Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier: mChMxkspG8ODGm2iCYWtlElfCoNl4OV1NiEJHpwqxGw=
Subject key identifier: A8:84:E9:25:AB:92:67:CB:27:1E:B2:50:07:D7:ED:9D:EC:05:24:A6
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial: 019A711328EA67144B9D06DCC5B00A1A910D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number: 1049
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: hVL59dMSY/3n9JbuFPdLWrGBIepfDG+0rR5QMfT3r20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:28:ea:67:14:4b:9d:06:dc:c5:b0:0a:1a:91:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=a884e925ab9267cb271eb25007d7ed9dec0524a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:85:6d:bf:5f:98:ca:59:76:4b:2d:2e:eb:
ef:f6:07:f6:07:c2:7b:e4:0a:24:42:a8:cc:04:dd:
e1:1b:92:1e:af:bb:c6:96:fa:e0:9c:f8:75:d8:e8:
d9:39:b6:9f:d8:5b:ca:bf:a5:34:ab:24:0f:5f:f7:
26:55:58:fc:ae:6e:d4:c4:11:f7:d0:aa:e1:2b:0f:
bf:e3:67:60:6e:16:73:dc:1c:f6:1d:e6:32:89:9b:
ae:c6:d7:91:68:00:22:c1:b6:f3:bb:33:a9:5d:c1:
86:36:f1:50:33:38:1c:16:4b:73:49:c3:22:e6:e0:
d0:bd:eb:ef:87:71:02:4a:31:ef:90:fa:d7:8a:09:
c2:3c:00:82:ca:77:cb:7f:1b:cf:e6:29:40:49:23:
68:30:5f:ed:9e:b3:f2:bd:18:10:52:55:e8:35:9b:
f2:e6:fe:b6:2a:53:77:01:ea:df:7c:44:47:a8:03:
7a:dc:90:e7:32:f0:5c:c6:29:66:85:b2:aa:7f:e1:
72:28:91:e2:bd:d6:e3:be:65:61:1c:15:29:9b:c6:
50:bc:54:a7:df:2a:d7:e3:04:33:4e:8d:fc:1c:0d:
d1:15:d0:2b:7a:65:1b:e6:3c:c6:95:57:1c:5b:49:
7c:ba:8b:09:a1:b7:43:0c:0c:95:17:e0:ba:43:18:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:E9:25:AB:92:67:CB:27:1E:B2:50:07:D7:ED:9D:EC:05:24:A6
X509v3 Authority Key Identifier:
keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:35:07:89:2f:44:9e:46:e8:25:6c:eb:69:5f:cf:38:19:98:
0f:f7:8b:e5:31:f2:e5:27:c6:21:cd:b5:52:65:0a:cc:e6:91:
f4:45:54:22:f7:db:ae:e8:14:07:ec:3b:d7:9a:a3:4a:62:06:
ca:55:39:f7:43:f2:f8:04:58:03:e9:25:5c:8d:87:60:1b:85:
0b:61:f7:41:d8:70:b8:9e:32:8b:7b:3e:e5:a7:26:07:35:3d:
4e:ee:7d:2d:40:c8:99:2b:7c:fc:47:62:03:5d:d6:ca:be:7a:
2b:ec:3a:4b:62:cf:56:d2:30:83:af:84:ee:69:25:73:10:c0:
84:74:94:9c:51:9c:a7:66:72:97:a2:d6:d7:b5:91:0c:2f:50:
97:64:25:39:9d:2e:6e:59:3c:c6:fa:aa:21:01:58:74:a1:98:
dd:2d:29:b5:2d:5f:d3:0c:05:57:6e:cf:0a:ee:55:86:da:e4:
cd:e5:84:1e:0d:fb:7f:72:81:6d:3a:01:b5:27:e6:0d:be:24:
5a:9e:cc:cb:1a:4b:b1:a2:91:3b:13:3c:61:57:df:74:18:a6:
45:c1:71:94:03:93:26:b3:90:b5:2d:f6:37:a9:2e:d1:05:8d:
6d:1e:78:71:fb:ba:df:90:27:dd:6c:19:ff:66:ad:a0:fe:33:
50:5d:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client