Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: 5PGoi5JJpMFplv+XDR4s2JO6b4S95OrhCkFFXsYupBk=
Subject key identifier: F6:22:EB:D6:D9:5A:45:14:26:3F:07:AB:E6:08:5F:20:ED:10:28:1D
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 019A70A592152CFA358312DF98FCA093C2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 02:01:30 +0000
Manifest this update: Tue 11 Nov 2025 02:01:30 +0000
Manifest next update: Wed 12 Nov 2025 02:01:30 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: pn+8vwUBMl0KDsQT1Wh/29paN7+Dv5sLzNmBOPrI4J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:92:15:2c:fa:35:83:12:df:98:fc:a0:93:c2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Nov 11 02:01:30 2025 GMT
Not After : Nov 12 02:01:30 2025 GMT
Subject: CN=f622ebd6d95a4514263f07abe6085f20ed10281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:6d:8b:d2:b3:aa:cc:24:67:f2:4c:08:f5:
2d:aa:d1:93:46:66:5b:d4:50:2a:8c:04:26:cf:fc:
46:74:e4:b6:b7:83:cd:d8:c3:ed:f1:03:5c:e9:46:
44:45:b1:f5:d0:c3:f1:b0:82:ac:32:41:77:31:c5:
91:bc:47:f0:7e:5f:a6:59:28:0d:ce:8d:a2:3d:cb:
6c:04:b7:72:c6:f1:65:71:c0:70:93:eb:c0:57:01:
23:52:a5:c1:44:0d:ae:5b:96:9e:22:cc:3f:60:15:
6b:43:d0:81:bb:0f:6b:5a:0e:c9:e6:f7:dc:bf:33:
b7:a6:50:6d:4a:a7:21:3a:3b:4e:38:22:34:f3:b6:
65:ca:be:40:41:e9:4e:09:04:0b:b4:4c:59:1a:04:
28:c0:d9:39:e4:80:19:6a:e8:e5:3b:71:19:10:ac:
68:25:eb:ba:3a:35:b4:2e:67:7b:cf:d8:c1:d9:67:
cd:3b:8f:17:f0:d8:1c:d7:79:90:53:b9:7c:12:19:
32:e2:83:b4:d7:72:f8:8d:45:0b:15:e1:d1:c7:a8:
d3:87:ae:0b:cb:04:ec:af:34:a3:f2:ce:20:33:8a:
5e:f7:e3:6d:d1:ea:2f:67:75:c9:d2:4f:ce:9b:aa:
54:5d:45:cf:d0:75:9b:d1:ac:b6:97:2f:b6:ec:d0:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:22:EB:D6:D9:5A:45:14:26:3F:07:AB:E6:08:5F:20:ED:10:28:1D
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:70:d2:c1:9d:05:08:14:c3:41:2a:66:dc:3e:01:43:65:b1:
75:df:94:21:e0:88:bc:8e:51:f7:5c:41:23:25:21:4c:bb:05:
e3:19:bf:89:9f:4e:6f:1c:97:aa:40:ae:59:12:4f:67:4b:5a:
09:76:d7:cd:05:cc:15:91:02:17:d5:ee:1b:31:89:58:8a:43:
1c:6e:79:38:2e:e0:b6:45:63:dd:61:0b:6d:a6:6b:6c:d0:72:
2a:ab:cf:e4:5e:52:a3:32:85:fa:59:4c:76:45:9d:ab:06:d9:
57:ed:b8:5e:01:0e:2a:9f:b1:10:0a:a6:a4:f5:69:e7:89:11:
fe:ef:e6:a3:56:4a:38:2d:dc:72:59:24:77:6a:c5:e8:24:8b:
33:de:fa:a6:6d:5c:4e:c5:b5:89:37:8a:0d:6d:5f:87:85:39:
ff:48:41:46:05:b0:4e:77:0f:a1:96:5f:80:37:d3:2e:a8:ad:
ad:a6:c5:00:1c:72:d2:80:d5:d7:2d:29:15:04:a5:7a:01:3d:
29:ce:26:ff:4e:72:45:bf:6b:71:f9:79:84:ff:b1:08:9b:50:
10:c3:9a:b5:46:0f:33:89:64:8b:2a:d1:18:02:f7:b0:38:33:
aa:82:3e:5e:e7:f5:07:1e:68:cf:cd:2b:6f:f1:fe:31:b5:0e:
ed:ae:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client