Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json)
Hash identifier: XT9LkaDA7Uw+AVOM4zvgafrZGb0kWB0uhw6GUvhJwAc=
Subject key identifier: AE:95:66:CC:DC:BA:A9:E1:AB:F6:DB:FC:E6:89:CE:4A:D4:E7:89:64
Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Certificate serial: 019A2A443000DCD5BF0359835258FC910F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
Manifest number: 16F6
Signing time: Tue 28 Oct 2025 10:01:43 +0000
Manifest this update: Tue 28 Oct 2025 10:01:43 +0000
Manifest next update: Wed 29 Oct 2025 10:01:43 +0000
Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: aYojhNJokduS2fUvgbCgOCCXhCjbhoJ0rQyc1sKswqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:30:00:dc:d5:bf:03:59:83:52:58:fc:91:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7
Validity
Not Before: Oct 28 10:01:43 2025 GMT
Not After : Oct 29 10:01:43 2025 GMT
Subject: CN=ae9566ccdcbaa9e1abf6dbfce689ce4ad4e78964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:56:16:bc:a1:81:1f:fa:cd:75:a1:ff:d1:
1c:8b:c3:9a:58:a3:ce:5e:16:53:bc:e0:44:3d:22:
5d:03:6e:54:82:3c:ff:e9:79:77:97:b8:3e:0e:a1:
42:8a:8f:41:ff:43:5c:5b:3b:fa:95:f7:46:3b:66:
9a:65:fd:6a:fd:ec:d5:c6:4c:91:07:e9:43:4a:e6:
ca:99:33:10:ae:0d:9c:29:a4:d6:71:51:27:45:3d:
b2:82:0d:57:0d:a5:dc:d9:85:d0:55:7d:bf:9e:4b:
9d:c7:04:63:b7:1a:cf:5f:ed:99:29:66:17:9f:a3:
72:be:d9:1e:44:dc:02:ea:24:65:ba:08:00:fa:ac:
fa:9b:1f:ec:aa:1e:c2:e4:0e:06:09:9c:7a:53:d7:
58:bc:2b:f3:b5:fa:92:2e:db:85:f8:4d:42:19:7d:
61:c0:50:fe:3f:c4:99:d3:13:db:bd:35:6e:37:a8:
88:24:31:db:1a:2f:4a:0e:b0:d2:76:68:20:2b:be:
17:f1:7a:3e:87:00:88:76:c7:5a:6c:63:69:ce:14:
53:b4:e9:e5:a7:cb:a3:8c:9e:83:eb:e5:1e:8f:04:
38:8e:72:8b:86:6b:19:c8:c8:24:9a:c6:30:95:6c:
14:90:16:81:db:67:32:38:5e:c4:cc:e0:3d:b9:27:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:66:CC:DC:BA:A9:E1:AB:F6:DB:FC:E6:89:CE:4A:D4:E7:89:64
X509v3 Authority Key Identifier:
keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:97:35:7a:6c:0d:6f:14:74:ec:48:1c:4a:e1:de:79:33:
59:54:cd:cc:05:dc:b4:ac:2e:f0:1e:61:d0:de:84:97:6e:46:
1f:fc:27:36:58:2b:c2:1f:c6:a5:3f:52:fa:0a:c9:39:a0:4b:
3f:bb:5c:e4:80:c7:6f:37:e1:02:b8:05:e7:f6:c2:c3:e1:af:
41:61:87:84:2e:43:8e:2e:fd:94:56:76:df:0c:91:e4:06:12:
d7:8d:5c:b9:87:81:e6:2c:be:80:b4:3c:80:d7:86:b4:c3:bf:
e8:50:c9:b9:14:25:1b:dc:ed:99:d8:99:b5:99:ac:af:3f:18:
c1:b1:a4:19:08:ec:b0:13:28:18:ab:64:19:68:51:96:5d:c2:
65:d2:d9:be:e7:02:82:fc:81:1f:08:d1:69:5f:8d:f1:06:aa:
00:71:87:41:21:df:8a:26:78:b9:ff:dd:18:b9:5e:8d:2d:6b:
4e:b1:7f:6c:04:d0:58:9a:0f:eb:4e:ee:78:c3:92:7e:a6:5e:
89:41:7b:64:01:b4:3e:d9:88:c0:04:3f:0a:50:64:fd:4e:5c:
b2:b3:52:8d:c4:bd:b5:86:78:44:fc:99:e6:48:79:e0:76:c0:
43:c3:6f:ea:55:fb:b8:b5:06:f2:1f:48:9c:50:18:a5:5e:12:
e2:2c:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:05:55 2025 by rpki-client