Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File: Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier: PD6NJZ0tSiaAenIIBAVr4zCr+vtvZJGvrKFlFPaPQoU=
Subject key identifier: 94:C4:87:E0:70:6B:17:F9:89:60:B2:95:94:B7:EF:A1:0A:C6:0C:97
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer: /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial: 019A4E4FF79B89D2855FF2FD6D369284B4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number: 0FD9
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: aph1OZj9Am0F5c7xfr+Kz9lXkpk6NFx5oOHkxvUmREc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f7:9b:89:d2:85:5f:f2:fd:6d:36:92:84:b4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=94c487e0706b17f98960b29594b7efa10ac60c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:2e:27:e5:03:46:cc:d1:3a:24:f4:60:c8:
37:d6:13:65:0b:98:1e:3d:34:52:bc:b0:2b:0b:08:
46:b3:dc:b6:70:15:0d:8f:22:18:68:a4:bd:32:77:
57:11:8f:9f:3f:e1:e5:dd:da:f4:25:2b:5d:fd:de:
6c:2f:f2:0d:05:f1:20:51:11:f5:41:51:90:e9:bb:
90:23:eb:4f:ec:50:5b:64:ed:d9:ab:bb:31:27:5b:
00:7c:7e:b4:9c:74:01:39:cd:28:2b:b3:3d:1f:f7:
63:15:85:40:94:33:6a:e2:38:c0:d5:26:89:cb:c0:
9b:2d:64:8e:19:c1:da:cf:81:72:66:b2:56:9c:70:
22:d3:d0:4c:6b:f9:6a:04:b5:0d:cc:a7:1e:6f:dd:
64:d8:29:ba:85:aa:76:19:64:c1:db:b9:07:e1:c9:
25:a9:b6:14:14:b4:2a:16:4f:fd:54:07:3a:c8:41:
42:c6:ed:5e:c6:d1:7f:b9:49:ae:ae:da:4b:e2:ae:
4e:99:5b:df:20:80:88:7c:e2:15:76:b4:1a:c5:9f:
4c:7b:d5:b7:4c:e6:56:fa:2c:ce:b7:45:23:ff:bc:
80:18:95:32:cd:24:3e:ba:be:5f:2a:2c:a2:97:81:
d1:d1:21:2e:db:30:55:18:b8:11:5a:b0:26:c1:f8:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:87:E0:70:6B:17:F9:89:60:B2:95:94:B7:EF:A1:0A:C6:0C:97
X509v3 Authority Key Identifier:
keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:2b:d1:b4:71:9d:b4:c2:96:d2:f5:fa:9a:e8:6d:d2:e2:
5e:c3:bf:65:f9:0a:3c:a9:0c:eb:8d:10:74:d6:a6:dc:da:4b:
0a:82:9c:58:06:dd:76:76:da:7e:2a:3a:34:d1:6b:a8:73:c1:
77:90:5d:c1:ac:e7:0f:48:a3:86:ce:48:98:17:6b:f1:da:d8:
bc:0d:0c:6b:1a:7f:05:08:76:7a:0d:54:fe:ec:56:cc:96:6a:
b2:3f:bd:6b:17:73:aa:20:2e:6c:ef:61:79:d7:de:a0:54:a9:
62:a7:5d:5e:a6:e6:f0:86:9e:23:78:6f:26:53:7c:06:fa:df:
ac:a3:15:04:d0:f4:f2:e6:bf:8d:cb:61:e7:ec:e8:0d:90:f4:
27:59:76:6c:83:aa:b1:80:70:c8:df:69:53:9e:84:4b:38:bf:
06:37:53:56:d9:80:69:a4:fd:50:01:a8:0a:22:12:1f:45:7b:
61:09:b5:aa:f0:3a:33:44:17:e5:65:38:9f:ed:5e:71:b8:9e:
72:59:5a:fb:f0:c0:dd:3a:07:31:43:b6:89:2a:ea:64:e8:e8:
e6:bc:c5:dd:b0:a1:52:3a:7f:c4:70:23:8e:e3:b1:b1:9e:dc:
e2:a1:f1:db:23:14:c6:1d:53:16:5b:7a:ef:bc:19:0b:a3:2e:
ab:20:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:12 2025 by rpki-client