Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: S12FEe/b8TUVZ/wZ7LELUKuqDuTYZ1n8QtRNBSwObdg=
Subject key identifier: 6C:81:C7:73:D0:77:1B:D4:4D:C6:E0:FE:D6:B8:E4:A9:29:10:FA:11
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 019A7225F4F45387DD9217EDB7AA8E34D398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 0FA7
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: pkYz9rlcFWzPXfHhMHTg11NLviO6790Xnn2mVVK8Qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:f4:53:87:dd:92:17:ed:b7:aa:8e:34:d3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=6c81c773d0771bd44dc6e0fed6b8e4a92910fa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:2e:86:b3:31:77:3d:f9:f2:8b:12:5b:b2:
58:67:f2:f0:da:54:0f:92:d9:a9:d0:73:21:d1:cd:
c0:2f:98:34:d5:ce:3c:8d:8b:3d:84:6f:1f:27:7e:
3c:79:3e:6a:f7:f6:ac:4d:84:aa:83:84:52:d1:ab:
20:6e:93:24:27:06:cf:8a:e5:c7:5f:4c:f6:18:53:
21:b4:90:39:72:51:d8:15:85:db:9b:38:0b:0f:e4:
4e:39:bb:47:de:98:90:c6:2a:b3:2e:14:80:41:f0:
71:2f:72:59:ac:ec:94:5e:f2:60:78:71:77:f2:be:
e6:77:c9:d7:33:bc:0a:72:ba:a5:72:f8:82:55:04:
dd:3f:d4:30:c2:c7:bc:0a:d0:d8:98:5f:0a:cd:1b:
af:f3:00:9e:46:2c:01:34:73:78:1e:f5:e5:72:22:
13:98:e0:ab:88:31:e2:8e:e3:ab:82:cb:19:d3:bc:
da:3f:a1:67:42:88:e6:56:7d:45:e6:4d:c0:c8:ab:
04:62:7f:a9:4d:4f:74:51:99:89:c8:94:32:f6:4c:
50:94:d6:e9:fe:f8:ce:4f:ed:b1:ac:90:89:b9:af:
f3:99:43:91:28:0d:b8:10:72:1c:58:97:ea:12:67:
36:13:49:07:17:eb:b0:be:b1:52:04:37:00:51:a5:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:81:C7:73:D0:77:1B:D4:4D:C6:E0:FE:D6:B8:E4:A9:29:10:FA:11
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d1:c0:ec:6d:f3:20:b8:8f:f2:c5:44:0a:a7:2d:78:62:ef:
c5:02:2d:54:09:87:e9:8d:ef:74:3f:c2:04:c6:b2:50:2c:0e:
66:39:e4:5d:99:df:1d:2c:c3:e9:e5:65:84:21:a1:e1:1c:93:
5e:82:81:b8:07:d2:e7:fb:7a:2b:7a:5c:4d:a5:f5:d3:f5:95:
36:de:0a:8c:de:b4:fd:fb:0f:1b:d3:75:2b:b5:39:eb:d8:a0:
f0:25:f8:f8:f8:10:0a:8a:35:20:cb:0c:f7:c5:e1:93:64:cd:
12:51:17:2b:87:b2:55:63:0a:d8:81:e5:cc:0b:97:ef:24:62:
b1:b8:96:84:43:ce:38:6d:fb:ae:a3:95:f0:b3:23:99:74:a0:
fc:3f:2c:62:61:b4:f1:49:c3:d4:80:df:13:cc:11:a7:1b:4e:
34:c8:84:b8:00:b2:f8:73:74:5d:ca:5d:6e:75:4c:90:de:a1:
a9:08:29:97:19:0b:71:ee:db:73:2f:6b:d0:c4:0b:54:7b:97:
38:4d:e7:c0:35:7e:41:1e:63:e7:0a:92:bc:ac:1e:b8:3d:20:
a9:bc:f7:5f:91:e2:c3:f2:85:a6:df:86:db:e1:0c:b3:9a:b7:
b5:d8:bb:3e:e5:82:61:1e:7d:8d:c0:72:a1:a5:17:50:e8:f8:
1d:e0:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:55 2025 by rpki-client