Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
File: FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json)
Hash identifier: P0AyXLA1+pSAyQUpBQ5CZTbjmVAv9qVo+rw11n7mwlM=
Subject key identifier: DF:F7:84:A8:75:AC:CA:EA:B2:D1:CD:17:0B:C2:43:A6:25:F0:7F:77
Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
Certificate issuer: /CN=16f02e70a6553ff0c665139ee55671c860658081
Certificate serial: 019A70DC45FD71F72D830EE5F11BF184706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: StnIumnF7NfZOOAGEfWK8Oc5XCTL/FbpQ7MDT6WxvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:45:fd:71:f7:2d:83:0e:e5:f1:1b:f1:84:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=dff784a875accaeab2d1cd170bc243a625f07f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:4c:9e:a4:ad:ed:70:18:4d:c6:ee:a8:7c:
ef:02:e9:20:ab:de:fd:5c:91:55:f6:0e:ed:1c:bd:
f9:c6:55:48:dd:5b:81:4b:0b:36:e2:a4:89:56:67:
ec:d0:b6:ce:51:d0:a6:b9:3d:92:0e:1e:6b:a1:fb:
71:96:c4:fa:fe:77:57:1d:74:24:40:88:b8:71:92:
ad:75:fd:fb:60:b6:f9:d3:f2:df:10:a6:c6:40:c8:
8f:e0:6f:e2:4f:dd:82:f7:07:97:93:f0:87:8a:5e:
53:6b:24:c8:1a:cb:7d:f4:5f:8b:03:d9:7c:58:cd:
9b:d4:98:20:dd:cf:83:2a:9c:1c:1d:8d:88:ac:07:
0d:31:38:9d:3b:56:cb:a6:e5:d0:32:64:97:6d:77:
d5:62:3e:b5:c5:82:2f:99:87:d1:68:db:09:c8:d5:
a3:d1:06:89:43:fd:2d:ef:d7:22:a8:ba:a7:ec:2e:
39:16:85:b0:35:cd:9a:59:fa:de:a8:6a:ad:d0:da:
1e:d8:e6:13:13:c1:69:98:d0:bb:0f:0a:a6:08:08:
3f:24:46:1e:e8:2b:8f:1a:26:9c:2a:05:09:3f:27:
68:e8:04:a7:9f:4d:7e:02:fb:c9:76:42:22:1e:08:
5a:c9:e8:c3:bc:48:c9:43:4c:59:af:07:4c:c9:a0:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:84:A8:75:AC:CA:EA:B2:D1:CD:17:0B:C2:43:A6:25:F0:7F:77
X509v3 Authority Key Identifier:
keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7c:7e:d5:79:fb:0a:58:86:78:22:e1:09:e1:41:2b:59:50:
90:76:d5:8c:f2:02:ae:a3:5e:a5:4d:73:21:9a:a4:6a:38:53:
26:ad:a4:85:17:12:fa:59:1e:26:ce:79:c4:d1:a6:76:48:da:
ce:3c:76:4c:b5:5e:5d:1b:5f:93:1b:83:05:67:e6:df:33:43:
7f:3d:43:cd:d2:6c:55:6c:9d:6f:48:08:00:cb:5b:50:be:2b:
df:38:ce:4d:28:b0:49:13:07:ed:18:09:b0:ce:f5:92:1b:98:
23:ad:f8:b2:28:84:c1:bc:a2:df:3e:8e:39:04:0f:da:7c:0a:
69:b4:72:3c:85:d0:b8:b1:10:11:33:d5:d0:68:dc:8d:c6:ac:
00:5b:09:5c:e8:4b:48:7a:2d:82:6f:c4:7e:da:c4:9a:cc:9d:
78:d2:5e:53:55:8f:b0:9d:64:8e:a4:8a:f7:73:3e:ac:94:5b:
a8:67:c0:38:45:63:da:f3:de:13:7f:68:00:f8:b9:69:68:63:
7e:30:a2:d7:7a:77:d2:e0:5d:0e:3f:be:56:87:07:7f:38:6f:
07:10:4c:75:96:12:6f:e3:08:d0:fb:32:84:a3:29:31:f3:a8:
92:ac:ce:0e:c8:e3:85:1f:a0:d9:40:d3:ce:09:77:66:13:f1:
a2:c5:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client