Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: 7Urrrn86mAeLzs4PWpyvRaVTiedk3wa1kGu2ruU5xBA=
Subject key identifier: 31:6D:B8:18:FE:77:52:0F:3F:FF:A9:B8:D3:9B:B6:FF:37:F7:AA:D8
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 019A4EF535E6E9DE64F54CB8E1380292D44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0E6D
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: rPgTLQbDVBxwWqDa9LOtn5AXFDMdoDAPN5NVT7hPcXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:35:e6:e9:de:64:f5:4c:b8:e1:38:02:92:d4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=316db818fe77520f3fffa9b8d39bb6ff37f7aad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:0a:94:95:42:0d:96:78:3f:2d:83:d1:8e:
51:7b:28:f4:7f:c2:17:ae:80:a1:e7:7f:27:76:47:
a9:32:14:4d:a8:4f:47:7c:07:19:8e:a6:56:2b:03:
23:e6:e4:10:74:7b:86:86:79:45:c6:6f:06:85:db:
1a:fb:ca:e0:36:c6:bf:e1:94:07:ea:4f:07:a1:d4:
ad:99:ac:fb:f8:ff:9c:4a:6f:57:52:44:90:ee:86:
ce:97:c8:9c:0d:6b:4f:c8:a8:92:37:e4:e7:b4:f0:
14:60:0f:41:4e:ab:89:18:9c:7b:a7:b0:d4:d2:de:
6a:30:47:cd:6e:28:95:fc:8c:a3:75:7e:bc:34:3e:
30:04:d6:35:e7:bc:d2:9d:3c:bd:3d:19:f1:65:92:
4f:35:c4:eb:a7:37:81:0c:ce:aa:ec:c8:91:13:77:
68:b8:f0:58:a1:8d:74:80:7a:cf:ee:f3:51:c7:c9:
89:eb:77:61:c1:67:8f:10:6c:a5:ea:c4:6b:4a:68:
48:e4:c3:03:78:02:14:d1:dd:db:78:6c:41:15:01:
2c:06:7b:8c:74:ee:67:2a:ce:74:d7:3a:fd:d4:0a:
c1:bf:5c:76:22:29:bf:0a:f2:d0:8e:c1:86:32:11:
05:ef:0c:84:ab:1f:be:3a:76:f7:b9:5d:dd:d1:b7:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6D:B8:18:FE:77:52:0F:3F:FF:A9:B8:D3:9B:B6:FF:37:F7:AA:D8
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:19:12:cf:ad:d4:d3:79:01:45:27:4f:3b:ed:a3:59:df:
dd:75:a8:f6:66:e3:7f:29:f0:89:45:a4:0c:92:62:af:17:fd:
32:74:8b:24:a5:5e:eb:38:70:ad:bb:bd:f6:d4:8a:04:fc:32:
33:be:fc:54:b9:88:06:75:7b:9b:75:b1:3f:73:e7:e7:3c:f2:
b4:6e:b3:3a:03:4d:63:58:be:f1:bf:c2:02:ae:44:14:ea:41:
af:86:d3:3e:d8:7f:cd:38:fe:dc:86:2a:d3:01:be:6e:1c:ec:
0c:29:26:11:64:aa:db:af:64:4e:01:89:fb:82:c7:04:7f:3c:
6f:11:23:59:61:90:dc:f9:23:7b:d1:bd:f7:aa:56:be:e0:2a:
d9:b5:b9:d0:d3:e4:4a:a2:98:17:98:ca:6a:9d:b1:a6:ba:fa:
c6:eb:fc:44:93:00:04:58:12:51:54:1d:14:e2:66:ce:dd:93:
12:a2:f2:29:ef:f0:fb:aa:04:26:35:c7:ce:86:fa:87:f9:ad:
41:ac:63:8e:5a:be:bd:76:45:55:b0:cd:9b:f4:06:dd:80:19:
50:df:fb:c2:a0:61:dd:bb:6e:f3:5a:f9:ab:ed:7d:c4:0d:4a:
a0:d9:e9:bf:9f:d8:3a:18:07:46:c8:3c:b0:e6:ed:4f:cd:41:
f6:bd:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:41 2025 by rpki-client