Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: mNsyWd6FBOOParJmxAJffYdBTfpMJPJULkJLeFCS6qI=
Subject key identifier: C0:DE:D9:86:C7:E3:DB:5B:13:57:16:C4:C5:FC:31:FA:AC:0A:4D:95
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019A4DE226A279AA98E0E9127B3CC07AC700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: fvu5GGRwbQU8i00h+C1jJQ+W8F0mcr0bvQRPyL3CrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:26:a2:79:aa:98:e0:e9:12:7b:3c:c0:7a:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=c0ded986c7e3db5b135716c4c5fc31faac0a4d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:9c:d9:35:f9:f1:f2:38:b4:a4:3b:66:ce:
d0:13:44:ea:d2:7e:77:68:b9:9d:ba:6b:e1:d2:c0:
97:f9:86:07:7b:c5:de:0b:3e:dc:f1:cf:9a:ae:ff:
33:b6:6a:bd:20:fd:0c:8e:09:60:4b:14:89:e3:e0:
fb:5a:e6:c1:a9:48:a1:01:19:a3:b3:62:f1:13:e1:
de:26:e3:38:78:0d:2d:4d:62:c9:b7:51:f5:9c:26:
73:02:44:5b:eb:65:9e:22:e5:e6:bf:b8:55:8b:77:
e1:cf:d2:98:1f:40:79:fb:49:f4:af:4a:56:b9:f0:
1f:9b:b4:4d:9a:99:3c:3b:48:40:a8:22:77:59:3c:
58:a3:04:77:92:50:7d:33:71:5a:84:cc:8e:93:20:
9f:7e:ed:b0:d6:02:20:8a:a8:3b:14:7d:2b:b8:c3:
87:73:ff:d0:e6:76:cc:c1:a7:41:f5:ee:1b:70:26:
3d:29:bc:86:64:68:ca:ab:fc:75:2b:dc:72:ee:0a:
a9:ab:88:bc:db:6f:ed:0f:94:96:de:a3:0a:de:78:
56:8e:c4:75:63:d8:74:9d:82:9a:32:dd:2d:4a:39:
03:ee:18:c1:8e:b0:e1:c5:88:ee:69:46:77:9c:e0:
22:31:39:93:1c:cf:fa:7b:82:7b:43:28:c9:0c:17:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:D9:86:C7:E3:DB:5B:13:57:16:C4:C5:FC:31:FA:AC:0A:4D:95
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:14:e3:d3:dd:4e:c5:52:a4:c6:cd:81:0c:55:9c:74:0b:
ad:4c:d7:6e:e2:ad:31:92:b1:92:09:99:8e:1b:a6:54:c1:80:
3a:ea:31:df:e7:1f:7c:ec:43:fb:72:57:52:e9:86:da:66:95:
21:e4:0d:ca:f3:8c:b0:f3:16:3d:73:90:a6:e9:3b:02:7e:ca:
6c:c7:c4:b0:9e:e2:b8:68:45:af:5b:e0:03:b6:d2:e3:48:74:
a2:21:41:c5:c9:5a:66:58:85:35:0e:8c:97:1b:86:3b:0f:5f:
db:f7:20:58:36:8e:e8:cd:66:4b:7b:6b:46:4f:46:1f:2f:21:
a4:2a:db:d9:a3:f6:91:74:ab:d5:02:cb:57:3b:bf:15:7e:7c:
6d:69:2f:95:e6:ac:5c:bc:73:9c:0c:32:81:63:07:cc:55:c8:
2f:de:f1:21:cc:72:11:b5:cb:de:09:a4:7a:97:83:9a:db:17:
a3:c3:63:9b:64:f2:59:47:01:dd:01:bd:01:33:00:fe:d4:e8:
84:da:23:4f:08:58:87:f5:ef:0d:65:40:72:2d:15:93:ce:2d:
3e:78:44:00:46:61:c3:e7:7d:a9:b3:ab:02:68:60:94:28:eb:
39:6d:93:db:38:3a:df:57:04:ec:05:99:fe:5a:1e:fe:0e:a1:
4d:62:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:04 2025 by rpki-client