Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: mg0F9/9p8SQvJwjcQcC6N0/1PM/dsUqNxS93wROre10=
Subject key identifier: C7:CC:AD:A2:E3:42:E6:62:C6:7C:1D:5C:DE:71:62:38:A0:AB:48:37
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 019A7301A6D55B79ECA8CF6A7F52DB7D45F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 06D7
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: KuQX4HiCcgmS/TaOc67+HimkwA8O3ODRF1tSjmunETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a6:d5:5b:79:ec:a8:cf:6a:7f:52:db:7d:45:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=c7ccada2e342e662c67c1d5cde716238a0ab4837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:66:09:e3:a1:fe:9a:44:b6:a6:20:d3:20:
c2:cf:bf:8f:13:d2:a3:3e:ed:ac:b2:45:40:d3:09:
4c:c6:1c:d8:c7:da:5b:82:0c:b9:e9:7c:99:b9:13:
30:72:8c:1a:61:02:e2:16:be:da:97:36:02:3f:c5:
6e:29:11:19:34:b5:55:ca:43:bc:6b:59:ec:95:cb:
7d:17:9f:41:de:87:0d:0d:39:94:d3:25:c5:dc:db:
3f:d9:5f:06:6e:07:a8:c2:cf:c7:ed:74:d2:62:0a:
44:58:37:1b:33:6e:c9:07:8b:3b:96:6c:04:31:a3:
19:c9:ed:84:69:85:d9:d0:64:d9:23:31:71:0b:7a:
19:10:34:40:f1:f4:91:b4:aa:de:7d:e9:5a:27:59:
53:f2:ec:76:42:9b:f6:d7:86:52:64:1c:49:fd:e2:
3e:ac:a2:8a:67:0a:3b:5f:34:3a:4e:b2:61:26:68:
bf:24:ec:11:7b:43:d2:87:55:67:d1:53:ae:a8:d2:
9a:7e:81:ba:eb:3f:9f:d0:10:4d:a3:80:bf:0a:e1:
c7:4b:c5:ef:dd:a8:00:ce:b6:21:0a:4b:00:06:ae:
df:bc:b9:e6:6c:4b:f6:98:69:ab:53:d8:e4:53:40:
ee:8e:09:85:58:97:ea:e8:ce:2c:f6:3f:61:56:89:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CC:AD:A2:E3:42:E6:62:C6:7C:1D:5C:DE:71:62:38:A0:AB:48:37
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4b:63:fb:c4:d9:ba:37:b8:1d:a8:36:eb:a1:fb:f4:c8:69:
6e:c0:a6:06:39:b3:2c:db:89:ba:92:9d:8a:3f:cb:a8:ca:29:
29:f7:bb:07:2c:da:6a:c8:5a:b0:d4:f8:51:08:47:02:5b:14:
e2:96:58:f5:02:0e:8e:a0:2d:bd:b5:ad:28:aa:f0:4b:3c:ab:
47:33:21:db:31:85:4e:25:36:4a:ef:89:f4:c5:0d:96:a9:b3:
5b:d8:0f:db:c7:35:a2:b7:44:fc:aa:5c:7c:24:d9:93:ff:13:
aa:1e:e1:8c:20:34:f1:cd:48:02:21:ec:60:aa:ed:15:57:31:
97:73:17:3b:af:13:c6:ad:b1:63:b9:85:b1:f3:ef:73:6a:d1:
7e:c3:4f:07:c1:e6:01:b7:26:e7:ba:59:cc:d9:29:c5:c3:b1:
d0:4e:bc:f5:33:18:46:80:48:6a:ce:89:07:91:f3:5d:48:e7:
71:c2:26:0d:b5:9d:a2:82:e6:05:80:fd:0a:46:a7:65:0f:b6:
bf:82:66:8f:cc:6c:71:6a:99:8e:02:30:b4:b7:03:51:54:70:
f1:3a:c1:54:63:23:9f:48:8a:f4:c5:84:14:b9:de:f4:7c:df:
5f:a4:5d:11:6d:ce:f2:63:69:8e:7e:00:f2:58:e8:2a:4e:fc:
93:ab:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:21 2025 by rpki-client