Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: RoFHv9YD2qmletWx5kYaKUcn/B7dEqtQ5RgCHpxXonw=
Subject key identifier: 82:3F:16:C2:72:03:BC:5B:EA:54:9F:A2:01:54:34:4C:6D:12:9C:DC
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 019A725CAE6814C2E16267726092D1D0E355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: cn1p4nRUZ3JS94kayC0GV2v3U82lzo9YEzhWHuo6ABU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ae:68:14:c2:e1:62:67:72:60:92:d1:d0:e3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=823f16c27203bc5bea549fa20154344c6d129cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:c8:4e:67:f4:60:19:bd:42:6a:b3:5e:1c:
31:bc:a7:c9:51:f2:28:14:2c:38:2d:22:87:68:f4:
6f:e1:bd:0f:85:a3:1a:01:c2:a5:a9:de:0f:71:6a:
3a:db:a6:8e:98:74:32:7f:f8:d5:dc:7a:d9:dc:59:
a3:62:9e:77:9d:5c:45:ac:2b:b2:21:da:16:e9:ff:
9e:af:11:35:32:32:bb:6e:d1:85:ab:3a:7f:1f:e7:
59:77:d1:ee:a6:37:ae:d6:96:18:e6:17:04:e2:60:
18:8c:80:04:91:4d:86:e6:ed:82:cf:91:e0:f6:05:
e6:24:92:b3:d4:7d:6a:67:1f:87:4f:e5:30:8d:30:
e2:52:e8:61:c2:37:e3:18:16:a0:07:9d:be:0a:ce:
b0:c5:46:4b:38:b2:fd:ad:04:5c:6d:1f:eb:19:78:
6e:a0:49:ea:2b:e2:9e:28:4e:02:46:28:0d:5a:34:
3f:4d:71:1b:7d:2d:13:50:c3:5f:0b:a3:54:de:d6:
f8:09:67:9b:ee:11:57:f3:d7:4d:2a:3e:7a:44:e7:
15:0c:c3:ba:ba:50:e9:3f:38:a0:7c:60:b1:98:11:
a9:9f:1e:6e:f1:c0:e5:a0:81:22:87:33:bf:d4:8c:
63:29:11:93:81:fa:83:85:5c:20:73:94:64:88:94:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:16:C2:72:03:BC:5B:EA:54:9F:A2:01:54:34:4C:6D:12:9C:DC
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:19:4a:f2:8c:90:3e:9e:90:70:6d:63:e9:d4:a7:98:d9:6b:
f7:d8:dc:c8:3f:c6:fb:25:85:65:50:cf:8d:56:e7:b5:a8:46:
9a:9b:76:a9:d4:52:d0:47:6f:ec:f9:ff:21:2e:67:3f:03:87:
be:70:c8:e4:71:00:b1:d6:d5:fd:28:7d:0a:8a:1e:51:d1:6c:
5c:4e:97:7d:0c:50:2b:11:ee:f4:48:2a:ff:9f:ae:3e:95:62:
61:d2:47:30:e9:7a:57:8e:84:56:bc:71:be:e7:01:52:4c:dd:
d8:9c:84:d4:92:fd:2c:11:38:e5:68:fa:90:22:0a:0e:fa:9a:
f6:fc:b2:e0:99:4a:09:11:57:97:23:27:d4:b6:df:dd:f6:dd:
d0:47:d6:fb:1d:71:5b:ed:29:dd:df:1f:e5:ce:b0:eb:b0:43:
22:f0:33:1d:83:34:c4:63:03:5b:6d:7f:5a:94:b1:e2:53:4d:
fd:7e:e4:35:8a:89:00:0a:78:ad:cc:77:22:9a:f4:46:20:89:
e2:3c:4d:c9:2c:7c:60:b9:4b:6d:a7:c7:ed:b5:a1:1b:5a:d2:
31:a9:20:77:74:2c:2b:2c:51:2b:ad:59:35:b4:35:4e:3f:ec:
4e:1a:92:ef:e4:39:58:6a:6e:e6:08:57:10:25:cb:22:e3:66:
fb:e3:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:13 2025 by rpki-client