Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft
File: FhQcZCnqr_caNR-yVz32A7uV8nA.mft (raw, json)
Hash identifier: AwSFRwj25KiHLDMnIGvirzODl/I/Lv9lqB5098j6nio=
Subject key identifier: B7:BF:32:C5:16:61:70:8A:9D:48:86:47:BA:FB:08:06:EA:03:EA:D9
Authority key identifier: 16:14:1C:64:29:EA:AF:F7:1A:35:1F:B2:57:3D:F6:03:BB:95:F2:70
Certificate issuer: /CN=16141c6429eaaff71a351fb2573df603bb95f270
Certificate serial: 019A73A6C3494BCC14F73A74C6FC3AE7BCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 16:01:40 +0000
Manifest this update: Tue 11 Nov 2025 16:01:40 +0000
Manifest next update: Wed 12 Nov 2025 16:01:40 +0000
Files and hashes: 1: FhQcZCnqr_caNR-yVz32A7uV8nA.crl (hash: Ch/RXNc6V2IZrxctv5fw36ZrKPNRWwsRTW+mDyqi21s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:c3:49:4b:cc:14:f7:3a:74:c6:fc:3a:e7:bc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16141c6429eaaff71a351fb2573df603bb95f270
Validity
Not Before: Nov 11 16:01:40 2025 GMT
Not After : Nov 12 16:01:40 2025 GMT
Subject: CN=b7bf32c51661708a9d488647bafb0806ea03ead9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:51:69:e4:c1:fd:62:7e:a8:ce:a9:07:0b:
8e:2a:db:8b:7a:17:78:20:35:d1:80:82:7b:8f:ef:
45:ad:df:91:df:9e:5a:88:34:a5:50:e6:8c:9f:c4:
6c:5b:d1:29:c5:c2:bc:47:c2:e0:9c:8c:9e:2a:1c:
11:e8:cc:67:84:3b:05:6e:f7:e6:08:78:3a:f8:a5:
15:03:ff:0e:75:b0:95:e2:02:06:62:02:92:98:5f:
16:2d:5a:75:53:91:bb:e0:5e:1e:59:48:06:be:90:
34:af:27:25:12:fd:5c:d3:c4:c8:1e:98:6c:27:da:
ec:34:57:6d:1f:7f:58:16:93:a5:3c:63:a5:f0:59:
99:d5:2f:f3:fe:f4:01:e9:59:bd:0f:0a:56:d5:9e:
d5:0b:d2:63:c6:71:fc:9f:f3:9b:43:66:ee:b1:a4:
b3:26:74:23:49:c8:bc:7f:0c:cd:8f:cc:fb:47:7b:
01:b7:ff:10:07:8f:6e:4e:94:03:40:68:17:c9:4c:
9f:70:9a:0e:18:2b:9b:d5:ec:4a:35:9c:58:53:04:
8b:7c:b7:5d:78:e4:db:ad:ee:0e:0d:e5:38:5f:db:
74:b1:26:a0:6d:6e:a8:b9:d0:1f:f2:48:05:a8:2a:
82:30:63:e9:b4:0a:e8:a0:09:9e:ae:01:5b:01:bb:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:32:C5:16:61:70:8A:9D:48:86:47:BA:FB:08:06:EA:03:EA:D9
X509v3 Authority Key Identifier:
keyid:16:14:1C:64:29:EA:AF:F7:1A:35:1F:B2:57:3D:F6:03:BB:95:F2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:44:37:4f:ac:58:66:f9:1f:43:1f:2e:a5:74:50:a2:59:
9d:f6:59:4b:cb:b2:10:1b:bd:70:8b:ad:15:1a:5b:2a:ee:94:
a0:aa:63:f1:2c:95:27:55:c7:2e:8c:75:db:01:8d:95:ff:8b:
c8:e8:12:1d:4d:f7:4a:24:7a:40:84:b5:57:0f:69:44:bc:30:
b6:e5:01:2c:e7:1f:49:09:26:d3:d0:a5:7a:2c:37:fa:81:6b:
77:19:c8:08:3c:80:a3:ff:38:0f:18:52:c9:f7:3d:aa:ac:4d:
d4:af:9f:e8:32:bc:78:ce:f8:28:65:0e:39:a8:40:71:0e:1e:
aa:82:cd:53:f4:c9:86:87:37:4a:8d:56:14:d9:de:60:cb:62:
ca:2a:d0:6b:ae:a4:39:b2:92:d3:2d:a8:4b:29:a4:73:8f:88:
8f:a3:73:57:2c:b3:98:f6:c0:00:1b:92:ff:44:8f:6b:ea:46:
0c:56:bb:db:7e:77:e2:52:6f:b9:e4:2c:d1:03:78:f8:d1:c1:
8f:ac:c6:fd:35:f8:70:36:4a:3a:dd:de:ab:4b:41:63:ca:0a:
33:e7:1c:9d:44:77:7c:2f:9a:44:06:5a:16:5a:8a:35:b0:81:
f5:4b:a2:c3:a3:c7:c6:53:80:ee:6a:12:77:9f:45:15:e4:9f:
e0:71:d0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:19 2025 by rpki-client