Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
File: fSiu_AZob_0_snjG3lKXc-2r3p4.mft (raw, json)
Hash identifier: 8sObdpg5pbt5PezbeD/RwUlfNMrBjOtm4PFOgVkpSng=
Subject key identifier: DA:EF:88:B8:45:6B:5B:AC:52:01:B5:B0:56:36:17:44:F2:0B:ED:5A
Authority key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
Certificate issuer: /CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Certificate serial: 019A71EE7FAAB5154F8DFB46DD57688B953D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
Manifest number: F0
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: fSiu_AZob_0_snjG3lKXc-2r3p4.crl (hash: tTcAEBAEbvSFjEOSJa5zQESSIuvM/8Ot94ewXZmjGFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7f:aa:b5:15:4f:8d:fb:46:dd:57:68:8b:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=daef88b8456b5bac5201b5b056361744f20bed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:42:b5:ca:3a:ca:cf:fa:5d:3d:f0:a7:08:
27:fa:b7:45:ca:d7:d1:74:81:df:5a:4c:f5:af:61:
eb:11:ad:53:09:00:8e:c2:ff:f5:26:c7:ad:8c:ec:
63:cb:21:4d:2e:9e:78:eb:5c:dd:2e:1b:05:9f:84:
1a:05:f0:e8:c3:fe:7c:ed:98:fb:a2:db:28:4c:55:
78:5d:91:24:03:47:df:dc:9e:e3:fc:71:10:a3:a9:
c5:1c:b4:81:3d:d1:1e:45:8b:65:6a:97:5d:ef:08:
fe:6d:ca:16:28:8d:c8:b9:a4:37:e2:c4:b9:88:fb:
ed:cf:9f:81:a9:08:22:f9:60:77:a0:94:18:21:e7:
9d:fb:dd:f7:e4:5f:35:34:e0:c6:be:0c:5c:81:39:
28:55:55:7b:b8:4e:3a:59:f8:0a:d5:a6:2b:ee:d7:
7b:72:bb:e3:70:89:8c:c4:2c:0b:4d:74:47:df:b5:
e2:87:1c:c9:4d:9c:8f:e3:6d:a1:f4:84:74:30:c6:
f0:3e:80:29:08:01:66:c9:55:2a:91:c3:b3:16:b1:
f2:e6:4b:fe:ed:d5:e1:78:52:25:9c:f2:3d:88:cc:
5d:82:de:67:17:08:af:af:85:a8:b3:11:93:f0:81:
01:cd:97:19:3b:e0:70:59:32:94:a8:86:72:5f:3d:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:88:B8:45:6B:5B:AC:52:01:B5:B0:56:36:17:44:F2:0B:ED:5A
X509v3 Authority Key Identifier:
keyid:7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:0a:d2:03:47:5b:ce:6a:33:12:9e:32:18:60:37:a7:1f:
53:90:d5:b6:81:62:ab:b1:c0:28:aa:6f:56:ac:87:bd:a8:0b:
f7:ad:90:b9:48:4a:51:e5:7c:3d:f6:aa:a8:17:7d:c3:fb:db:
74:d3:e0:a1:d7:97:70:07:37:52:e9:aa:24:88:d2:72:7e:c8:
e4:70:a2:9a:e6:1c:c5:1c:83:be:58:69:01:66:28:23:aa:d1:
4f:00:82:37:cc:78:97:3f:ba:3f:aa:ef:2d:09:e2:7b:92:32:
5d:47:e0:5b:2e:57:85:83:fd:66:3c:ad:92:d8:45:1c:2d:d8:
8f:7f:4f:69:40:f1:3a:95:ab:0a:12:2c:8d:f2:5a:d3:f7:5d:
b6:b8:12:d7:4a:ab:36:dc:49:79:74:86:8b:ef:7f:d8:97:fa:
50:39:e2:fb:db:37:68:a2:6c:5c:9c:b9:1f:99:0c:dc:3f:d7:
71:20:fc:ac:c6:cc:d6:e7:ad:ea:1d:67:a7:67:f3:98:36:bd:
8b:80:fa:60:fd:3f:d0:be:51:28:24:ed:a8:2a:37:bc:b2:af:
c5:cb:3a:d6:53:b9:e0:73:f7:fe:c1:02:00:ba:31:ff:ee:bf:
20:ad:a6:e6:53:f5:9a:e7:83:35:c8:0c:de:fe:b8:c6:ed:bf:
18:46:d9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:58 2025 by rpki-client