:e4:15:cd:20:d1:56:
b7:d2:c1:d8:87:02:69:5a:48:14:52:24:28:10:90:
24:35:98:6e:1d:1f:d8:49:23:54:0b:7c:fa:fd:84:
19:bd:fe:71:0c:33:80:a1:5c:52:ed:02:65:23:80:
2c:c2:23:a3:21:23:75:b7:c5:67:3d:02:dc:93:57:
b0:e3:c3:dc:a8:c2:c3:4f:0e:b0:31:51:a2:b1:86:
f5:a0:65:3b:ee:ed:50:34:59:d0:40:58:44:43:5b:
1f:ec:ab:46:cc:1b:ed:fb:42:45:0f:06:ba:4c:12:
34:a8:9e:8c:4a:69:87:a6:66:50:39:48:23:d3:48:
1d:e2:23:8e:57:f1:95:6c:b5:63:be:40:0a:09:07:
3a:40:da:fd:9a:01:7e:e7:e1:d8:80:e4:7f:1f:12:
bd:c2:32:b3:71:bb:0e:a5:cb:05:18:01:c2:24:71:
30:52:ed:0b:45:e0:00:fb:bf:9c:25:35:a2:aa:ba:
f5:7a:38:bf:79:7f:c0:31:28:26:36:f0:c7:b0:3a:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:6E:98:1E:C0:31:7E:10:A0:C9:65:03:C3:48:F7:EE:7F:1A:F3
X509v3 Authority Key Identifier:
keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6d:37:02:99:92:07:1c:96:2a:73:cd:d1:88:6f:9c:82:e9:
57:f7:57:d5:9f:5e:2f:0e:01:fd:a7:f3:e4:2a:07:fb:4b:57:
7d:83:89:b4:8a:41:d5:9a:81:4e:5a:8d:9b:28:a2:7c:8b:54:
39:22:3d:c7:52:3e:04:ad:53:bb:03:8d:03:32:52:2d:54:44:
2a:7a:91:45:b0:2e:5c:ae:e2:06:16:a6:5b:d4:39:1f:6b:aa:
92:a1:9b:65:e2:91:82:bf:88:6f:e2:82:da:8d:14:7a:a0:89:
3a:26:7f:a6:90:29:0f:49:a7:e6:b6:cd:9f:5d:b1:07:da:c8:
62:d1:d9:76:91:4f:d2:e3:6f:7a:a4:21:75:92:22:1b:03:77:
4a:45:0b:98:2b:6f:47:72:d5:97:1b:02:31:a2:e7:c2:4c:90:
26:b6:5a:f8:d7:6e:e7:1b:ce:7c:5c:f0:d5:f3:09:ad:bd:97:
ce:58:49:b5:17:a1:83:03:cf:51:38:af:d2:c1:e6:b7:4b:c4:
bb:b0:4c:1a:49:2a:25:01:a7:c2:06:bc:44:50:84:42:5d:64:
15:82:64:55:3c:f0:39:d5:e7:3d:f8:a8:e6:70:56:a7:b9:78:
3d:09:32:06:0c:ff:8e:91:a1:e4:4d:6f:82:e7:05:07:a1:a7:
6f:92:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:59 2025 by rpki-client