Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json)
Hash identifier: pDT2g+UFURVCy7t7zaLF/2M7E0RImGsbtM3JCh+Zyt8=
Subject key identifier: 76:1C:89:00:2D:83:62:54:1C:E1:F3:FE:63:97:CD:84:E6:CF:34:5A
Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Certificate serial: 019A2C31AFA7E6D3D213B01FAC4FA9A68B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
Manifest number: 038E
Signing time: Tue 28 Oct 2025 19:00:44 +0000
Manifest this update: Tue 28 Oct 2025 19:00:44 +0000
Manifest next update: Wed 29 Oct 2025 19:00:44 +0000
Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: ZoeFHTRcsCnecH0dQTGwMUEQKLoPx8tKO9GgIZwQEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:af:a7:e6:d3:d2:13:b0:1f:ac:4f:a9:a6:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571
Validity
Not Before: Oct 28 19:00:44 2025 GMT
Not After : Oct 29 19:00:44 2025 GMT
Subject: CN=761c89002d8362541ce1f3fe6397cd84e6cf345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:ad:4f:66:11:19:9a:c3:eb:ab:11:7b:87:
5f:98:80:e6:36:7e:53:45:6d:f6:5b:7b:e9:71:ca:
98:b2:43:7d:37:d0:7e:0b:8b:14:3c:18:0e:34:02:
22:d7:36:7d:2c:80:aa:9a:dd:78:cd:41:e4:3e:ed:
4c:ec:6a:e4:a3:cc:c6:c8:8e:c8:2e:e7:9e:25:ef:
5a:3a:a3:b1:ef:09:10:86:d0:94:41:d0:91:f7:42:
24:73:f3:99:44:ed:c7:49:f6:21:87:93:47:19:42:
c3:5e:74:0b:f1:de:25:a1:b9:1d:5b:75:16:c4:3a:
7d:44:22:e3:50:8c:0a:23:ea:65:67:a9:88:1b:95:
e3:27:35:a5:68:66:43:e0:72:ac:82:f0:40:e8:60:
07:41:5e:a2:a1:05:f6:71:fc:5c:2e:8a:36:aa:00:
fe:3f:d9:4b:91:f9:2d:45:80:f7:8a:6e:19:6b:92:
c7:16:24:2d:6a:3e:47:b7:2d:66:b9:c3:37:6c:0c:
8a:a0:4b:8a:d1:80:44:ff:79:37:18:de:9c:a0:15:
35:d4:a0:28:0d:5d:f2:6c:bd:7b:1e:2a:11:ce:06:
aa:23:df:fb:36:05:cd:31:32:84:3c:08:da:c6:12:
b6:39:0c:e6:89:a5:11:a2:d2:72:d9:bc:de:d3:72:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:89:00:2D:83:62:54:1C:E1:F3:FE:63:97:CD:84:E6:CF:34:5A
X509v3 Authority Key Identifier:
keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:14:86:fb:f1:6a:90:6f:8e:4c:ec:88:61:5e:31:1a:9e:
35:a6:15:29:23:1b:81:2d:77:42:d5:f7:64:6c:3e:84:60:15:
fb:81:ce:6c:02:d0:e2:40:01:ae:2b:f4:4f:ef:9e:7e:dc:c7:
b8:e1:7b:9f:0b:03:59:68:5c:b7:b2:33:aa:b6:ba:77:fc:96:
22:f8:8f:bd:cf:c4:13:42:a7:0f:6b:fe:02:2f:30:56:3f:cd:
d5:e6:29:69:94:f5:35:5e:10:06:27:21:53:2d:ba:fc:16:ef:
af:67:b9:41:0a:76:be:0f:16:9b:1f:cf:81:d1:08:c2:d2:07:
4e:ab:f0:66:18:3d:ba:01:06:36:d7:ec:55:c6:5f:1f:b6:49:
27:6b:58:ad:a3:ef:06:da:67:a2:5e:93:37:78:05:64:42:a5:
61:e9:ff:49:91:42:5d:5b:6b:be:95:ca:e4:c3:8e:9b:d7:2f:
52:7e:0b:24:29:5f:fd:e6:ff:08:69:d6:1f:0d:24:5c:6c:39:
4e:4c:1e:24:00:f5:96:16:24:b3:e9:01:0c:ec:5e:3c:39:4d:
85:25:56:a6:8a:2e:df:a8:6d:b4:8a:d9:5d:b5:e5:59:fa:d0:
3d:a2:a4:98:63:fc:c8:d3:01:ed:08:5e:4a:de:4d:8f:8d:6d:
af:52:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:25:08 2025 by rpki-client