Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier: alezkx/sQIMe1vkxN2Gm6Qh6xs3x/sOHFNGvt/qnrEk=
Subject key identifier: 50:F3:16:22:A4:64:3D:5A:FC:6B:17:26:75:3E:74:75:9A:E3:36:46
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial: 019A72264E992D2D6017A02B53061802C219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: ZwBOnW76FFDdgO7M8Y86hAsuVH2KfWwT62wlUOx9amA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:99:2d:2d:60:17:a0:2b:53:06:18:02:c2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=50f31622a4643d5afc6b1726753e74759ae33646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:90:6f:20:fc:9b:0d:01:d0:69:d8:34:ef:
b6:df:c5:2a:a7:6c:7c:b1:fe:32:86:c9:4a:87:27:
92:84:71:03:70:fc:eb:e0:f3:69:36:b1:7b:3d:c6:
65:24:09:7b:d5:0c:dd:b3:92:0c:e7:50:da:e8:0d:
dc:cd:fd:7d:fc:1e:71:c3:e2:a7:8d:36:40:77:a9:
40:b3:36:a0:22:2e:24:2f:5c:80:79:16:d6:0d:ab:
f1:50:7c:c8:21:6f:c3:01:38:ff:5d:73:42:4a:24:
86:7c:7b:97:03:d5:77:9b:78:b4:5a:7e:b7:73:51:
8d:c1:b1:44:33:d9:ec:15:41:cf:16:4d:37:98:8d:
5d:2d:83:11:81:3e:65:57:3c:fa:4e:0e:02:f2:e5:
bc:26:0a:74:af:93:50:44:a8:4c:b2:a3:0f:4d:63:
74:8f:09:81:d6:aa:ab:0f:2c:1f:d3:bb:02:50:60:
fe:4e:e2:ed:f3:bc:7f:89:96:a5:af:af:74:c6:50:
72:d9:f1:38:5d:aa:38:cf:c8:58:92:2e:8d:d4:4f:
03:9d:0c:39:be:1f:a3:ad:c2:65:d4:5b:e1:30:a7:
19:09:c1:dd:16:00:4a:73:24:1d:59:7d:3d:d9:74:
2a:d9:11:9a:f1:81:d5:ac:71:a4:33:f1:2e:fc:c6:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:16:22:A4:64:3D:5A:FC:6B:17:26:75:3E:74:75:9A:E3:36:46
X509v3 Authority Key Identifier:
keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:d6:f3:75:98:7b:94:d7:8b:1e:c5:ac:a0:66:d6:cc:56:
bb:b1:9d:a1:72:da:d3:fa:5e:bb:71:54:18:de:8f:b9:1d:83:
a3:13:ba:eb:8e:4d:af:22:94:94:e6:d4:51:1e:91:52:93:c2:
e1:f0:9a:fa:d9:7f:9d:c8:70:cb:fb:c3:51:b0:e5:5f:52:fb:
3b:16:74:3a:8b:ff:06:d3:4b:88:4c:71:0d:36:32:88:62:76:
2c:ed:e3:8f:1b:4c:2e:67:1d:81:6b:bc:7e:f1:76:6b:be:d4:
2e:d0:6e:6e:05:92:43:e4:ed:fc:d4:6f:f2:54:82:42:ba:ac:
1b:19:32:75:f5:f2:28:26:99:1b:d4:b4:91:92:62:dd:09:c3:
e2:15:1b:54:68:96:66:83:a1:3e:04:c1:28:74:6e:b5:a3:9e:
0e:66:31:28:46:6b:90:9c:41:0a:30:09:6f:5d:fd:77:a8:8f:
ff:5c:1e:c5:f3:3a:94:e5:da:97:57:9c:5c:3d:20:b2:07:0b:
66:a9:f2:b1:67:6d:e6:f0:a6:d5:e7:96:e2:10:91:cb:31:71:
2c:b2:2e:a1:27:f8:cf:57:52:52:59:19:5a:54:bb:b9:51:b7:
5e:1d:49:36:55:ce:a7:99:b3:11:57:8b:27:cd:c5:3b:f5:01:
86:3d:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client