Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: k6aLl70WHPraFsMCAYRrUp6NNs/aQDTXlxMK4Ayb2+M=
Subject key identifier: 8E:BD:11:5E:1A:19:C0:50:87:1E:3C:FB:77:42:DD:D1:31:66:03:3B
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 019A4FD05CC98E8952A81F960D81EDEEB365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 065C
Signing time: Tue 04 Nov 2025 17:00:46 +0000
Manifest this update: Tue 04 Nov 2025 17:00:46 +0000
Manifest next update: Wed 05 Nov 2025 17:00:46 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: fET88qoen26kN/enHQWw7r1h+gDF8xS4yZmtoI5n5IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5c:c9:8e:89:52:a8:1f:96:0d:81:ed:ee:b3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Nov 4 17:00:46 2025 GMT
Not After : Nov 5 17:00:46 2025 GMT
Subject: CN=8ebd115e1a19c050871e3cfb7742ddd13166033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:00:29:17:43:72:c6:fe:ac:46:93:55:e1:
65:29:37:3a:45:d2:4d:6d:a5:fa:ff:69:72:3f:6f:
49:16:a3:64:84:b0:1a:8d:61:52:cb:b5:0f:46:1a:
75:80:b1:74:ed:a6:11:96:e8:c6:c1:ba:e4:c5:2a:
d7:66:e2:49:51:3e:51:3b:5b:0b:e4:b8:2a:2e:f2:
d4:91:0a:49:a7:3b:38:3b:03:f4:b6:c8:6f:ad:4d:
24:6c:d9:97:df:0d:52:ac:4d:de:9a:3e:4b:a0:e4:
93:42:24:8e:e3:24:18:da:86:5e:66:ad:d6:77:7e:
3a:cd:20:ee:df:ed:67:79:ec:9c:89:67:e1:3a:8e:
12:39:42:0b:06:f0:63:4a:ce:28:1e:6b:89:2a:1e:
ed:fb:bc:6d:c3:c5:1c:04:7c:16:9c:c9:7f:f6:7c:
98:d9:a0:91:ff:fc:6d:61:1f:3e:26:82:b8:7e:38:
a9:d6:25:71:7a:21:7b:a7:16:8b:c6:09:9a:5f:50:
71:ff:df:8d:85:5c:e3:9a:76:99:dc:2b:4c:57:cb:
21:8c:dd:86:0f:e8:50:f6:b6:df:c0:bb:67:78:d3:
c2:12:9c:ad:7b:fe:13:44:4e:19:d1:8e:1d:98:19:
64:82:74:f6:6d:e7:d0:85:93:c0:61:aa:b1:5f:80:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:11:5E:1A:19:C0:50:87:1E:3C:FB:77:42:DD:D1:31:66:03:3B
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:04:c7:28:41:bb:70:87:70:94:c6:d7:36:7e:02:74:2b:60:
84:e0:8c:78:12:32:3b:55:e1:ce:98:24:f1:76:6d:01:a9:38:
c0:dd:06:91:57:40:23:8f:2b:de:70:15:75:6f:f2:03:4c:45:
13:65:35:6d:b1:08:6a:2a:06:e3:a6:45:63:f0:ff:e8:34:64:
00:a1:ca:7f:25:d2:a5:f5:bb:67:99:a3:af:9f:7a:eb:de:3f:
0e:c6:27:ed:ce:a9:3a:67:d8:0c:dc:49:55:35:16:dc:22:21:
6e:c7:7d:9a:6d:10:63:d5:9e:e4:b4:94:69:61:a7:b1:75:e5:
75:9b:2a:4b:40:c1:1d:9f:a7:63:c4:07:7d:2d:1a:1d:d3:e3:
8f:97:4b:6b:94:43:66:f6:d4:47:af:53:38:a8:85:08:d9:13:
9b:d2:27:d2:43:26:af:60:b2:02:89:8a:f0:ba:bb:1a:13:b2:
20:56:3b:7e:0e:a1:01:78:d9:c2:bf:2b:b2:1a:b9:cc:bb:c9:
f7:3a:72:a3:ba:68:24:27:a8:4a:59:5b:6e:14:1b:86:9d:7e:
80:a8:7a:fc:b8:c8:69:bf:10:5a:69:e2:e3:7d:5c:e9:ad:7a:
39:2c:f1:7a:4b:d9:87:85:ce:41:ef:aa:88:cf:f5:a1:8e:86:
36:56:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client