Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json)
Hash identifier: qDn9D7gyd5ew8cbvF1J68NpjkVZTLBTqU/+fZLit79s=
Subject key identifier: B1:04:9D:AA:7D:92:B4:6F:1A:8D:C3:F6:BE:59:CC:03:5F:9B:A1:28
Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Certificate serial: 019A71B820D782426894836D0BA9C3BEB0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: 1bPpHl7/M0pNUNsoNtzOgRZ90aoLHtRmEfNDVYi3y4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:20:d7:82:42:68:94:83:6d:0b:a9:c3:be:b0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=b1049daa7d92b46f1a8dc3f6be59cc035f9ba128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:31:f2:b5:1e:f8:84:44:20:73:a8:df:1a:
8d:83:1f:7f:3f:b1:c2:c5:65:16:b3:e7:eb:63:4d:
1d:c2:ab:cc:ae:42:71:b0:78:b9:09:c2:24:35:f4:
52:fb:9a:4a:52:49:2d:93:b4:e5:48:b1:4f:ca:94:
d3:cc:9c:5e:94:4b:69:0a:fc:78:d5:64:35:f2:74:
d9:63:fd:14:a4:d1:e7:2f:6a:c6:f3:28:56:37:bf:
d4:d1:54:f6:9e:ad:db:10:62:6a:99:ab:e0:9b:5a:
75:4d:f2:03:7c:99:9e:72:b0:66:08:76:0b:16:a6:
76:fe:41:e1:94:68:ae:51:34:5e:af:87:d5:65:be:
62:72:7a:b9:16:b2:0a:28:8d:e4:30:11:00:05:de:
82:df:14:0f:2d:15:af:65:c5:e2:2d:2f:1b:1e:42:
f2:f0:21:a6:53:2d:fa:e3:df:f2:bd:50:21:2f:02:
20:11:38:37:20:a9:82:d6:d2:05:91:d9:2a:76:70:
b6:02:68:e5:54:3d:48:ae:db:0a:0c:6b:82:ef:4b:
19:a4:40:36:6f:cb:6b:67:fd:ea:c8:16:87:92:f9:
b5:ba:79:42:20:be:99:e5:b5:82:06:41:b2:5c:f7:
d3:88:b8:b7:76:88:4f:f7:18:f2:55:39:68:fa:80:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:9D:AA:7D:92:B4:6F:1A:8D:C3:F6:BE:59:CC:03:5F:9B:A1:28
X509v3 Authority Key Identifier:
keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:60:63:f9:fc:f7:9d:04:60:55:12:a7:4f:1b:a5:c9:c0:
3b:5a:94:6c:25:fa:9a:04:89:80:e8:3f:8a:4e:a3:62:21:a3:
59:e4:d1:e7:34:d2:ef:44:88:14:6f:4b:d2:3c:f5:57:98:69:
ab:5b:ee:93:cb:73:41:cf:04:49:34:1e:53:8e:8f:db:44:e1:
08:ab:47:3e:61:91:50:ba:56:ea:f9:26:b5:31:55:7e:b5:14:
02:44:6c:61:59:c7:8f:ad:cf:c3:55:e1:51:0f:96:52:57:1b:
ac:ad:2a:7b:b9:2c:73:f3:32:70:b2:3b:48:3c:0a:0b:81:ac:
e3:61:4d:82:fd:38:b0:09:6d:dc:89:e9:14:38:b4:f3:c5:6d:
00:26:39:1b:d0:87:e1:9f:9c:34:2a:92:2e:2d:fa:f7:d7:1d:
f7:0c:ce:8b:b4:98:fd:7c:57:ef:7b:bb:35:76:48:52:89:11:
f4:2b:23:a1:e7:b4:04:14:48:01:0b:57:a7:65:a6:c3:52:79:
2a:08:ab:cf:f6:77:6b:88:07:c3:27:2a:4f:e0:25:f5:fc:24:
79:cd:95:a7:8e:4a:b6:54:7e:a9:ff:ee:c6:4d:bc:0a:16:fc:
de:55:32:b0:dc:04:c5:08:42:fc:19:14:bd:04:ce:08:ec:a7:
56:9c:1f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCDXgkJolINtC6nDvrDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz
NTZmOWYwHhcNMjUxMTExMDcwMTIzWhcNMjUxMTEyMDcwMTIzWjAzMTEwLwYDVQQD
EyhiMTA0OWRhYTdkOTJiNDZmMWE4ZGMzZjZiZTU5Y2MwMzVmOWJhMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodEx8rUe+IREIHOo3xqNgx9/P7HC
xWUWs+frY00dwqvMrkJxsHi5CcIkNfRS+5pKUkktk7TlSLFPypTTzJxelEtpCvx4
1WQ18nTZY/0UpNHnL2rG8yhWN7/U0VT2nq3bEGJqmavgm1p1TfIDfJmecrBmCHYL
FqZ2/kHhlGiuUTRer4fVZb5icnq5FrIKKI3kMBEABd6C3xQPLRWvZcXiLS8bHkLy
8CGmUy3649/yvVAhLwIgETg3IKmC1tIFkdkqdnC2AmjlVD1IrtsKDGuC70sZpEA2
b8trZ/3qyBaHkvm1unlCIL6Z5bWCBkGyXPfTiLi3dohP9xjyVTlo+oAw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEEnap9krRvGo3D9r5ZzANfm6EoMB8GA1UdIwQY
MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt
ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl
LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVD5gY/n8
950EYFUSp08bpcnAO1qUbCX6mgSJgOg/ik6jYiGjWeTR5zTS70SIFG9L0jz1V5hp
q1vuk8tzQc8ESTQeU46P20ThCKtHPmGRULpW6vkmtTFVfrUUAkRsYVnHj63Pw1Xh
UQ+WUlcbrK0qe7ksc/MycLI7SDwKC4Gs42FNgv04sAlt3InpFDi088VtACY5G9CH
4Z+cNCqSLi3699cd9wzOi7SY/XxX73u7NXZIUokR9Csjoee0BBRIAQtXp2Wmw1J5
Kgirz/Z3a4gHwycqT+Al9fwkec2Vp45KtlR+qf/uxk28Chb83lUysNwExQhC/BkU
vQTOCOynVpwfjA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:35 2025 by rpki-client