Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: 9WZ5b8rkz7bCezlKrTWfzHkvbyImr/pJWFGQQ5kLabE=
Subject key identifier: D8:60:3C:5B:AF:EF:0D:2D:E7:2F:37:4B:CD:31:9F:1D:E0:AA:F0:FE
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019A725CEEC0664D6F17C1D58C45DD003027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 1565
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: nsEvF/rJpVn3i3x4GzTjrUL68efgGeiA1gW8DJds0E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ee:c0:66:4d:6f:17:c1:d5:8c:45:dd:00:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=d8603c5bafef0d2de72f374bcd319f1de0aaf0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:e5:31:b1:42:4a:1e:5a:4d:10:34:9c:ab:
60:12:05:2d:22:1f:25:74:e0:86:fc:cc:c0:ed:30:
1b:96:5e:17:d8:14:b7:bc:14:c0:b6:52:88:95:68:
c3:9f:4a:3c:d8:24:00:5d:07:4b:4a:60:42:c7:69:
bd:1d:53:3d:92:08:5d:9e:4e:99:7e:1a:f1:b8:d8:
92:b9:99:0f:15:3a:a1:d4:50:a4:73:5d:c9:1c:34:
72:a9:9c:4f:d2:f0:66:2f:0f:9b:6a:8d:84:c2:f3:
78:cf:ea:d2:c6:b7:03:a5:30:00:8f:79:32:2f:ac:
59:ae:26:93:8f:db:76:bb:b9:34:e7:cd:4a:2a:e1:
5d:b0:c1:36:70:79:8b:75:78:5e:31:05:8f:e4:ff:
2b:1e:fc:a4:16:46:96:e4:e5:ef:73:11:24:73:24:
ad:57:ed:2c:22:1f:2f:6f:be:2f:03:6e:4a:cc:16:
29:8b:cf:7f:7c:7e:63:a5:79:c4:ba:85:15:d9:0c:
59:07:cf:ca:67:3b:86:cb:5d:3d:cd:8b:09:53:e2:
8b:35:bd:67:50:88:1e:19:ad:d1:c8:d0:00:7c:3a:
dd:50:27:b1:ab:a5:4a:fb:79:68:c8:5c:7d:00:47:
bf:62:0f:7d:8a:cc:b8:df:4f:4c:16:de:c0:8d:40:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:3C:5B:AF:EF:0D:2D:E7:2F:37:4B:CD:31:9F:1D:E0:AA:F0:FE
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:81:a1:34:00:af:34:b1:71:f1:7b:99:76:6f:d8:97:d3:
b5:ab:e7:c5:6d:00:d0:6e:9d:86:71:6c:59:61:f4:cd:17:4e:
87:05:01:20:f2:8a:f7:9c:38:bc:81:78:d3:d6:c4:a0:5e:5c:
8a:95:c6:44:9d:26:f0:02:46:e4:92:1f:86:20:c1:65:b5:1b:
44:f2:3d:51:40:6b:73:4d:2a:89:33:60:8f:f4:8e:69:63:71:
a3:b1:04:a2:06:36:90:ea:e2:f5:50:92:88:07:ba:8d:c9:49:
f0:89:f7:79:8e:73:b1:f4:8d:7c:96:94:dd:7e:c9:c0:fc:a8:
a6:e3:86:a6:e0:82:30:2a:db:cd:98:83:75:ba:a8:fd:77:5f:
22:af:f5:e7:76:1f:b5:15:28:ee:3b:db:90:f5:20:67:1d:70:
fd:49:ac:3e:c2:01:18:f5:05:b2:67:a0:b5:ba:5c:4b:dd:2b:
73:c0:1f:98:2c:e5:67:9c:3a:40:fd:94:3a:32:fd:67:08:88:
a4:c5:4e:19:95:ae:d2:51:da:60:b5:e9:52:1f:94:00:3b:07:
40:90:ac:a3:76:aa:bb:63:65:39:0e:0d:da:08:4e:78:17:27:
11:31:cd:0b:cc:63:70:1d:e9:4d:1a:ff:e1:83:6f:60:91:d1:
42:c2:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:55 2025 by rpki-client