Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
File: FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft (raw, json)
Hash identifier: bD9pmetG6osNGIyW4QG36Ia137J/G2MU3g518+K2FS0=
Subject key identifier: 57:6B:D8:F4:5A:86:2D:6F:CD:DD:13:EB:12:0B:94:31:35:FA:06:8E
Authority key identifier: 15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
Certificate issuer: /CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Certificate serial: 0199240D08E6079CA3D1B9608A929C1D46EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:00:57 +0000
Manifest this update: Sun 07 Sep 2025 12:00:57 +0000
Manifest next update: Mon 08 Sep 2025 12:00:57 +0000
Files and hashes: 1: FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl (hash: Uh9kPSqsqJYgS5jT2MiZvgFPjFs1ES7K+LzMdm3aNqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:08:e6:07:9c:a3:d1:b9:60:8a:92:9c:1d:46:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1515e2fef4d31245dc67018befc3374dc0f1ec68
Validity
Not Before: Sep 7 12:00:57 2025 GMT
Not After : Sep 8 12:00:57 2025 GMT
Subject: CN=576bd8f45a862d6fcddd13eb120b943135fa068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6c:d5:56:f9:5b:3c:8b:7c:af:fa:93:22:8b:
d4:b8:06:b9:d0:36:6c:d9:80:1b:d8:58:21:5f:14:
a1:0b:2a:68:01:3a:7d:cb:a6:84:02:81:b8:24:74:
a5:23:c1:f0:d8:c6:95:a9:93:17:1e:c5:bd:e0:a6:
8e:14:1d:05:89:ce:3e:bd:a5:41:8c:90:0d:7c:c3:
20:cb:aa:bd:2a:ec:77:ef:5c:d3:07:0b:ea:0e:87:
7a:b2:ce:dc:c2:59:0b:de:0f:24:05:79:66:2a:92:
e6:44:9f:41:82:83:67:67:9b:26:b7:e9:fe:e0:b6:
76:46:eb:39:2d:ff:5e:ff:b2:a9:d9:c0:2f:52:40:
68:e9:38:75:2a:ff:c7:71:30:fc:96:1d:66:3d:0a:
88:01:b1:18:b2:9a:72:20:8d:68:64:8d:ef:a7:b5:
30:a1:eb:07:3f:2e:a5:32:7e:94:78:bc:78:75:cc:
2e:98:73:00:81:77:a0:a5:6e:83:3e:b5:05:2b:9e:
d0:11:4b:2d:3c:e4:59:a5:80:2c:2a:df:ed:91:68:
ff:58:01:a9:db:91:83:0b:6e:26:0e:0f:3e:cb:c8:
d7:7c:21:5c:e2:16:7d:b5:ad:aa:09:99:ba:53:14:
77:fc:3f:e9:4c:47:ab:d9:68:fe:58:f9:ea:3e:32:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:D8:F4:5A:86:2D:6F:CD:DD:13:EB:12:0B:94:31:35:FA:06:8E
X509v3 Authority Key Identifier:
keyid:15:15:E2:FE:F4:D3:12:45:DC:67:01:8B:EF:C3:37:4D:C0:F1:EC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRXi_vTTEkXcZwGL78M3TcDx7Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b0c936-983d-4390-896a-7d13dd283e80/1/FRXi_vTTEkXcZwGL78M3TcDx7Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c8:0c:fb:2d:f4:91:73:a6:f1:77:d5:bf:28:3a:f6:ea:75:
9c:cc:6d:eb:41:db:ac:64:02:f9:8f:78:68:da:7c:47:ec:ef:
34:2d:f7:33:d0:77:10:c9:4f:ba:c8:28:47:1c:9a:27:e1:0e:
9b:b3:ba:fa:64:61:6c:98:6a:13:4c:45:42:e6:af:92:58:25:
23:fe:a4:0d:82:55:37:a0:60:40:05:01:e0:dc:14:2d:d8:9d:
48:f1:04:80:4e:42:05:9b:7a:cc:2c:02:31:d3:08:b0:60:f6:
b9:28:96:16:b5:7a:aa:c4:de:4e:b2:1d:44:c6:c8:d1:4b:94:
7c:f1:f1:6a:6e:98:25:88:02:4f:b9:38:9f:c6:91:db:d5:ec:
05:00:bf:39:e0:7a:4f:a5:57:ef:ea:30:e1:fd:ee:5f:d3:ca:
f7:83:dd:6b:49:55:69:f5:e7:89:81:7c:b7:b2:95:f4:76:19:
24:00:85:3d:56:f6:17:c8:02:54:a2:1c:6e:42:e7:51:a3:cf:
ab:06:97:0e:b3:2f:10:f0:f3:7c:e7:8d:fe:2d:9d:fe:52:6e:
88:a9:8a:5b:95:81:9b:4e:d1:4a:79:1e:0d:33:4a:79:df:90:
c9:4d:81:f7:1c:c1:a9:9d:4d:57:7b:80:3c:ba:28:50:5e:75:
61:a7:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:15 2025 by rpki-client