Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: YajQGBm6pe3epFY3qbJFl5MZ6EXbp6fXnVtBOE31BM0=
Subject key identifier: 61:75:0B:F3:E2:77:07:B5:F9:9C:AF:88:F4:A3:43:8E:D5:23:91:ED
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 019A71B84A1D4EF4259CA5AFA1B1021879A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0E7F
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: YzCpl/0fXRCnhXnschR7Qf8e2K0Nds9WtPM/Sb/raYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4a:1d:4e:f4:25:9c:a5:af:a1:b1:02:18:79:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=61750bf3e27707b5f99caf88f4a3438ed52391ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:2a:23:e7:cc:e2:72:87:88:a4:79:86:60:
07:c8:ca:36:b7:98:40:17:63:54:17:97:4c:41:a9:
93:ce:94:96:13:96:b9:5c:db:83:4f:6d:ff:dc:23:
90:41:3a:bb:5d:5e:6f:38:77:9b:d2:da:45:61:8f:
8d:aa:fb:1c:76:05:2a:33:07:a2:bd:63:49:f1:b4:
0a:3c:08:fd:bd:1b:81:ac:6c:57:0f:59:d7:0f:34:
7a:19:84:ed:fc:f6:38:32:9d:2b:2c:ea:ef:50:03:
fe:1d:b9:e6:63:71:72:0e:b1:a6:a7:ab:60:70:bc:
79:c1:01:7f:9b:20:bf:b8:4e:01:13:d5:50:b6:fc:
0c:8b:31:ec:5a:8e:5f:2c:6a:ba:4b:f8:a9:52:bf:
3d:56:3f:7b:8f:69:17:be:e8:1c:9f:37:87:44:dc:
40:2d:1f:50:5e:f6:de:53:31:80:16:92:89:87:cd:
d8:c9:f4:be:3a:45:e0:9d:0e:6b:21:a9:5e:7f:0c:
45:c9:cc:86:8c:1e:0a:0f:e6:28:37:b7:57:f4:fd:
62:c0:47:e5:44:b3:9b:d0:d8:79:1a:b8:a8:73:07:
0a:31:2a:51:9e:22:09:78:d0:2e:be:85:d4:96:de:
b9:d1:f8:fb:8f:ee:83:2f:d0:1a:00:f5:05:24:22:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:0B:F3:E2:77:07:B5:F9:9C:AF:88:F4:A3:43:8E:D5:23:91:ED
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:e3:58:62:12:86:00:ed:3b:36:c4:76:a3:cd:6f:90:61:
e9:f6:d3:d7:f2:ef:4e:9e:d1:6d:8b:f5:36:11:c7:bd:20:47:
e1:d1:98:27:4f:2d:6f:ce:95:44:e1:e6:2a:2f:9e:be:ff:bf:
c2:90:80:71:72:25:d4:8a:03:c1:40:d3:94:4a:b2:55:0a:2d:
ff:93:24:19:98:92:a8:ff:27:df:c8:c5:03:99:eb:48:83:c5:
01:11:85:23:95:69:ac:36:dc:b2:d5:a7:18:0e:bd:1c:73:3b:
2d:30:26:c3:20:b9:46:51:1c:3f:1d:97:ed:f9:b9:c5:a3:f2:
9c:14:cd:19:2c:6b:6b:b7:cb:ee:fd:e0:83:a4:e4:20:2b:a7:
70:43:be:61:da:c9:d5:cb:6a:c8:69:0f:85:20:9d:02:61:bb:
f4:c6:fe:9a:79:90:60:04:97:9b:fd:b1:37:e9:0b:47:58:1d:
89:2f:9e:2b:70:6c:22:63:68:32:ea:84:b9:9d:60:67:9a:2d:
70:68:7f:17:6d:3e:61:68:00:cf:d6:ef:62:a2:24:56:10:e3:
b4:ad:63:4b:89:a1:d6:eb:87:ec:6f:d5:f7:08:54:e6:96:10:
0a:89:f5:68:c4:a1:24:e4:ae:33:5c:77:bf:fc:61:6a:5f:c9:
42:e5:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:41 2025 by rpki-client