Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
File: fzdyg9fCNak9x70rgxeydI8oX_c.mft (raw, json)
Hash identifier: YixRiRaa57U4sMg2jFfPS/DopkGQ/NL5Bb6OCXmcKhU=
Subject key identifier: 48:79:CB:8F:DD:74:0F:3D:E1:55:30:84:51:66:C3:23:22:4F:2C:3D
Authority key identifier: 7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7
Certificate issuer: /CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
Certificate serial: 019A71EEB97A6C41CC4472E3A2AE6B019F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
Manifest number: 10
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: fzdyg9fCNak9x70rgxeydI8oX_c.crl (hash: zfhgSBLWC/oqpGc4hpxknSubmPaUIJT4o1oQrmPCxc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b9:7a:6c:41:cc:44:72:e3:a2:ae:6b:01:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=4879cb8fdd740f3de15530845166c323224f2c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:9d:70:0f:d0:e5:bc:a2:e6:36:dc:c9:ed:
c1:5f:7b:32:bd:7b:b6:68:aa:77:de:c1:7e:4d:f4:
d5:e5:4e:45:a2:d0:1e:a1:fd:bd:69:08:1e:f9:a3:
ba:2f:c5:d0:3c:b9:9e:1a:86:a3:e3:66:d0:06:33:
81:be:f4:57:56:1a:f3:53:e2:91:85:e0:c2:69:68:
54:d1:72:07:6d:79:58:f0:7a:0e:92:cf:f0:49:75:
93:7a:2a:9f:35:26:7e:bd:48:ee:3a:e8:28:7f:46:
b9:45:39:14:63:fa:b9:a2:cc:6d:13:56:0d:8f:47:
e9:81:bc:f3:7c:68:5d:8b:ed:62:f4:30:2f:93:8e:
65:e6:ba:ee:94:5a:26:f7:24:3a:8e:5a:9f:cb:88:
9d:35:b9:0a:3d:da:3f:af:f6:0c:25:6d:38:25:27:
68:90:9a:43:bc:a9:c3:87:dc:dc:b8:eb:64:c1:b1:
16:e6:27:9d:7f:7e:ed:32:bd:0c:01:39:4c:5b:fc:
a5:e1:4f:a8:66:bd:0a:40:fc:58:9a:d9:9d:9d:5f:
bc:c9:27:e7:b2:8e:cf:67:a1:5d:fd:57:82:38:39:
e0:c3:0f:43:a6:8c:1c:33:7d:b4:bc:90:95:8c:c6:
bd:bc:34:e3:2c:d3:d1:66:70:3a:25:61:7b:8a:6d:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:CB:8F:DD:74:0F:3D:E1:55:30:84:51:66:C3:23:22:4F:2C:3D
X509v3 Authority Key Identifier:
keyid:7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:4b:37:02:09:df:ff:95:a3:17:b4:12:b7:91:6c:d8:9a:
fe:a6:6b:00:18:1d:73:6a:8a:14:dc:c0:36:96:6b:40:e0:20:
0d:a6:cb:39:36:3a:ac:58:fa:83:70:c7:81:76:51:5d:4d:0b:
a0:01:45:0e:ab:46:d7:cf:bc:96:cf:c2:46:85:94:64:bc:26:
b9:9e:91:71:91:80:23:6f:09:62:b5:f3:6b:73:e4:0a:63:ec:
5f:16:39:8c:b4:73:70:49:a4:44:c8:87:1d:16:a3:38:15:8a:
fb:ca:a1:db:38:44:d8:86:79:07:01:ae:4e:b3:95:61:29:15:
e0:d4:cd:fe:d0:08:98:d0:5d:e4:68:8d:b5:cb:f1:b6:9b:61:
a0:06:5a:91:85:c9:7a:00:27:02:94:ae:94:3d:b7:85:07:66:
23:fd:3c:39:00:01:27:fb:85:45:26:f5:f8:8f:e0:f0:e4:77:
b6:c9:20:a3:ad:22:7a:3f:2a:e7:70:4f:3c:5a:17:c0:48:24:
e2:9e:a5:c9:51:98:0e:ac:b4:d9:de:6f:da:3c:75:5b:3e:78:
72:09:7e:41:09:4d:ec:b1:57:11:bf:30:06:1e:0a:84:48:88:
ee:01:c7:68:23:98:e5:3c:c1:29:30:44:a6:f8:8c:7b:07:fe:
85:5a:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:44 2025 by rpki-client