Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json)
Hash identifier: sVaHX0vjbm3s0bWURdHhf57qc5Tlsedr7lEfQ2BLQYw=
Subject key identifier: 9F:0C:FD:47:A4:54:60:C8:5B:38:8E:50:15:51:E3:D4:F1:9D:A1:7F
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019A24794008A9B65DB4CC337A686A126FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
Manifest number: 0A1C
Signing time: Mon 27 Oct 2025 07:01:57 +0000
Manifest this update: Mon 27 Oct 2025 07:01:57 +0000
Manifest next update: Tue 28 Oct 2025 07:01:57 +0000
Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: wQTgsQneWW0ttkpWsX+HVCvAmjyobgv0SWJQArZKl3g=)
2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:40:08:a9:b6:5d:b4:cc:33:7a:68:6a:12:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Oct 27 07:01:57 2025 GMT
Not After : Oct 28 07:01:57 2025 GMT
Subject: CN=9f0cfd47a45460c85b388e501551e3d4f19da17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:8d:8f:ca:b9:83:9f:47:6d:f1:08:62:9b:
60:57:4f:73:44:91:8e:1a:3d:78:2c:90:0b:ee:c5:
e7:dc:71:1d:01:12:bc:8e:a2:b9:c2:1d:0e:15:01:
13:9d:3e:aa:e2:58:f6:45:2e:ff:7b:69:b9:31:05:
60:ab:ff:36:ee:36:ac:27:0a:08:41:c9:c5:b0:13:
37:86:e4:c0:7a:21:94:49:a0:da:44:a5:47:ae:40:
5b:df:90:6e:04:84:94:97:fa:71:25:4e:97:05:8b:
17:e1:20:7f:ab:a4:41:eb:26:db:0e:9f:33:5b:6d:
e2:3c:bc:ae:6c:51:8d:29:23:48:13:19:69:5b:0b:
fa:0c:e9:f6:0a:a2:9d:88:cf:4f:9f:06:0e:90:f5:
64:7d:51:a8:01:2e:3d:3d:34:eb:72:51:39:a3:52:
f7:37:82:28:c6:dd:57:04:ed:77:58:9f:22:0c:0c:
b7:14:32:33:ac:40:ba:db:13:1f:ea:dd:b9:a5:f6:
3f:e0:cf:80:e3:ad:f2:e0:9d:bf:ed:2b:36:92:0e:
ec:a7:61:3c:6f:28:90:3b:ac:dc:20:93:4a:3b:c8:
9b:c2:62:35:6c:00:f3:ef:e5:ff:71:f1:c3:a7:77:
e5:68:4d:6c:5f:4e:d9:63:d5:4d:03:52:c5:41:f8:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:FD:47:A4:54:60:C8:5B:38:8E:50:15:51:E3:D4:F1:9D:A1:7F
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:76:6a:cf:22:60:9e:42:78:c1:13:91:ca:66:87:75:0e:84:
26:01:1f:0d:df:26:12:37:1a:14:fa:3a:65:f9:94:f9:e1:e8:
68:e9:43:60:fc:ba:68:6c:42:b3:47:2a:d1:28:29:cc:da:49:
cb:44:b6:38:66:5f:e1:39:9d:43:18:ee:1a:f1:5a:f7:79:5e:
44:7a:18:03:73:60:cb:58:65:2d:f9:cc:d7:2f:0b:88:9a:29:
c9:2d:be:b2:c2:71:1c:03:67:ab:31:b0:e6:f2:b4:10:73:88:
d0:24:9e:47:fa:e8:83:45:5b:27:4d:c8:d9:f6:c0:f6:52:26:
fa:ed:2c:80:77:e6:f6:7d:e7:56:9d:c5:e1:be:7e:a5:30:2b:
68:c2:4b:66:24:94:fb:05:e4:d1:42:d0:63:19:91:a4:59:31:
7b:c6:83:dd:2a:43:46:3b:a4:62:af:a4:9a:26:a0:66:23:27:
4b:e6:61:ef:2e:f4:53:b4:3d:2d:b6:e8:6f:30:65:c2:ca:e0:
00:5e:36:cd:ef:c8:81:3e:5e:1d:45:df:da:68:c2:62:8c:33:
89:02:09:ff:8d:6a:c6:5c:76:32:1b:dc:3d:82:8a:b8:92:64:
15:26:c7:3b:39:09:1e:fc:6c:69:ba:2d:13:c8:53:b7:a8:a7:
1d:46:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:47:41 2025 by rpki-client