Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File: fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier: pvDAvW/gsyxllVihLXw3Ly6MMy0iwitKr0bX0/UQ3Uo=
Subject key identifier: 4D:21:24:23:9B:C1:93:10:22:60:A2:FB:D9:F0:83:BD:6F:B7:78:9C
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer: /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial: 019A71B900959FC330DB8A9AF0C096D16660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number: 0B40
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: 592QE4e5wcWss3bcgpe0118a4o8.roa (hash: yC3/nLVWBZfIP94drGS0GWcqBe2jUht68itw5CKk0vc=)
2: J06OgSRvPXWRTEncuFxsKEeSz8k.roa (hash: q4U3gprZEclQCDc7ah7VpmWTw4NUG0NXMbh/c06uR5g=)
3: JGBf-HSBUO7hgbq8X1OnBUjDyVQ.roa (hash: MtZT8bLkQTUgeFwypbcTgOQkoRE3SGspSU9gsC7WWCE=)
4: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: nzzccxMLBUM6+lF6GojdjOVhcY1q3mSyESl5Ew45Q3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:00:95:9f:c3:30:db:8a:9a:f0:c0:96:d1:66:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=4d2124239bc193102260a2fbd9f083bd6fb7789c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:da:f1:5f:7a:bc:a7:ca:d1:65:7d:21:76:
ca:1f:2a:a5:f1:14:7b:5b:8b:dc:69:e8:70:9f:5e:
e7:68:57:0a:a5:fe:a3:3e:6b:2e:38:89:91:f4:22:
21:8e:60:07:a3:c5:35:1c:fb:b5:b6:ed:e3:71:c2:
5e:7a:0a:50:9b:63:1f:50:d3:50:b6:56:b1:a6:76:
b0:8d:f4:71:35:85:2b:11:27:bc:b4:97:5c:0a:c1:
cb:82:30:01:88:51:8a:ad:43:cb:90:50:cd:b2:72:
70:7d:98:53:01:a2:6c:7b:8f:f2:e7:29:0a:10:a5:
62:40:f1:ce:69:6f:1d:42:42:47:04:31:50:59:18:
87:4c:70:82:52:be:64:36:eb:11:af:26:a7:36:f3:
27:bd:86:ce:35:e9:93:97:71:1a:1e:3c:82:f8:a6:
f8:b2:a3:8c:1a:73:7d:41:7c:29:ff:2c:d6:0c:26:
9a:7c:4f:aa:30:3a:cd:75:0d:22:ec:ce:56:68:25:
92:3c:b8:d0:4c:3c:49:40:1b:42:d7:6f:90:0a:b1:
4f:4c:39:2e:db:c8:8c:19:e5:ff:a3:bb:01:65:c1:
c1:b5:68:ff:9e:e9:e6:f5:d3:71:3b:a2:e3:3c:2a:
cc:40:a2:66:62:d6:8b:e6:79:da:88:06:18:c3:94:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:24:23:9B:C1:93:10:22:60:A2:FB:D9:F0:83:BD:6F:B7:78:9C
X509v3 Authority Key Identifier:
keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:77:c6:10:6b:87:c7:8d:79:ce:51:37:d8:a5:3c:8f:5a:d2:
eb:71:20:92:50:0e:43:d1:de:37:db:b5:7a:05:22:a9:1c:b5:
a5:4e:b8:30:1c:fc:eb:95:f6:91:c6:fd:09:33:f9:f3:d3:60:
12:0a:f3:29:78:f2:7a:a3:08:a3:4e:03:87:f7:5c:92:2f:aa:
21:5d:8a:b7:f3:11:7e:9e:80:f7:0a:76:60:03:25:0c:7b:4b:
f2:ed:4e:a6:29:7c:fc:93:bc:92:8a:f7:d4:3f:1a:ea:5c:31:
b7:59:c5:9f:97:75:db:88:07:bf:de:63:33:c2:ce:fd:6e:de:
57:c2:02:be:86:60:d4:51:0e:64:63:19:ae:a3:a6:9b:c5:31:
a5:e6:1a:41:3a:e7:47:ed:41:1d:a6:71:49:73:70:c8:2a:66:
e1:b0:be:6c:83:f6:4f:cb:11:ea:d5:89:36:60:7f:f0:c0:f8:
c8:3d:70:a8:f1:3c:3d:7e:7c:7f:75:83:92:27:4a:82:bd:21:
3f:27:c1:e6:12:11:ea:8f:d7:99:5e:58:ca:a8:5d:e1:95:56:
25:84:ef:08:e2:6e:f3:50:18:55:96:6f:07:06:21:b9:06:e6:
b1:2d:f9:d9:ba:d3:a1:cd:15:72:a2:1f:34:41:2f:af:f8:48:
52:33:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:39 2025 by rpki-client