Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File: _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier: eR45nuqzoVkWbBGEaURPKnRLzO1pnELn0Qu6ro8vHgM=
Subject key identifier: 04:F5:AD:F5:33:3E:F5:C6:C5:F3:CE:3A:C4:37:B3:5D:F7:67:96:6B
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer: /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial: 019A7225A2491DA5FB9E199C853FF03A15F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number: 091D
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: smoxuPI4UVg6h80Bmof0slTeLBKdld6SxSL6UZPbJes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a2:49:1d:a5:fb:9e:19:9c:85:3f:f0:3a:15:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=04f5adf5333ef5c6c5f3ce3ac437b35df767966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:1c:30:63:41:35:c8:b7:6c:41:2b:73:a1:
62:72:36:51:9b:1d:14:b8:59:aa:40:b7:3d:3d:23:
9e:6e:b1:af:f5:0a:bc:c7:39:e9:d0:b4:aa:9a:11:
6e:a0:bf:db:55:6f:e9:95:1b:00:b2:c4:02:27:3c:
a6:00:7d:87:af:e1:ac:4d:d4:62:9e:a1:bd:09:47:
3e:28:51:fe:15:b4:5d:ee:c3:79:a5:7f:63:4d:f6:
b8:3c:88:e3:d5:d1:ca:28:b0:fd:d5:eb:db:c9:aa:
f6:2f:d4:72:35:15:2a:d2:1e:93:ba:8e:71:44:f4:
c8:b9:d6:7c:8d:ea:d6:5e:f2:32:48:51:92:2d:88:
53:18:61:ee:c6:25:0e:ee:b5:52:1e:e3:29:52:ab:
27:15:f1:5f:12:ed:56:49:e2:d9:2a:52:0d:6b:8f:
e2:34:0f:8c:78:72:0c:75:c0:7b:fd:4d:28:c0:27:
4b:75:13:d8:c6:cd:7e:5d:10:83:95:89:93:02:a5:
da:e3:7e:41:86:4b:21:4c:5b:7d:80:52:fa:67:69:
46:eb:a8:2f:d4:22:6b:8a:47:22:89:ba:05:c0:45:
95:ef:a7:26:eb:fc:1a:ff:3d:0f:89:76:21:5a:30:
62:96:db:68:9f:f0:05:c5:5d:14:fd:e3:e3:60:9a:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:AD:F5:33:3E:F5:C6:C5:F3:CE:3A:C4:37:B3:5D:F7:67:96:6B
X509v3 Authority Key Identifier:
keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:2d:c1:4d:76:af:c5:e9:6a:36:0a:4f:3b:96:7a:b0:ef:
4a:bf:a1:f8:f0:66:5e:cd:89:dd:85:fb:30:b4:d9:15:b6:27:
f8:42:cf:5a:dc:13:b4:ab:06:29:31:67:b2:b3:06:3c:75:6f:
11:e2:14:90:78:f2:f6:83:34:aa:02:eb:24:4d:18:d7:a6:02:
f7:8a:66:44:dc:98:64:50:aa:ea:bd:cb:b6:63:1b:49:81:11:
46:fd:e5:0a:a6:21:25:c1:7f:8b:2d:0e:d6:75:59:cc:81:90:
dd:93:4e:7b:cb:d4:6c:a6:5f:17:f1:45:1f:71:01:f3:8a:b8:
3e:d2:a9:2e:10:07:ac:e8:6d:e5:6d:ec:17:7e:d8:98:23:18:
b0:d7:82:9c:4f:f8:6d:00:b3:a7:6c:7a:47:96:17:7e:dd:f8:
27:a8:96:bc:68:c4:a6:42:e3:5b:7f:dd:49:a5:48:d2:09:78:
57:42:b0:f6:09:ba:e0:b4:fd:cd:da:ac:b6:66:65:e1:ef:9f:
6f:b7:f3:a0:b1:c8:4d:7f:3c:7c:db:88:96:fb:9d:7f:5f:09:
e2:d6:92:52:3d:a6:5a:a2:6a:ca:c0:d3:7a:31:d0:ad:e4:40:
cf:3d:2e:e2:59:a8:0c:95:32:ea:b6:c6:bd:b0:c1:68:45:aa:
ec:cb:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:46 2025 by rpki-client