Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier: WYv7ofufj6RRaGbP4cDA6aRvHa1BB1XJql2Te7xftzw=
Subject key identifier: C8:CF:B2:CF:F2:8C:7E:65:02:F2:0C:B3:4D:F4:F2:DB:A6:55:77:F2
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial: 019A7226549D523114A91FA17EA71FE93D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: K69PEoMknEKFx9lukT5FpTor+4MKz0kC7A6Kbb4YbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:54:9d:52:31:14:a9:1f:a1:7e:a7:1f:e9:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=c8cfb2cff28c7e6502f20cb34df4f2dba65577f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:52:57:2b:13:f4:bb:6c:cb:13:4b:84:65:
e5:39:b3:d3:ae:ec:0f:0a:67:9d:2a:5b:36:cf:49:
61:e4:15:fa:26:49:a0:9d:0a:c8:14:92:43:7b:ce:
df:c5:71:56:90:07:1c:46:c4:68:a4:ef:44:9d:da:
f3:e7:a5:a0:32:2c:b1:70:e9:3d:b0:00:4b:7b:d5:
c1:db:24:94:11:2a:d5:2a:0c:c5:50:89:4c:57:08:
88:9a:59:0e:64:28:8c:ca:14:11:90:66:99:3f:2c:
d4:82:21:b0:c2:57:36:1a:62:b8:29:07:14:36:1c:
93:5e:fd:f1:c2:6f:42:5b:74:97:4b:d3:89:52:df:
55:be:47:6a:5f:71:50:9e:4d:df:23:b4:15:c5:5f:
4b:6f:20:52:fb:11:12:35:f8:5e:70:f3:44:29:1e:
2f:f2:92:33:61:95:f3:d3:c9:df:be:cd:19:e6:71:
96:c4:32:ab:50:44:84:03:0b:63:79:e7:bd:06:0d:
55:9a:5d:dc:84:56:a4:71:6a:00:36:49:00:08:01:
0c:9c:56:4c:32:52:24:d1:d8:f3:58:9d:a4:c9:eb:
b4:67:89:1d:c4:4f:80:55:5f:1a:a8:01:33:e1:ca:
90:55:06:9d:98:42:7d:a7:ac:97:d6:09:76:39:27:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:B2:CF:F2:8C:7E:65:02:F2:0C:B3:4D:F4:F2:DB:A6:55:77:F2
X509v3 Authority Key Identifier:
keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:75:50:1f:e2:56:36:3f:a7:d0:4e:18:af:5a:b0:95:e6:
3a:b1:4d:6b:1a:8d:cd:ae:4e:8b:1b:a5:ea:36:bc:6d:10:be:
1e:be:c6:50:c0:eb:df:ed:81:48:7d:50:d7:a6:79:9d:4d:04:
a4:71:47:b7:7b:07:fe:69:02:e8:c0:cb:ce:bc:bc:ca:c7:76:
96:c6:89:0d:cb:4c:82:9c:c5:fc:c6:60:c0:d4:e3:1d:1b:bf:
46:09:08:c5:d7:69:ec:9e:58:a1:bc:01:aa:21:0c:83:19:a3:
90:5c:ce:52:9e:83:34:d0:95:80:27:7d:e5:07:5e:65:f4:7f:
69:06:76:c9:5b:37:92:c0:0a:79:63:84:5b:d3:34:51:51:a0:
dc:d0:f7:32:07:3c:bf:3a:17:88:e3:4b:de:42:36:e7:bf:4b:
6d:bf:58:ae:63:12:4a:1b:06:3e:40:e5:eb:96:c7:52:25:04:
f8:18:ae:50:1e:3d:fc:12:bf:d2:3a:24:fa:c1:9d:f5:da:76:
0b:8e:38:a5:d4:d0:e3:4c:9a:f5:e6:29:4f:35:35:aa:8d:22:
1d:e2:79:7a:6c:63:a6:a5:91:60:f7:c7:d8:af:43:e5:78:08:
79:7b:30:40:42:3a:29:86:3a:db:0e:56:d7:01:5d:67:23:a4:
9c:a6:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:35 2025 by rpki-client