Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: riYPVoHrrGSgPo8+znw7xtI0XLdw5d8hfYLD4Eba29E=
Subject key identifier: E3:7B:C1:DF:EC:77:25:16:D6:68:6B:F4:87:49:57:DF:70:DA:96:2C
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019A522C6BF30FD12C5398F942B33E39A94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1464
Signing time: Wed 05 Nov 2025 04:00:34 +0000
Manifest this update: Wed 05 Nov 2025 04:00:34 +0000
Manifest next update: Thu 06 Nov 2025 04:00:34 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: ycRjhiVAmuj2zzn4gQ3+fE0RCzXeZHYXW/SSxa0XZec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:6b:f3:0f:d1:2c:53:98:f9:42:b3:3e:39:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Nov 5 04:00:34 2025 GMT
Not After : Nov 6 04:00:34 2025 GMT
Subject: CN=e37bc1dfec772516d6686bf4874957df70da962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:25:14:46:0b:0d:cb:ee:e0:3c:32:12:50:
a7:ab:13:0c:00:43:ae:4b:a5:57:21:4a:fa:83:29:
65:4c:d3:25:d4:a8:fc:b8:7c:be:77:14:72:3c:37:
fe:9d:ed:2d:e4:49:2d:23:b1:90:da:7b:d0:cf:03:
bb:2c:32:ac:be:58:b5:2c:53:40:a8:d2:82:fa:ac:
2b:fd:73:8e:8c:a4:2b:62:39:ec:f0:ba:12:cd:3a:
d8:5e:d4:e5:ba:0e:c1:c2:1f:01:bf:bc:22:bd:1d:
86:b9:b9:cf:5b:5c:56:83:e6:c0:78:00:13:19:dc:
56:44:6e:19:58:c5:e5:f1:80:44:47:a8:dc:b5:59:
f5:e4:29:ec:c8:b4:7d:87:de:1b:1b:a7:db:99:a3:
c1:2f:0d:e7:8b:fe:6f:1d:4c:ce:0f:a4:8e:4b:65:
1d:5b:15:7c:eb:90:11:d4:3e:d6:a7:d5:f8:d0:40:
2d:0f:4c:9f:d1:54:b7:0f:7e:39:c6:08:80:df:26:
85:55:75:c8:3e:5a:d0:af:f8:7e:e6:72:2e:eb:7a:
f7:98:c8:31:35:c6:75:5c:95:72:1f:0a:e8:38:41:
c7:5b:c6:95:66:4d:b4:ee:8c:b7:b2:a2:8b:0f:7d:
c1:8d:45:25:f4:e3:36:68:b8:18:ff:f3:e1:a2:9e:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:C1:DF:EC:77:25:16:D6:68:6B:F4:87:49:57:DF:70:DA:96:2C
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:8d:27:a2:fc:0c:cb:d9:24:a4:c3:be:e3:19:f3:f9:7a:
59:f6:3c:80:7d:97:0d:cf:d3:e4:e0:93:9e:33:a8:51:75:9d:
7e:09:ea:64:a1:f2:95:2a:d1:bc:c8:a7:35:b8:06:d3:56:e1:
b3:4a:12:2d:d2:7a:15:74:c4:04:8f:c5:db:13:64:fa:9d:e0:
06:66:7f:06:2a:3d:38:fa:c2:12:f4:02:c7:02:40:77:30:55:
06:e5:67:01:a3:15:3d:6f:ed:70:25:7e:26:45:2e:5e:09:c3:
86:e6:c6:af:db:3d:46:32:ca:f4:bb:22:bc:ac:cc:41:f3:c1:
fd:94:73:c0:43:d8:84:df:c1:a9:6a:01:4c:e9:1e:71:98:e6:
81:a3:7e:c3:40:98:07:89:7a:da:14:3b:18:35:3d:81:57:d0:
fa:af:52:48:a0:d5:46:92:9d:04:54:9f:76:87:87:89:d9:f9:
44:b2:14:dc:cd:33:d7:64:79:21:33:44:d4:4f:f7:93:58:aa:
55:f9:55:36:87:7d:ab:db:a7:57:b2:0d:b2:5a:8b:36:f9:1e:
86:5e:6e:05:20:6f:ff:95:82:35:f5:c5:b0:43:93:c9:c0:e7:
c9:55:27:cd:1c:25:c0:4c:0f:a8:63:93:89:62:3f:50:ff:46:
fa:05:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:17:39 2025 by rpki-client