Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier: j7gWnkqIZcyzL7nFjlfAHoEDV4QvQli4IIhyVReeJIw=
Subject key identifier: AF:6E:03:88:4E:D5:EB:C2:01:56:CA:61:92:A2:33:52:16:9B:8D:89
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial: 019A71B7D258C133AE192CFA502DD966C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number: 0691
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: +lTI0d6NzZ+raRuVDeKh08WP3NqLFgDVBomCG0NXhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d2:58:c1:33:ae:19:2c:fa:50:2d:d9:66:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=af6e03884ed5ebc20156ca6192a23352169b8d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:a8:4a:70:df:77:5b:fe:61:37:ea:9d:b6:
c0:d1:54:ad:15:f2:8c:97:22:2a:36:6f:24:15:1f:
ef:39:99:e9:46:a1:e0:e7:2d:b4:7d:b9:89:db:d3:
f8:e7:bc:e8:84:c1:fa:33:e0:55:6e:45:17:83:2a:
76:03:3d:05:b4:49:82:35:48:4b:04:ba:fa:36:6c:
c4:9f:85:48:da:f4:e4:c2:9f:8c:65:9e:77:f5:da:
9c:5a:37:80:ba:fa:4a:a8:3b:4c:6c:c7:be:2c:ca:
70:c1:bd:94:ea:32:47:8c:33:44:ff:ef:59:5c:bf:
95:ec:32:6d:93:39:07:17:fc:86:21:2c:d3:ff:95:
69:40:21:04:4f:7b:29:44:d7:f1:89:10:12:90:9f:
40:91:89:46:12:06:45:1e:f9:df:90:00:01:db:2d:
88:5a:97:39:4a:2e:20:46:6e:43:fe:5b:e6:2b:c6:
b9:55:77:01:d0:ec:60:2e:79:41:af:be:5c:21:b0:
30:ae:de:d6:48:cc:9b:18:dd:a9:17:9c:6c:cc:73:
20:12:40:b6:68:62:31:7a:5b:96:88:d2:0e:ae:0c:
3a:e1:0e:08:0d:d0:3b:dd:03:c2:d3:3e:3f:dd:95:
7c:59:6f:93:51:fc:41:5f:f0:05:47:aa:72:c8:ec:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6E:03:88:4E:D5:EB:C2:01:56:CA:61:92:A2:33:52:16:9B:8D:89
X509v3 Authority Key Identifier:
keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:19:ee:4a:1f:9f:d3:77:ef:c6:15:45:a8:89:54:94:d7:
a2:c9:dd:2c:52:f9:98:60:13:86:c4:21:78:98:b4:c7:a8:78:
80:a1:b6:f6:29:04:cb:ff:37:52:75:88:70:07:08:be:3b:a0:
cf:b5:78:83:b4:e0:92:da:14:08:0d:be:70:51:33:8f:97:28:
78:47:03:d9:29:97:c7:a9:c7:dc:31:62:98:54:43:bb:96:bd:
75:01:df:fb:d8:d6:8e:6e:3b:c4:62:81:5f:b0:46:94:38:82:
5c:e4:fb:31:56:45:cf:48:45:cc:4a:af:18:f2:a0:83:fe:92:
de:08:4b:c4:cf:08:1f:56:14:82:ff:b1:47:4a:48:6e:b4:aa:
cd:c2:a9:0f:33:49:fb:99:fa:ea:35:06:b8:6b:48:dd:6c:70:
9e:16:38:4f:4c:d9:92:d8:28:fa:e2:6a:b7:0c:27:7d:ae:7b:
ac:ce:b1:ea:32:bb:c3:a6:ff:2d:f8:bc:15:f3:68:fc:5d:43:
6a:5d:4d:b0:1e:8a:c2:a0:e7:04:c8:60:7f:03:32:a9:33:b0:
14:4e:18:36:ed:c0:0c:9b:a7:3c:e4:98:19:2c:20:e7:ce:12:
01:dc:b7:14:a2:a5:3e:d2:28:79:d2:c8:99:e7:3e:5b:63:42:
5a:1a:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:49 2025 by rpki-client