Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
File: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft (raw, json)
Hash identifier: 0VnsKLBU96GHCaC1IwJxxraDy67UTs1qoKfRbWSQPeg=
Subject key identifier: 99:F8:C3:65:63:34:63:03:51:5E:B4:D0:0F:D4:D3:3A:0B:24:48:79
Authority key identifier: 15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
Certificate issuer: /CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Certificate serial: 019A4EF448DEE3FF97DB80C3B58F8474F587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
Manifest number: 09E6
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl (hash: UJcTchEyZBbX3LPEI/TZIuLjCHGNwb0tA3JMoa2ewCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:48:de:e3:ff:97:db:80:c3:b5:8f:84:74:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f6130d99af9320775ad60b0f4c989e3e5977c9
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=99f8c36563346303515eb4d00fd4d33a0b244879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:49:c8:04:d6:12:8e:e3:fd:62:f0:5e:06:
cc:d0:89:8c:a0:1f:04:b9:84:dd:c3:16:17:0d:9f:
58:11:53:f9:09:8a:77:91:3c:06:93:f5:e9:cf:29:
04:b6:87:1b:c2:c5:66:52:72:2f:5e:75:ba:83:0d:
d3:70:57:00:74:63:33:d7:9a:f7:65:93:a4:c4:11:
de:c8:46:01:74:73:c0:09:0f:a7:73:4b:b4:f7:b6:
38:04:8c:6e:ba:77:68:71:a3:f2:d9:29:22:97:c5:
25:df:fc:ed:6b:48:7a:37:35:15:2c:bb:ef:77:a7:
3c:2f:c1:14:9b:34:f9:27:ee:57:b3:cd:7f:fc:a7:
a4:d1:9e:ed:dd:5b:80:42:55:3d:cc:db:e4:ce:4e:
e6:f5:0e:ed:47:20:d8:b7:b3:63:d5:20:2f:01:0b:
c8:b3:d6:e6:5b:68:d5:a4:26:4e:02:66:c0:9f:ef:
5e:74:b1:04:93:12:6e:3c:56:e3:b3:33:1f:37:16:
02:93:8c:cf:b3:71:8d:2e:ea:6d:bc:5b:81:8f:7c:
64:9e:6c:3b:ba:17:71:24:63:e0:fa:45:71:9a:95:
98:82:bd:72:ef:f5:fd:2d:7b:c4:b3:8a:cb:77:38:
70:4d:14:c2:f8:6c:17:17:32:da:52:fe:c7:b5:6c:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:C3:65:63:34:63:03:51:5E:B4:D0:0F:D4:D3:3A:0B:24:48:79
X509v3 Authority Key Identifier:
keyid:15:F6:13:0D:99:AF:93:20:77:5A:D6:0B:0F:4C:98:9E:3E:59:77:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e064e7-18e5-4b7e-aa1a-1f8676f4c17b/1/FfYTDZmvkyB3WtYLD0yYnj5Zd8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:9f:f1:9c:09:d7:94:da:11:fc:19:81:b5:8b:73:53:3e:
f5:1b:c5:5a:c2:cd:9a:d6:94:fa:00:d8:e6:fc:26:fa:c3:10:
36:6d:03:69:18:4e:02:ff:17:d2:c5:45:cf:4a:b3:60:ac:69:
a2:fc:1e:ac:08:69:53:70:25:28:23:7f:4a:23:ac:b7:8e:9f:
ed:8c:84:79:ff:e0:3d:69:78:6f:ec:de:50:52:59:ed:14:4a:
33:05:99:05:76:a2:b6:65:74:25:0a:30:7e:0b:b9:04:1f:f7:
9e:54:c8:69:34:e6:54:c2:a0:d5:7f:d1:7a:10:22:73:98:61:
db:8f:88:5a:2f:ad:7d:d2:99:31:c5:d5:fd:3d:a7:a7:9b:2c:
9c:46:54:39:9f:56:4b:df:27:26:6b:60:d7:5d:78:fd:49:84:
20:27:d0:fe:98:9b:3d:4d:47:b0:e1:04:b1:54:12:c1:2a:ac:
74:51:68:ef:4c:49:95:6b:ba:84:ea:8c:08:e1:25:da:66:c7:
d2:4b:c2:d1:d7:05:04:c3:2c:32:9d:ed:a0:b0:5f:ea:44:7a:
d9:93:a6:1a:5a:5e:5b:c3:96:91:a1:d8:e1:ac:60:3c:71:75:
7a:03:e0:0b:27:cd:a5:e9:3e:c2:a8:ef:06:85:0f:5a:47:3c:
48:33:41:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:29 2025 by rpki-client