Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier: JriVTvbT6RZNlYvrPdHYiqZqI6TeZwQQRB4uP1LRfIs=
Subject key identifier: AC:54:CA:FD:B3:78:63:3B:EB:C6:95:80:E5:DD:34:CB:C4:CB:09:B6
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial: 019A71B7968A9BA3872E7C232C990F820CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number: 0826
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: dgsbqg1sdeg1F5uGasL7I+DW5iermZstzQXMiidiTsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:96:8a:9b:a3:87:2e:7c:23:2c:99:0f:82:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=ac54cafdb378633bebc69580e5dd34cbc4cb09b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:c2:b8:db:4c:77:e5:2e:d1:e9:2b:e3:dc:
3e:7e:c9:35:59:6e:59:7f:38:6b:9f:77:19:19:4e:
3b:db:de:91:be:d7:dd:29:ba:c2:2b:49:2d:27:83:
92:f1:6b:a8:d9:b8:b3:de:b7:4c:d6:dc:75:3d:72:
56:75:cb:ed:50:39:99:ae:23:68:29:b2:6a:d2:3f:
6d:e2:70:7a:4e:88:a9:55:92:f9:ee:3e:40:5e:86:
fc:d5:85:4e:b4:ad:5f:1b:8d:5c:2a:58:a8:f9:85:
bc:4d:a4:ff:ab:04:8a:5b:c5:f5:1a:d9:18:df:4b:
8d:2e:56:e1:35:1f:67:2b:be:f7:90:3c:ae:7d:4a:
f2:47:46:15:a4:dc:42:7d:3d:0d:22:b3:7e:9f:d1:
de:9c:ce:39:81:e1:b3:c8:c6:60:bb:50:db:2f:14:
53:50:b6:6a:74:bf:cd:36:5a:b8:8c:ef:80:4f:41:
d0:45:a7:fd:28:49:4d:4a:d4:4d:eb:f7:5b:35:79:
ee:24:ea:58:cf:ad:6c:1e:36:ef:87:33:5e:79:fe:
86:86:4d:70:fe:68:dc:24:97:5d:1d:c2:62:b6:c2:
96:5d:2a:a3:a6:39:51:be:97:4c:d6:07:39:94:3a:
d6:3b:bc:ab:46:79:74:7f:69:29:c9:a7:2a:d0:1e:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:CA:FD:B3:78:63:3B:EB:C6:95:80:E5:DD:34:CB:C4:CB:09:B6
X509v3 Authority Key Identifier:
keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f3:be:38:30:01:26:b4:53:f8:bc:e3:0f:7f:ce:6f:e8:09:
ef:04:da:4c:69:73:5c:df:5e:30:b4:94:e1:ef:47:06:86:69:
52:d4:b6:6f:cf:14:b9:98:44:72:39:93:e2:f6:07:78:94:72:
ba:3b:3b:70:ba:73:a3:25:11:3b:57:29:73:fb:7d:f9:63:f5:
a5:12:1a:89:2c:24:3f:33:d9:0b:91:ec:6d:fb:0c:4e:7d:4d:
d9:31:d9:67:b0:49:21:81:e2:76:2e:54:cd:a9:2e:fc:97:d6:
08:e8:16:8c:e3:4c:9c:32:84:0f:c1:d2:9a:f8:5c:60:72:d3:
0c:89:61:c7:b8:63:2e:7c:5d:24:a8:63:9b:da:a8:bc:d5:d4:
82:9c:de:95:a5:3c:88:08:44:77:89:e8:67:37:cc:65:6a:79:
f5:c5:55:5e:44:60:80:41:b2:ca:31:c2:79:6f:a6:5e:7c:f3:
04:d5:b3:ab:b9:59:3b:69:00:8b:09:df:f3:39:91:52:0c:34:
e2:ff:4b:8c:41:ed:41:ab:6d:d7:cc:8f:a3:49:79:ea:ad:a5:
8d:e5:0a:54:30:d0:d1:e9:5b:4c:a3:bb:5c:a8:78:8c:e7:05:
62:65:73:d4:8c:6d:5c:20:4b:18:28:c7:0d:06:fc:23:c3:f2:
a9:9d:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:04 2025 by rpki-client