Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json)
Hash identifier: E+GR71AcwwuIV5sr+LnmxRMeLD6eRcbC2rR5sNUDuz4=
Subject key identifier: D6:7C:47:BC:6F:E4:EC:3D:CB:7F:A5:FA:57:53:16:10:7E:C6:D9:F8
Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Certificate serial: 019A71B8396E638D81806179D394E20F3C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: X9nrG7aD8KMWzitjU/WbXm3UFomcsFhq9iTMLZ9eoB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:6e:63:8d:81:80:61:79:d3:94:e2:0f:3c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=d67c47bc6fe4ec3dcb7fa5fa575316107ec6d9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:cf:ce:30:5b:68:3d:4b:b5:b6:b4:29:59:
1e:0a:bd:c3:40:b3:7a:df:b9:4d:81:05:1d:6f:e9:
6f:c3:08:53:8c:ec:20:7d:1f:11:67:38:c3:f0:d3:
4e:22:35:a6:99:86:df:8e:82:e1:32:74:bc:4e:7d:
d1:8c:0d:f1:ef:45:76:26:7a:29:97:ed:33:91:cb:
fa:43:0a:eb:13:bc:37:53:b5:55:d9:8d:b0:bf:e2:
e8:34:cf:1f:45:8f:58:cf:df:64:64:04:49:44:f6:
7c:44:92:f8:f3:e5:6a:27:5f:08:18:e1:00:59:cd:
07:66:4a:f4:9f:99:4d:07:fa:9b:f2:ae:9a:4f:eb:
66:27:2a:b5:48:0a:06:35:c5:39:77:4e:c7:5b:76:
19:ba:3f:b4:00:22:d4:94:e8:b3:af:cd:24:2d:53:
31:d3:58:42:0e:7c:15:2f:66:cd:6f:cc:34:eb:96:
1e:b2:04:46:9c:77:c9:ce:61:a4:e2:ea:e9:08:cd:
d4:9d:59:2b:58:ef:53:8e:97:8a:34:74:8c:23:8f:
10:b7:4d:16:d3:4b:5e:1c:cb:a6:b5:85:74:cd:54:
e4:9c:11:85:e8:09:49:49:ee:12:3a:b2:fe:9f:43:
d3:0f:e4:6f:69:fd:b3:75:b1:ce:86:3f:b9:ff:41:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:47:BC:6F:E4:EC:3D:CB:7F:A5:FA:57:53:16:10:7E:C6:D9:F8
X509v3 Authority Key Identifier:
keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:f5:a7:ac:61:ab:74:29:61:5a:38:56:62:ac:43:18:71:
c8:69:30:55:7d:56:e4:a5:56:5d:e5:d4:4f:86:59:3f:81:26:
cc:4d:52:bf:0b:22:8e:c3:42:5c:69:e0:5e:62:25:c7:87:c2:
62:87:12:16:47:4b:37:2b:b2:11:21:c4:3f:7a:2e:90:93:79:
ab:f1:90:6f:b0:1d:c1:0f:3f:89:2c:bc:07:67:35:93:e2:39:
b2:41:e8:21:5b:4d:b8:0e:4d:3c:d1:0a:f9:1d:98:9a:47:ee:
5d:b5:25:c9:c6:7a:4f:1f:fd:c7:97:7a:4d:fe:7b:cb:f0:1f:
d2:48:14:b4:07:1f:79:a8:cd:9a:e9:87:1d:5d:03:6a:ee:5d:
81:69:cd:69:47:68:d0:f9:63:34:36:c0:9c:b2:d8:79:2e:cd:
0b:2f:f5:f7:4b:20:40:ec:05:96:e2:0c:ba:c7:fe:6c:1d:f1:
23:40:02:e0:ec:b2:85:fe:f4:53:00:2c:2c:b1:7b:5d:fb:88:
af:39:4e:1b:21:ca:58:fb:ae:03:5f:3c:d9:97:2d:c4:c0:7d:
9e:51:5d:d2:dc:af:04:53:54:7d:15:ad:4a:b6:95:7b:d4:65:
cf:b7:4c:da:78:0a:36:c4:b7:da:ee:4c:fd:26:7f:b4:a4:b1:
df:e8:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:47:02 2025 by rpki-client