Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
File: F-6GQi--PqSClo1Du-gwphS8MFg.mft (raw, json)
Hash identifier: /IAdYOlxVzij28neN9IhJ5KBN4ZnMinou/lbXpGxcHk=
Subject key identifier: D7:85:67:B7:6D:CB:65:25:25:8C:F8:72:78:4F:5A:2D:74:EF:B5:D3
Authority key identifier: 17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58
Certificate issuer: /CN=17ee86422fbe3ea482968d43bbe830a614bc3058
Certificate serial: 019A718081824DF76B9B49809F0FB83ACCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
Manifest number: E0
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: F-6GQi--PqSClo1Du-gwphS8MFg.crl (hash: RrC4fK4Fb8AREvBUSW17xirP8iJ813JQNyKU5+38L+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:81:82:4d:f7:6b:9b:49:80:9f:0f:b8:3a:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ee86422fbe3ea482968d43bbe830a614bc3058
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=d78567b76dcb6525258cf872784f5a2d74efb5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:df:f8:17:88:ea:44:44:7f:2c:cc:80:e8:
e7:b2:0c:60:ef:ce:91:ce:b4:03:a3:81:4b:26:d8:
48:5a:be:93:9d:7e:f8:25:a5:4e:5e:fb:31:09:0a:
ba:ce:f2:0d:ec:b7:88:ce:30:6e:3c:a7:d8:45:fa:
16:ce:81:dd:27:45:51:02:85:e4:14:3e:b5:3a:bd:
59:79:1a:af:ce:81:f3:7c:83:a1:7f:35:f2:8d:b9:
4d:19:3d:08:65:a2:ee:3e:fe:bd:aa:1a:29:ec:60:
8b:a9:68:32:46:a7:ce:ef:cc:09:d1:36:4e:38:c3:
64:20:da:b7:97:9d:72:b3:93:70:2a:37:e8:15:7e:
9d:c5:be:4c:17:ba:c0:fc:b9:da:c7:94:af:9a:05:
7c:dd:b1:a6:29:93:d6:c4:1e:bc:08:11:7b:18:81:
5b:3a:6b:2b:79:c8:76:bb:ae:fc:54:20:06:37:2a:
80:ab:2c:26:0d:b8:5e:ca:3e:d2:6b:5c:56:7e:15:
5b:3d:32:9e:ed:16:ed:b7:28:7e:91:08:b4:72:88:
fd:08:cd:a3:b5:77:e8:5e:85:ce:7d:a3:b3:dc:7c:
e8:8a:ae:4d:82:3c:97:d4:7b:6f:68:2d:15:42:b1:
d5:e6:a9:64:60:56:d9:da:fd:74:3c:c3:a4:dc:ba:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:85:67:B7:6D:CB:65:25:25:8C:F8:72:78:4F:5A:2D:74:EF:B5:D3
X509v3 Authority Key Identifier:
keyid:17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:a4:71:1f:e2:72:db:15:3d:da:db:22:8c:f3:41:56:c0:
ab:5b:0c:98:73:95:c7:fa:0b:f3:5b:21:44:e0:fc:24:e8:4a:
63:a7:f4:e1:06:ce:8e:41:b0:60:f1:06:c2:92:f6:0c:8f:d3:
aa:07:6b:58:f0:4a:50:5d:31:1a:9e:07:fd:02:ef:5c:64:06:
01:df:d9:d9:b1:2d:bd:1c:bf:c9:b5:86:bc:b5:51:59:f3:db:
f1:41:ab:2d:08:7c:12:03:2c:e8:03:2c:a0:89:bd:2e:7d:d3:
0f:da:b3:5b:15:70:02:c0:18:48:a8:bc:90:75:ac:fc:97:6d:
21:dc:da:36:2b:e7:1c:62:14:7e:62:7f:b3:03:fb:29:eb:dc:
81:03:ea:07:28:56:07:9d:1f:11:9d:8d:ed:9f:aa:17:89:eb:
b8:97:12:49:1c:51:cd:2e:8c:73:60:c0:c1:d5:d4:e2:96:fa:
5b:27:c1:ce:5c:36:04:d4:d5:fa:62:30:91:6e:51:4b:3f:80:
0a:9d:4a:bf:c3:e8:71:d5:50:3c:4b:3a:d2:b1:0d:d1:e7:f5:
0a:47:74:3c:71:20:c8:28:fc:c0:4f:b2:e5:c9:a3:b3:47:06:
31:80:97:8a:fa:dc:fb:35:cd:cd:a3:bd:11:c5:5a:59:41:64:
19:f0:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:04 2025 by rpki-client