Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: 59ypTluMHwg6fAKvfELOHAdHjjW6JZRoCV2moMLvM3Q=
Subject key identifier: 90:41:09:43:BB:00:6A:74:3C:C7:1B:05:08:01:FD:7E:BE:5D:18:B8
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 019A4F98EE1D37BA2C13D546B4470D4E57B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 05D8
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: QWtuzXnxXqPkNFOMvdkJVBvlKrQUMY7GDkd/QaiSzmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ee:1d:37:ba:2c:13:d5:46:b4:47:0d:4e:57:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=90410943bb006a743cc71b050801fd7ebe5d18b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:a1:1f:50:f7:67:8f:7d:39:0c:96:7f:a2:
03:c9:3e:bb:05:a9:63:50:7d:65:a4:91:c7:39:17:
dd:7b:a0:b0:b8:db:f3:2c:c3:55:fc:4f:07:37:29:
44:75:2c:78:93:af:1b:cd:28:5e:9b:74:5a:4b:dd:
ac:7c:5b:02:45:98:0c:3b:87:ee:19:87:12:e5:b7:
98:27:9a:76:75:44:79:23:92:f3:4d:c0:1b:79:3b:
8e:ac:03:ba:76:9f:cb:27:e4:b1:c0:84:74:f7:e2:
13:83:1b:94:da:d7:22:33:2f:2f:c1:a8:af:66:7a:
52:fc:48:4f:7d:b1:03:be:9f:3d:ef:85:13:c3:15:
c6:05:c7:b8:e1:55:6e:ed:5e:5f:f7:7d:1f:3d:b6:
52:c8:83:db:ed:3d:db:d6:c1:21:fa:ee:2c:e1:ad:
3d:fe:57:c9:83:e0:04:74:7d:c5:a7:95:a9:b6:3d:
e9:de:a7:3d:8d:f9:52:14:87:a1:62:09:d9:ea:3f:
2d:9f:d1:fd:ca:2b:ca:18:86:ee:76:5c:09:d7:38:
c0:69:6d:7a:2b:54:71:01:d5:92:10:5d:10:c6:37:
48:d8:39:f1:36:8c:e4:66:90:8a:fe:41:b0:61:5b:
25:35:b6:de:2f:19:61:7a:93:26:b7:75:76:f8:0c:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:09:43:BB:00:6A:74:3C:C7:1B:05:08:01:FD:7E:BE:5D:18:B8
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:91:ec:67:e3:36:f7:02:e6:1e:58:1a:f3:71:a3:6a:fa:c6:
62:de:35:c2:95:49:67:77:41:2e:14:02:ce:c7:9c:6f:19:03:
48:97:be:da:92:74:b3:fd:af:98:85:2d:8b:2b:6b:8e:8d:fd:
7f:e5:63:51:95:cd:a9:46:77:71:7c:27:30:3c:03:b7:4b:fd:
bc:74:0e:d6:4a:ff:b1:3c:32:17:42:a1:ba:10:d8:c3:98:ae:
87:81:ed:c0:11:ef:3f:44:a4:0f:b1:31:78:33:09:64:8c:5f:
27:75:a7:75:15:b3:fc:55:8e:16:c5:ae:d2:87:0f:cd:2b:35:
d8:3b:fc:97:3d:f6:0f:d0:d4:95:e1:ce:65:73:f2:24:f6:3c:
46:cd:10:57:a7:9a:4d:59:eb:f7:23:91:78:f7:6b:62:15:ad:
d3:b2:40:e2:83:ec:86:89:b6:13:f5:d5:24:3b:3d:83:d1:9d:
f5:51:b6:48:ca:19:5d:fb:df:f6:37:80:3b:b5:43:d5:06:8b:
42:65:9c:3e:50:2d:6b:73:65:f1:a4:6c:9e:84:df:a0:53:8d:
2f:a2:6a:18:e4:35:f5:a8:53:b0:af:62:4f:a6:3b:28:4a:32:
34:01:84:4c:60:30:a0:ac:22:bf:26:dd:18:f0:b5:1c:dc:ce:
56:e9:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:13 2025 by rpki-client