Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: bph+2tM9mtfvFOLG2Do2LjRPNt6W4qYW7ObGrXWnHY8=
Subject key identifier: 08:57:3E:53:6D:5B:6B:82:4E:0B:3A:DE:20:BF:DA:A0:6F:8C:BC:D2
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 019A70A4D6535A9623087AB5069EA1BB9436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0EC0
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: fUvDsqF5N4Uw+noM0WsGiFFjmA+cHAsFX0zJRf9n53I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d6:53:5a:96:23:08:7a:b5:06:9e:a1:bb:94:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=08573e536d5b6b824e0b3ade20bfdaa06f8cbcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:f7:54:fa:75:29:26:e3:40:1a:53:ff:51:
ab:96:52:a4:de:e8:21:78:b6:73:f8:54:73:af:27:
89:e6:f9:59:33:f8:02:f2:99:df:5e:8c:28:9b:8a:
93:d8:04:ae:03:a0:3b:e2:d2:7c:50:c8:5a:0a:a7:
71:90:21:44:af:a9:56:3a:f3:bc:f8:4d:49:9a:eb:
44:9d:82:13:72:8b:68:43:cb:fb:55:b7:4f:d8:98:
8b:a8:14:3c:8d:c1:14:58:a4:b3:85:05:e0:3b:ed:
bd:5c:1d:88:e3:01:ee:5e:e5:51:4e:46:51:e7:4b:
bf:e3:91:23:f0:df:7f:c6:f5:31:d3:64:cc:5c:3d:
4d:d9:63:f3:41:8f:87:6c:c2:37:cc:4d:f1:4d:15:
f6:ff:f3:d5:f2:ba:ef:7d:15:6f:3e:c9:ca:33:e5:
77:c9:13:68:e2:e2:8e:28:09:2e:04:d3:81:16:7d:
a0:d6:a4:85:3b:04:f5:ed:b5:9c:17:63:2d:8b:2b:
00:9d:e6:e5:13:bb:c0:6b:78:10:0d:e1:f5:c6:b5:
dc:f8:d3:1e:3f:a0:5d:b1:99:8c:c5:9f:22:d3:bd:
98:54:33:26:23:ec:7a:fd:b9:f6:c7:9c:ca:40:bf:
d7:db:cd:93:6c:2e:a0:23:1e:68:55:33:2b:9c:10:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:3E:53:6D:5B:6B:82:4E:0B:3A:DE:20:BF:DA:A0:6F:8C:BC:D2
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:09:fb:7a:b3:d5:45:40:17:fa:13:42:dd:a3:0b:03:da:
d1:a6:84:ef:fe:23:df:1a:84:66:ce:27:47:33:64:a5:fb:6a:
a4:24:db:8d:65:4c:4f:61:86:76:a1:57:27:f8:71:d1:c1:7b:
37:58:54:82:c2:b1:7a:23:7d:de:8b:87:bb:44:b1:2d:6c:95:
06:3e:13:5d:06:74:f8:46:f0:90:fa:0d:da:26:7c:e4:fd:15:
6f:bf:9a:df:8a:18:0d:c6:c9:78:77:da:0b:46:5d:30:5b:54:
8a:54:3e:79:41:12:cf:f7:52:7b:cf:bd:ec:aa:20:ca:7f:07:
78:77:6f:ca:c1:a4:c8:8d:3a:1d:7e:27:c6:53:24:45:9a:f2:
2f:94:44:1c:22:be:59:08:6c:d3:a0:7b:53:d5:f5:09:90:b0:
2f:0e:80:99:ba:76:f1:30:1f:40:8c:91:bc:ab:09:30:5f:5b:
8f:ed:cb:a0:c9:d6:c8:65:da:3f:d1:49:b8:ae:11:f8:55:b5:
0c:30:76:c3:99:e0:10:81:9b:6a:21:ce:6a:a6:9d:7d:98:f1:
2c:b3:a9:b9:ef:2b:51:f0:72:46:aa:3a:3b:4f:01:fb:77:0f:
59:54:9d:b4:d7:74:bf:bf:2a:ee:b5:ee:3f:54:73:38:55:55:
a4:53:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client