Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: ZBFE4v0R89etzNd1abrelgn+LF7UM+YnP3UsT8Y9sKM=
Subject key identifier: B6:89:76:CB:67:31:38:D6:B5:57:E2:61:A9:E9:DC:29:AC:D5:76:75
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019A4DAAFADD475A23DE3B978ADCD36668B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 1552
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: WYivhroB2iULkyfvvoLWV6qH23E4YLviBFJa/UuObmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fa:dd:47:5a:23:de:3b:97:8a:dc:d3:66:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=b68976cb673138d6b557e261a9e9dc29acd57675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:67:70:d4:97:ff:38:ae:6a:8f:37:a7:90:
0d:bc:ff:bf:ad:4f:33:40:d9:16:f1:ca:ff:1d:39:
e7:4b:7d:9f:77:25:6e:e5:e0:1e:e7:57:21:18:9c:
3f:55:08:4b:d2:a5:90:c5:fe:64:b5:c8:38:9d:90:
cf:4a:ef:5c:a4:c6:f0:6e:15:87:94:04:64:01:57:
64:0e:c6:52:90:c4:1a:39:a0:4d:ed:2b:58:13:15:
a0:0f:d7:1a:4d:ce:2e:e7:f8:07:a7:c4:d0:b7:e4:
8b:ee:83:8a:93:3a:f0:e7:c1:bd:fb:99:70:f6:fb:
ee:2f:3b:c5:32:9e:40:bd:ec:1b:ab:d5:4d:9f:95:
c6:de:bb:b3:04:72:f8:4b:75:6c:03:cc:a6:f9:86:
49:40:8d:46:86:62:d4:1d:9e:b2:1f:63:3e:7b:8b:
92:3b:a8:42:68:d5:1e:fc:c8:bf:a7:ff:c7:cf:a2:
d8:3d:df:f6:20:d3:81:a5:55:37:f9:20:91:6a:1a:
8d:8f:c7:ca:75:f7:90:26:a7:19:29:ca:bd:91:42:
ec:21:0b:7f:c0:fd:d5:fa:69:a2:d8:9e:c3:bd:c5:
95:3a:d4:d1:f5:66:9e:fc:ff:08:d0:01:b6:7e:f3:
ae:c1:c7:e1:28:e9:3b:2a:64:a4:1d:58:81:80:9d:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:76:CB:67:31:38:D6:B5:57:E2:61:A9:E9:DC:29:AC:D5:76:75
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:5e:00:a4:10:9e:8c:54:54:24:39:1f:8a:bf:ed:79:94:
95:70:f9:c1:01:9e:f8:e9:86:42:29:4b:fc:03:62:52:bc:49:
c4:2d:d4:64:9a:9d:3c:a9:30:d8:e5:b9:ec:b6:e3:82:5c:6d:
e6:99:bd:e5:9c:e1:4b:60:28:5c:cd:e2:89:1c:13:e7:b9:d3:
b2:a9:77:99:81:14:2f:43:09:41:3f:b0:16:4d:ba:9c:a6:f1:
69:f8:68:30:a6:f0:14:c7:7f:f1:5d:af:ba:5a:39:bf:4b:5a:
8d:6e:a9:cd:61:32:3e:ef:3a:d5:07:01:ce:7f:7c:ba:3b:79:
55:3f:54:57:15:ee:95:d6:fa:e6:2f:07:de:f7:4e:5c:a7:ae:
47:32:d9:fe:15:cb:e6:61:9c:60:9d:be:00:22:23:e8:f3:e2:
b4:15:6d:1e:2d:24:cf:29:0b:89:ed:00:4f:c2:69:c4:56:3a:
bf:52:46:4b:9e:86:7f:0e:07:d1:2f:95:fe:49:42:1a:30:af:
f6:8b:25:54:38:02:0e:29:fa:de:be:17:fc:78:58:d3:e4:39:
70:ac:e5:1f:0a:00:02:0c:bc:10:81:90:83:b4:30:1e:df:ad:
b9:9f:0b:5f:f2:57:7c:f2:5d:a1:4d:1b:b0:3c:67:97:fe:90:
f8:21:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:51 2025 by rpki-client