Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: /khiAinf1yYqia7b6MoQ86lw2b6HqjBh7TbHPhcFAOo=
Subject key identifier: 0B:A4:9D:15:2B:47:12:02:E4:F1:19:F8:6B:82:27:13:0D:AF:8B:F8
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 019A7113058AECF57A6FC2F09D9BD5AA69FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: CIzNhT7NJRwD3ppzNoIiM1Wv5D3g0zY6krQXGrK9oDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:05:8a:ec:f5:7a:6f:c2:f0:9d:9b:d5:aa:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=0ba49d152b471202e4f119f86b8227130daf8bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:a8:40:75:eb:08:ad:4e:20:09:64:8c:93:
e6:4f:34:63:bc:75:a9:e5:d6:95:c1:a2:69:9a:37:
5f:a6:54:35:0e:df:cf:1f:24:81:86:cb:b8:1d:51:
54:8c:fe:6a:9c:15:36:aa:ea:80:9e:f6:bc:2a:07:
2e:52:c9:39:97:37:2d:86:61:d0:16:0f:3b:a7:fd:
d7:fd:fd:3a:41:4f:95:60:4b:fe:b3:34:d2:44:dd:
b1:0a:88:e3:fc:6c:59:74:39:0b:f3:7f:55:64:84:
90:6f:c5:ee:b8:c4:ff:ef:62:34:57:23:1a:f5:d3:
58:37:7d:d4:ba:b9:ab:4c:f2:0b:e7:80:02:60:06:
da:d4:4d:fc:19:10:46:e4:2a:6e:70:3f:b3:d5:ec:
51:6a:3f:09:90:c5:b5:3a:0e:84:7d:04:71:83:c4:
49:d9:4b:c6:5c:c8:ba:fa:aa:63:3e:a6:39:e7:3a:
ee:54:13:e2:08:91:eb:f2:39:2d:03:09:6f:64:8c:
c7:31:79:f4:a5:cc:3f:bc:0b:d1:c7:9c:e6:e5:15:
8a:6a:9c:54:b8:e0:b7:40:13:ba:52:4f:6f:67:06:
ea:f9:eb:d5:ee:a3:f5:0d:53:37:a3:b3:0b:5c:13:
10:ee:83:97:96:c6:46:ad:62:d8:27:e0:cf:b0:c2:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:9D:15:2B:47:12:02:E4:F1:19:F8:6B:82:27:13:0D:AF:8B:F8
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f7:37:34:d6:5a:44:9d:b4:c8:05:63:4a:ab:7b:4e:ca:5a:
3a:05:92:9d:dc:a0:ee:07:e3:ea:dd:6d:8f:7f:23:b2:f7:ca:
5c:ad:3c:52:f6:55:f3:4e:fc:35:0c:92:5d:04:6c:d2:75:36:
65:8c:62:b8:81:70:a2:31:f4:06:56:bd:1b:b3:e3:fe:4f:2d:
ac:e9:f0:59:e0:c3:a6:43:c0:a6:ac:66:4e:7b:df:0e:d3:09:
19:b6:12:1e:3f:eb:d7:ee:9c:54:2f:3a:28:0c:3d:7b:0e:62:
2c:61:ad:1c:85:9f:41:2a:00:c7:a9:17:7c:6a:01:d3:50:18:
e9:f0:a7:93:9a:6e:bd:13:97:10:20:1e:91:f2:4e:79:d0:75:
1a:2f:1f:9b:c4:ad:92:7a:2b:2e:fe:d7:95:28:da:70:3f:0c:
6d:3d:51:ad:b8:54:59:e2:93:bf:a2:f2:85:83:8a:0e:0b:16:
b0:05:89:d6:0c:35:30:57:5e:31:50:18:8f:01:39:9a:ca:f5:
9c:bf:bf:79:95:0a:bc:01:c7:00:ab:a7:ba:f3:4a:06:82:a6:
1e:44:0b:f8:3a:1e:ec:40:19:ed:c1:a1:de:1a:59:ed:eb:57:
b6:9e:e2:0f:c7:46:61:d8:8d:4e:85:b5:eb:be:78:a8:46:99:
d9:80:6c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:46 2025 by rpki-client