Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json)
Hash identifier: vOeI3IyjXPpbRwB9SZvSPpYCGcNEt6ZzTwomEx4hicU=
Subject key identifier: 19:2C:F6:56:B9:24:FE:BF:98:DD:8C:6A:F3:E3:23:47:7E:C3:9E:3E
Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272
Certificate serial: 019A7226321D1676568A48234D6F52BF1ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
Manifest number: 021E
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: 2alHurPlTCl4n2MkGQ0QBLZloS0og95zyuXOqo5CqkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:32:1d:16:76:56:8a:48:23:4d:6f:52:bf:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=192cf656b924febf98dd8c6af3e323477ec39e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:74:8d:eb:bc:23:9a:e8:3e:37:94:dc:5a:
72:36:1e:33:79:b4:39:2d:92:17:c6:21:99:e1:f6:
f9:8d:d0:98:73:cb:6f:56:a1:2f:5d:67:a7:ad:a7:
8d:c3:3d:1b:9d:94:1b:9e:ff:42:ff:00:2f:8f:6d:
8b:e5:04:05:1b:80:44:14:0a:db:ef:ee:2a:21:05:
c9:29:db:bb:73:c0:6d:2e:3b:a9:42:ca:01:8c:0e:
77:6c:66:89:74:cf:2f:ed:2b:b1:e4:c3:c8:3a:84:
51:f6:fc:4c:98:fe:fe:eb:7c:85:c4:e5:9c:95:83:
55:54:41:ea:15:17:3c:74:78:13:b5:3b:a7:91:20:
23:86:72:b6:ed:a0:53:06:95:1a:03:36:70:6e:74:
b8:27:8d:ce:40:96:4b:93:06:c0:cd:6b:60:51:70:
45:ed:25:e1:bc:80:42:10:25:85:1d:85:ee:12:ca:
45:97:38:77:48:61:73:10:21:77:0e:5a:b8:84:cd:
b4:19:93:75:0b:36:57:d9:b5:9d:59:5d:3c:84:54:
fa:46:64:22:e2:29:65:f0:5a:5f:7f:9b:b3:c6:a1:
e4:bf:88:6a:5e:d3:1a:cf:64:85:85:84:90:31:29:
46:ff:1e:1b:47:93:28:ca:2d:19:4a:89:7f:55:07:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:F6:56:B9:24:FE:BF:98:DD:8C:6A:F3:E3:23:47:7E:C3:9E:3E
X509v3 Authority Key Identifier:
keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:72:a2:2a:73:4e:e4:77:1b:16:06:9b:c6:96:4e:94:7e:de:
01:3e:c1:ff:b0:b4:36:33:67:fe:e2:88:d3:c7:c2:97:66:8c:
02:59:cd:b6:ba:d3:21:b1:9b:d8:fa:10:2a:aa:be:59:83:43:
1d:89:65:56:ef:cd:f2:2e:70:45:38:16:d7:af:38:b1:f1:09:
30:3f:ee:6c:2d:e2:8e:94:b0:9d:90:dc:0a:78:08:88:18:ab:
8a:fc:0f:b0:88:31:d5:74:a7:f5:fc:a8:f7:11:85:d6:10:cb:
41:0d:64:85:c6:05:67:c6:70:69:2f:bc:69:e0:59:e8:ed:9a:
50:f4:68:94:0c:31:52:81:3c:c3:a5:39:d7:ea:a8:58:99:87:
3b:10:9e:8d:dc:88:c2:cf:4f:cd:43:fe:75:26:07:ea:d8:9d:
f6:ac:9f:4c:d0:05:e7:65:b4:03:6f:8f:0f:f0:46:df:d2:cb:
d3:12:e9:7d:e3:dc:3c:e8:56:59:11:cd:b9:04:f8:6c:07:97:
8a:67:d0:e7:49:b8:72:8e:a6:55:0f:42:b2:e7:db:3d:ef:09:
f8:c9:c0:af:99:17:c1:d6:d0:a6:aa:c0:a7:05:e1:23:b5:4a:
41:1b:09:a9:ca:22:01:74:ba:e9:0a:ab:1f:79:73:62:3d:a3:
00:f1:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:19 2025 by rpki-client