Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier: IzyL71Dz77RgGZ9ABl6FX5QTY49K5hrFEtF++IhgmaQ=
Subject key identifier: 2C:06:D8:1E:55:C1:3A:93:AE:95:DD:EC:8D:B2:CA:13:1A:22:4E:F9
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial: 019A7149EBC31507BEFF2B14B84B5CE0012D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number: 068D
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: R+yXSP4gFRTrWbIi2gysQDEYtry8TK288dMYiCkviAQ=)
2: jXBUCLrGPcb5J_lVILF4CB21e-I.roa (hash: dGKplm/JNC81Y01bHZhHHlwu7oIXFhOtp/y83oreUvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:eb:c3:15:07:be:ff:2b:14:b8:4b:5c:e0:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=2c06d81e55c13a93ae95ddec8db2ca131a224ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:73:83:33:16:36:cc:26:f6:ae:35:86:22:
fa:2d:7a:1f:26:6f:bd:b9:0d:07:fd:7a:ee:ef:01:
4d:fe:f3:70:17:75:22:0c:c5:70:ce:6c:79:9e:6f:
db:3a:fd:c7:2d:b6:1f:b7:00:70:67:51:35:b0:28:
88:cc:aa:c1:3b:4c:9a:b8:a4:5c:a8:0d:b7:e3:b6:
b1:c7:09:79:d0:cd:64:79:23:c9:4d:24:8e:c8:20:
f7:df:96:55:7a:fc:b9:4d:e2:99:06:98:55:d0:24:
33:03:a1:a8:23:d0:e8:29:a8:13:07:dd:b6:84:6d:
60:bb:30:68:ac:a0:20:2c:87:ba:e6:51:cd:e1:d9:
1b:47:1e:74:0d:6d:0e:22:b7:bf:7e:5e:bd:96:55:
f0:83:19:72:fb:d0:99:2c:79:45:85:d5:ad:a4:8e:
18:4e:14:85:f8:8b:21:c9:23:d7:c3:f5:6b:7c:18:
31:12:0e:be:f5:fd:a1:a0:a9:e7:cb:62:a5:3a:9e:
be:30:65:85:ef:36:f3:62:ac:d7:41:f1:3d:54:83:
ae:bc:da:1a:41:99:03:a0:1b:27:4c:e3:5c:4a:e8:
18:bd:f8:ea:18:05:e0:01:49:5e:5c:51:2d:aa:7a:
9f:d7:28:69:ae:15:85:85:11:f0:11:e2:7a:ae:93:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:06:D8:1E:55:C1:3A:93:AE:95:DD:EC:8D:B2:CA:13:1A:22:4E:F9
X509v3 Authority Key Identifier:
keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:51:57:84:99:f0:f6:fd:ce:ab:2b:96:47:34:bd:d3:19:3b:
6d:b7:2e:f4:5c:3e:b4:bb:df:ca:cb:7e:f8:cd:d9:d5:4b:dc:
ef:9d:d5:a7:6c:96:05:a5:a1:29:ba:a1:75:aa:28:50:5b:b6:
7f:1d:b8:1d:89:c5:ed:ef:70:ba:c0:82:ee:98:1e:ae:e9:fc:
36:73:b5:95:ab:67:84:00:04:0b:9d:2e:6a:42:14:c2:85:73:
3d:8a:dd:aa:6a:b4:89:52:3a:78:b4:46:39:5b:9b:07:43:d9:
5a:34:2c:42:42:06:3f:c7:75:45:ba:46:d5:79:89:92:0d:9a:
47:31:be:14:ef:af:06:2c:58:e4:17:89:ff:a7:ae:8f:a6:d7:
9b:e4:0f:15:8a:d0:40:9d:22:46:e3:92:d7:83:fa:e2:63:6f:
83:13:cb:cd:8c:55:04:bb:fa:90:1b:c3:1f:8a:0f:fe:90:af:
1b:0b:fd:80:67:e7:dc:b3:22:e5:e3:65:82:fb:83:84:eb:70:
8f:40:1b:11:3a:ac:03:00:7e:c2:22:46:2f:1a:30:47:f8:e9:
c6:7c:3f:9a:38:13:e8:bc:73:5a:70:43:aa:39:20:9b:eb:bc:
d2:fc:da:1e:f5:15:0b:1d:8d:75:46:cb:d8:80:37:df:5c:dd:
37:0d:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:45 2025 by rpki-client