Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: SlwGUvWBC6+f4YDigmkvYLhKzRj+G9ip9oAU7aeentQ=
Subject key identifier: F0:AB:54:AD:F6:D6:C6:6A:29:47:2F:34:00:63:3C:62:C9:FD:D0:1A
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 019A4D06EE5CCC6740CF022666B721195320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 0BC3
Signing time: Tue 04 Nov 2025 04:01:31 +0000
Manifest this update: Tue 04 Nov 2025 04:01:31 +0000
Manifest next update: Wed 05 Nov 2025 04:01:31 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: wdWpXeNesjQLtNfJEAhO/8i/TpS45X7gSBRwYmN+dfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ee:5c:cc:67:40:cf:02:26:66:b7:21:19:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Nov 4 04:01:31 2025 GMT
Not After : Nov 5 04:01:31 2025 GMT
Subject: CN=f0ab54adf6d6c66a29472f3400633c62c9fdd01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:9e:c6:a7:1f:9b:0b:c8:f7:34:f9:60:fe:
be:b8:66:f5:18:d7:50:17:cb:ff:a3:e9:a2:72:57:
3a:72:ca:6a:05:2f:cb:99:92:eb:c7:0b:66:73:66:
4c:be:e5:16:b7:a7:d6:a4:16:a7:cd:3e:2e:b9:b2:
5a:c1:7a:b3:87:c3:f0:62:c8:47:ed:1c:21:9f:47:
db:c8:fe:66:8c:2a:1d:68:e2:6c:fa:eb:11:ff:26:
ac:04:69:0f:0f:25:c4:87:5e:7a:f1:c6:b0:1f:83:
2a:2b:17:87:94:8c:66:cd:3a:31:25:30:ec:0c:67:
d3:f6:d7:33:27:4b:14:13:73:34:84:57:a5:31:dc:
89:25:53:c0:d2:31:b9:74:5b:5a:e4:ae:62:e4:d5:
1c:50:69:4d:d9:d2:3a:ea:da:94:31:9c:68:89:48:
c7:9c:0b:38:db:64:fa:b2:aa:68:19:58:87:14:56:
26:0d:9a:91:49:37:c6:82:76:ee:71:4e:50:e3:9e:
1b:13:fa:7a:bd:9b:2f:e5:8f:c9:6b:1d:f7:35:ec:
43:49:a8:08:e1:16:9c:22:b1:db:5d:3a:db:4b:67:
a0:ed:9c:85:ba:2f:42:11:59:59:3b:53:5b:76:db:
4c:b3:54:f5:f1:cb:73:7e:a0:3f:b8:ba:48:d7:01:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:54:AD:F6:D6:C6:6A:29:47:2F:34:00:63:3C:62:C9:FD:D0:1A
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:da:ae:07:0a:63:0b:80:9b:d0:27:8f:02:cf:bd:14:b4:94:
31:1a:46:90:76:bc:0d:03:06:fe:83:e6:af:21:49:a2:3f:1b:
6c:b8:5c:ca:d5:08:bd:ae:49:94:8d:91:4f:a7:c7:1b:97:5f:
32:3c:0e:93:de:0f:10:e8:24:db:d5:6f:cb:40:f1:8c:a2:56:
3e:75:50:cd:6f:49:bf:f9:2e:8a:4f:39:67:b6:e0:76:37:de:
66:13:c8:b3:f5:52:8f:6e:7b:8a:7a:8e:28:8a:4b:d4:24:11:
3f:09:4e:85:dc:66:c3:72:96:92:7e:bd:bf:55:58:5c:69:30:
38:2f:3b:01:63:ab:ab:1a:21:e3:b6:c3:8e:52:f1:4a:ee:8b:
59:58:f5:01:5a:50:69:6a:04:dc:0a:13:bf:93:65:1d:a2:8b:
40:81:56:e3:70:ae:68:69:20:12:de:ad:03:56:35:14:3c:06:
64:a6:12:b9:3b:26:51:78:2a:f9:07:8b:c1:d3:70:69:b2:10:
df:5e:4c:41:85:7c:4e:76:18:bd:a8:c5:56:f1:27:9e:b2:5c:
b1:12:bd:98:ad:89:ea:b2:d4:84:4c:fb:93:74:b7:a5:6d:0c:
9c:f4:67:ad:ef:bc:44:28:48:29:52:49:c0:03:a8:7a:d1:85:
92:45:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:36 2025 by rpki-client