Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: DSPpR4bqEQHAKjR9u5mJqD77H0n9cxfLd9Ketrr3ils=
Subject key identifier: 5C:6C:91:C2:CE:A6:3C:5E:F8:35:BE:B3:89:49:19:A8:95:53:FC:FA
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019A71B910768BDFE5541813CD4246FA62F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0CA0
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: vEs8lJBVhrufNeyYiYgOko6fxtz0j+S6xepmmnC8lWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:10:76:8b:df:e5:54:18:13:cd:42:46:fa:62:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=5c6c91c2cea63c5ef835beb3894919a89553fcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:47:9a:94:0c:fd:da:cf:cb:bd:7a:5d:39:
9e:3a:4a:99:ed:7a:d7:b8:26:f4:c7:4b:29:be:8f:
21:ef:eb:b4:aa:df:75:77:1c:4e:60:51:a5:9e:9d:
7d:66:a6:ee:be:ec:a8:44:0b:21:9f:ac:ca:c2:9c:
01:91:25:32:8a:6c:52:fe:72:af:c7:0d:74:83:0f:
d8:de:12:d7:39:ae:d7:8f:00:f9:00:f9:30:9c:d8:
e6:a0:18:8b:eb:dd:1d:a4:4c:ad:06:c8:5f:75:6e:
4b:96:9d:06:bb:0f:51:53:35:0b:79:33:b1:16:d2:
11:30:8e:f1:09:ed:c6:14:b8:2b:0c:3e:61:b9:6b:
a8:54:36:55:85:91:51:db:62:61:23:d4:a4:b3:12:
cf:3a:8a:97:b6:de:80:f4:95:89:1d:11:d3:fb:97:
ab:24:83:34:a8:29:03:2b:a0:6d:e6:63:d8:2c:a2:
02:0b:d5:29:5b:6e:89:b0:c2:57:82:7c:d5:69:77:
43:27:c3:3c:3e:88:cc:8d:ba:2d:5c:89:25:c2:4d:
28:f0:06:d8:80:bb:ac:b5:43:dd:28:08:5d:5a:c8:
a8:a3:32:fe:87:2f:d9:d2:7e:e2:9d:f1:80:b1:ec:
d5:0a:a5:0e:9a:c0:9b:d3:93:10:9e:bd:0d:29:a7:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:91:C2:CE:A6:3C:5E:F8:35:BE:B3:89:49:19:A8:95:53:FC:FA
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5c:82:9d:64:7f:e4:26:76:f8:e8:2a:52:f3:47:0e:1c:55:
c1:2f:e5:0a:c6:3d:12:c6:d0:a6:76:d7:d9:fe:71:d7:0a:4e:
db:27:fc:36:dc:a4:ce:e1:8e:0d:19:49:8f:71:9c:ef:c6:e5:
d0:c9:db:bc:c2:fb:18:e1:e0:6d:e7:45:4c:c5:34:79:89:b1:
f7:a2:bf:8a:d1:6e:b3:88:33:ad:7c:aa:0d:b4:c6:26:0e:f1:
cf:7f:d6:64:1a:fc:af:98:04:a6:1f:32:48:37:a0:ce:5d:3a:
e4:84:c5:cd:c2:90:00:b3:dd:a3:bf:6d:8f:c4:8c:24:14:c2:
3e:ad:0d:bb:26:10:8b:5c:cd:96:7a:49:b7:e2:ef:1f:61:e0:
82:20:72:77:c4:42:13:2a:b6:e1:a1:0a:8f:51:15:ef:41:30:
1a:ac:db:82:a2:42:5a:b5:af:5a:da:49:f8:0a:d8:cf:b4:ca:
9f:fc:33:63:0c:0f:3c:54:c4:29:d0:cf:4d:93:68:f5:33:1c:
8c:d4:e8:9b:47:a6:3c:f6:c7:1f:aa:f8:e1:07:72:8e:27:88:
15:94:e2:ab:d7:c7:1b:3a:06:00:d5:7d:5d:3b:a9:d8:ef:b3:
f1:74:47:73:21:8e:12:61:5d:82:ad:42:57:b2:52:28:00:7e:
51:f6:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:10 2025 by rpki-client