
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier: J9+RuZBJOsHYL98nZARzbpaFuKDubpAGwbyekkmwfc8=
Subject key identifier: B1:D8:53:56:B8:D8:E9:AE:F2:85:D3:2C:09:A3:88:2E:A9:AC:E1:F3
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial: 0199221E664FB8F12C7E2FA45812812A09B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number: 086F
Signing time: Sun 07 Sep 2025 03:00:41 +0000
Manifest this update: Sun 07 Sep 2025 03:00:41 +0000
Manifest next update: Mon 08 Sep 2025 03:00:41 +0000
Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: 6aSWqY5OaIFjMOAKihVvne+wgkyYJHZqQtpkbIpfjhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:66:4f:b8:f1:2c:7e:2f:a4:58:12:81:2a:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Validity
Not Before: Sep 7 03:00:41 2025 GMT
Not After : Sep 8 03:00:41 2025 GMT
Subject: CN=b1d85356b8d8e9aef285d32c09a3882ea9ace1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:f3:c2:44:4b:1e:cf:75:a6:a8:0a:46:75:
27:ec:a6:34:12:f7:50:72:3e:be:48:a0:0c:7e:cd:
26:8f:e9:7a:b5:ef:64:28:09:de:fd:f9:31:5d:5d:
84:40:64:65:c5:f0:7d:bf:9d:b2:f9:5d:e9:67:20:
49:75:20:8e:19:bc:c8:03:24:ec:0a:c3:a7:31:3b:
dc:53:f3:5d:c0:64:3f:71:f3:e2:c1:61:95:f3:7a:
2c:51:ba:4d:d2:96:45:5f:29:1e:58:bf:63:87:ad:
90:10:d3:5e:05:50:87:3f:40:5a:d8:56:db:af:66:
ba:6b:53:d5:22:34:ed:63:64:fb:76:d7:2f:11:a7:
a8:f1:1a:91:08:0d:a2:50:ff:f5:69:07:68:c3:02:
11:2c:08:10:0c:f7:de:e5:27:1d:a3:05:9f:b9:07:
0d:e5:46:cd:3c:d9:0b:32:fe:db:b0:ec:29:ff:aa:
19:d8:1b:d5:6e:82:ca:64:ad:53:aa:03:57:59:83:
67:dc:ef:09:ef:07:2a:03:f1:68:9c:10:b8:ad:81:
d4:93:4e:f0:fa:cf:f8:a5:8d:1c:08:dd:0a:62:e1:
24:ea:37:27:ed:37:1e:ad:8e:f6:31:f5:80:4c:a7:
f4:31:0f:f5:b8:ff:f1:5e:46:31:22:44:f8:f4:2e:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:53:56:B8:D8:E9:AE:F2:85:D3:2C:09:A3:88:2E:A9:AC:E1:F3
X509v3 Authority Key Identifier:
keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:73:ae:00:03:83:1d:7c:f3:94:1a:0f:e1:6d:c9:e2:46:45:
4a:ba:bb:7c:92:d4:81:f0:8d:30:8d:ce:ff:55:b5:79:02:31:
63:31:17:f2:f9:f5:70:ff:cc:c0:b6:e7:92:ed:f5:a1:93:3c:
28:44:3f:e7:04:83:08:13:81:ff:4f:40:dd:67:86:ff:72:e1:
83:45:ee:a1:fb:7a:d6:02:3f:3f:c2:40:40:07:4b:88:d9:0a:
a5:88:e3:8e:d9:1e:f0:73:ef:43:ae:3d:d9:66:f9:1a:6a:98:
65:de:8d:27:00:83:b2:84:86:50:49:8d:15:01:5c:e4:03:04:
c0:e2:a3:a6:71:f3:cb:04:c0:b0:e2:67:fa:f2:ff:85:ba:e1:
7e:f3:23:a8:32:7e:f8:06:60:4d:83:8c:36:36:f1:b0:6c:07:
64:6c:bd:dc:77:fc:53:1d:ff:e5:4e:47:d4:e2:f0:4a:1b:b7:
11:ea:d7:1b:86:fa:a3:ed:fa:f0:13:f9:6d:01:40:9a:dd:41:
17:30:ec:a3:12:77:87:13:7a:6c:62:91:fc:c2:47:4b:21:d4:
76:34:0d:37:47:8d:4e:1d:0c:eb:d5:d0:5c:86:ed:57:fc:f3:
0d:82:8f:fe:b1:36:9f:bc:44:b3:c6:e2:d8:b3:7c:cb:3b:34:
8f:8b:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:10 2025 by rpki-client