Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: me+edLmHoQz4OQaJOaeL1Ssz12E68ym3eZb6L2I6v8k=
Subject key identifier: E5:F3:93:E1:6A:AA:94:FF:32:08:33:F0:23:33:A6:A0:8F:1C:0E:37
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 019A4EF54193A7AE93E6001A7494E1E6495B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 07A4
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: L09NhHCziu2KA0wkMhJFKfE31EdwgR/PcSKU0N9Gjz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:41:93:a7:ae:93:e6:00:1a:74:94:e1:e6:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=e5f393e16aaa94ff320833f02333a6a08f1c0e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:eb:2c:2f:a1:32:af:ed:bc:33:ea:f8:c1:
8d:2d:9a:7a:c8:cb:d6:d6:85:65:bb:ec:30:b2:d6:
3d:85:e7:ca:5e:be:e2:58:b4:d6:25:3d:69:be:67:
68:42:f6:ce:81:96:eb:82:3f:89:b1:14:55:2d:19:
88:6a:f9:85:0c:3a:11:0d:ab:16:b7:28:d8:ab:65:
88:ad:3a:94:86:f5:24:11:4f:f6:c3:f5:ab:95:22:
90:65:5e:52:31:13:f1:79:41:15:a4:ac:ce:44:d3:
3b:86:df:62:7b:a0:e7:1e:f1:97:09:19:c2:4e:d8:
c2:52:af:56:7a:7c:ba:a1:94:e8:0f:7a:17:e8:04:
0c:eb:e6:2c:f7:59:26:ae:76:f8:fa:1c:7e:9d:5d:
1e:2c:80:e5:c7:e5:a5:6e:05:9c:75:a2:a0:02:85:
38:20:1e:ff:82:34:10:e9:b0:06:b7:32:54:6e:e1:
51:53:e0:e6:8a:78:d4:28:1a:52:32:11:d8:fd:f7:
ce:93:98:f8:dd:0d:71:d7:84:c3:43:5d:8a:10:0d:
78:95:1c:72:b0:6f:33:f7:4a:f4:b9:72:3d:89:a3:
63:03:bb:b5:3c:43:0c:ef:b6:04:5f:9e:b9:96:96:
68:bc:6c:62:3e:33:4f:b6:93:b9:e1:8f:cb:35:89:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:93:E1:6A:AA:94:FF:32:08:33:F0:23:33:A6:A0:8F:1C:0E:37
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c0:46:a2:48:ac:61:63:be:84:80:05:2b:07:f7:cc:22:ee:
e2:c4:fc:80:3a:65:97:67:3e:0d:cf:7c:5f:bd:a3:20:a8:c3:
53:8d:a6:92:48:c2:6b:b2:23:1f:99:24:e6:85:c8:f5:f1:9a:
3e:f5:8f:57:e4:df:c1:3b:57:a5:77:f9:04:c9:49:35:7c:46:
9c:1e:cc:ba:ad:bf:08:12:a8:1a:6b:b3:19:fc:7c:a6:ea:8b:
c7:7a:b6:cd:f6:0f:1f:ee:dc:91:a8:bc:a5:0c:89:86:c1:55:
20:71:80:ac:56:70:7a:d4:db:10:72:f7:44:fb:41:df:d9:9c:
1c:09:a5:c6:21:a8:f1:57:aa:0b:b5:04:04:cb:94:a9:12:57:
f6:80:ee:96:a8:dc:5a:dd:34:ca:cd:fc:d2:c8:75:d9:aa:df:
18:f6:03:50:94:da:f2:3d:1a:c3:8a:5c:82:42:30:11:13:f7:
9e:af:4b:4a:23:a8:d4:58:6c:0b:82:34:1a:3e:69:a8:18:4a:
d6:50:fb:ef:7c:92:54:85:21:83:aa:2e:eb:e1:3d:48:da:d8:
ee:b5:17:f5:d1:1b:4a:9b:fd:71:1a:cd:3f:e8:e3:41:a3:cf:
80:30:ff:7b:4d:f4:0b:5d:29:bc:3b:87:7f:d4:8e:83:a7:e6:
80:f2:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:19 2025 by rpki-client