Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json)
Hash identifier: I7LfOzqwdDXk19jLedqH06nTdCngB6Ao6HfeXdy8+cI=
Subject key identifier: FE:F3:93:78:DA:10:B4:15:0C:EB:F4:63:9E:FD:C4:56:34:18:B0:77
Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Certificate serial: 019A51509964738D117E94DD1A999D8376AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
Manifest number: 0B9C
Signing time: Wed 05 Nov 2025 00:00:27 +0000
Manifest this update: Wed 05 Nov 2025 00:00:27 +0000
Manifest next update: Thu 06 Nov 2025 00:00:27 +0000
Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: NRvChNdbkkMofyK9W/AbaTgO9nWrjoehMLRAW82KQo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:99:64:73:8d:11:7e:94:dd:1a:99:9d:83:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9
Validity
Not Before: Nov 5 00:00:27 2025 GMT
Not After : Nov 6 00:00:27 2025 GMT
Subject: CN=fef39378da10b4150cebf4639efdc4563418b077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:18:80:20:5d:8a:bc:68:b5:04:d9:22:12:
40:4c:42:4b:cc:b2:b1:8b:68:31:ed:51:f5:42:4e:
6f:55:9d:cd:df:8a:39:44:fb:3a:fa:15:4a:8f:f9:
3c:20:ab:3e:bb:9d:87:46:90:4a:11:4e:6f:43:25:
b0:df:d4:c1:b5:a5:f5:f9:3a:bc:ca:a8:0f:0f:d8:
46:09:47:d3:07:0b:48:16:ed:bb:de:2b:b0:02:5f:
d8:29:6c:fe:ef:45:1c:81:90:17:ff:19:dd:7d:91:
e7:97:92:d2:51:86:db:c8:9a:e9:ca:4f:8b:d4:d2:
25:96:3b:0e:27:e2:f0:79:c8:28:ef:1a:a7:76:26:
10:12:e5:37:46:8a:12:32:cb:3d:15:81:5a:5b:5c:
c1:77:be:be:cc:55:a9:bf:57:6e:64:b6:56:67:cd:
08:0c:5f:ed:05:e2:10:c4:30:41:93:2e:c0:b1:3f:
fe:99:08:0a:03:8a:90:a1:fb:96:c1:8e:94:54:b4:
36:05:c4:bc:45:7c:0f:26:0d:4d:48:d3:1a:c1:a5:
7b:e6:7d:3d:c9:d0:e7:03:f9:bf:4d:9f:1b:bb:4d:
25:a3:1a:d8:5a:54:c5:55:75:32:c8:73:5e:e5:d0:
fb:6a:09:87:e3:a9:f1:b9:7b:3a:75:9e:17:d4:25:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:93:78:DA:10:B4:15:0C:EB:F4:63:9E:FD:C4:56:34:18:B0:77
X509v3 Authority Key Identifier:
keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a5:a2:63:1a:9a:a7:68:c1:ff:26:75:d9:0c:1c:74:68:9a:
77:c7:d8:77:46:27:92:0b:8e:99:47:b8:d0:bc:c5:62:a8:20:
da:56:79:d5:41:e3:1f:69:42:ae:88:82:69:4e:8d:95:5b:fc:
db:75:e7:42:2a:8d:cc:38:3e:04:ae:af:4f:55:e9:4e:cc:da:
c0:bb:ee:08:ac:81:38:76:67:4f:d9:3e:58:99:de:01:0a:1b:
38:c6:d7:21:0e:d0:a0:7f:15:0b:20:e6:01:74:14:48:80:f7:
6b:8c:2c:f5:35:30:56:da:8c:7f:8e:06:8f:12:b7:f0:ff:24:
38:66:c2:4c:28:2c:98:da:fa:e0:bc:84:64:68:7e:2f:81:38:
61:ac:8f:59:73:79:87:63:ea:81:2c:aa:88:c3:8a:36:21:8a:
61:8c:8b:ba:cb:54:31:70:92:d7:4b:83:ba:6f:b3:8b:76:77:
a3:82:3d:4d:52:6f:92:8a:70:63:d8:24:9d:09:29:db:73:ed:
50:48:91:2c:80:ad:b2:1f:61:2f:df:8a:e2:2f:06:75:28:59:
8c:d3:f3:5d:68:ea:a0:a9:4d:99:01:19:8e:af:ca:bd:a0:62:
e6:c2:c0:c1:6a:df:cd:12:4f:fe:28:59:b8:8d:c8:6d:ef:03:
97:df:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:57 2025 by rpki-client