Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: SDtwKBjN1BhOdFUdr05JlGGP0GA5Z8rxqLvk0uYNJjA=
Subject key identifier: 52:9A:8A:9C:32:A8:45:DA:97:50:B3:00:5D:6E:F1:46:42:46:B8:F3
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019A4EF5C5862DF6819D5CE8BEEB889774B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: 4A+nuvkZFqxngRUDqdSn/ULUy+loHrC0Ub+rmJL9hY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c5:86:2d:f6:81:9d:5c:e8:be:eb:88:97:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=529a8a9c32a845da9750b3005d6ef1464246b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:3e:d2:85:3c:92:2c:60:69:49:3b:c7:6e:
dd:1c:12:64:b2:fb:f3:5e:83:1c:fa:e6:41:76:dd:
f2:20:9b:b9:31:2e:82:a0:c8:ea:9f:43:49:59:05:
46:51:50:ea:bf:e0:b7:e5:20:35:a5:18:03:cf:6c:
02:b2:71:6f:d5:34:d8:cb:bb:62:1c:00:56:ff:41:
86:ae:fd:b0:6e:29:51:da:77:e1:03:37:e1:c6:fe:
7e:ef:f7:f1:c2:8b:a3:c3:81:fb:2e:d0:24:08:38:
ca:99:33:a5:a7:40:41:48:b9:c7:90:2b:97:9f:0d:
1e:09:bb:f8:78:98:42:2f:cc:5b:a2:41:75:85:21:
ab:c1:fd:7e:a8:91:dd:3e:d8:f1:50:df:f7:69:bd:
0d:38:47:24:bb:f4:fa:40:f0:34:4d:b8:c1:a8:c7:
a3:26:f4:c3:8e:ff:50:04:b1:b3:a2:73:9c:5a:8d:
4c:59:af:99:fc:a4:df:9d:eb:99:bb:6d:2a:21:d3:
af:8a:61:85:27:14:1b:20:94:7b:31:23:c9:de:99:
36:3b:00:51:64:3d:4b:84:21:46:57:01:d3:66:b7:
c6:df:b9:fb:43:3f:83:4b:bb:f9:2f:8f:c1:97:86:
20:8c:82:eb:73:3a:37:f1:64:52:ae:0c:4c:57:e3:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9A:8A:9C:32:A8:45:DA:97:50:B3:00:5D:6E:F1:46:42:46:B8:F3
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:c0:3c:77:7f:a8:d0:ea:15:dc:63:2e:a4:68:f4:e3:1b:
0c:db:42:d8:db:73:ae:92:ab:78:e4:74:ff:da:e7:97:7c:12:
7a:5d:9f:02:da:3d:f1:99:a0:85:71:b8:3b:ff:a1:b6:0d:2f:
0a:8f:93:1e:a0:6a:4f:c6:2d:17:80:ac:42:5a:65:71:9d:cb:
55:75:4e:82:cb:85:e5:7b:65:c4:49:e5:c8:b4:5d:f4:c8:fd:
89:66:e7:32:0c:6e:42:7d:44:25:e1:8c:31:ae:0d:2f:48:24:
be:5b:6b:69:43:68:74:61:3a:42:61:65:af:34:25:f9:49:42:
0b:8c:dd:82:a4:aa:c2:a3:a4:96:4c:7f:75:3a:78:91:3b:de:
33:9d:48:53:46:a6:52:45:f6:4a:88:88:b0:e4:2e:56:29:aa:
3a:d0:6a:b7:1c:db:cd:7b:39:85:f8:c7:b0:03:37:89:44:82:
a8:e2:1d:08:c9:e5:ff:88:c7:51:c3:04:53:f7:22:34:2b:f5:
95:f4:75:19:42:c0:ff:33:34:dd:0b:0c:a9:4a:5a:8b:3b:ef:
15:36:51:bb:3e:82:41:82:d3:59:72:f5:2a:f6:82:09:09:6c:
90:94:cd:1e:e6:23:30:e9:65:8a:38:3e:bb:c9:80:e7:68:94:
eb:cc:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:29 2025 by rpki-client