Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: C+F8D6Hufh6pLZxVdFENlgCzMn1SO9HvJAmXWy8OjrY=
Subject key identifier: 5D:4C:A2:DB:43:56:61:E8:5D:E7:7A:92:3C:13:1D:B9:9B:ED:D9:D6
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019A71B7A1AC0C25E990446A2A4FDCC004AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 08EC
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: 0LLJynhNoBpcIWtak7t3bW/h0fGDUBivOace/aPOOuI=)
2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a1:ac:0c:25:e9:90:44:6a:2a:4f:dc:c0:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=5d4ca2db435661e85de77a923c131db99bedd9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:1f:14:bc:9c:87:b7:9b:d2:28:da:c1:1a:
ab:97:0b:b8:d0:56:d9:2c:e0:6a:cf:c3:2e:b7:9f:
d7:92:c9:a7:a7:ab:00:d9:a6:5a:45:0b:9c:e6:e3:
60:15:80:9f:1f:66:02:61:82:db:f8:b9:ca:1b:4f:
8c:b2:79:af:af:91:18:a7:f4:28:a9:f8:c2:da:d7:
ec:99:a8:7c:4a:10:7c:b5:90:32:d6:2a:ce:4c:3d:
ea:7f:79:7f:46:b0:b0:21:45:bd:b8:00:db:90:60:
e1:ec:e0:e6:e8:a4:21:0b:c4:33:65:51:8e:6b:fd:
86:c8:7c:3e:a2:8e:b1:3c:b9:35:d9:18:dd:d0:17:
6e:3e:96:e9:92:a6:b9:08:8b:9c:84:eb:f4:9c:57:
dd:4f:59:fa:84:ad:5b:bf:fb:e8:e3:06:b9:e0:7a:
25:27:9c:0e:b2:43:da:64:95:2b:1c:54:43:8c:4b:
03:b7:a0:49:e0:88:e4:f2:bf:d6:1e:5d:71:c2:c3:
4c:00:7a:dc:87:85:c7:e2:ad:4e:06:b9:a7:97:ce:
22:1c:28:0c:80:ec:53:70:c7:15:4f:39:b6:42:eb:
14:b2:73:ff:df:34:98:1b:38:bd:5a:e6:af:03:ca:
87:27:7d:a3:8f:52:19:5d:75:9b:2e:34:10:0f:c2:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4C:A2:DB:43:56:61:E8:5D:E7:7A:92:3C:13:1D:B9:9B:ED:D9:D6
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:5a:0b:38:91:5b:45:fa:e9:76:8b:3c:8c:97:1a:95:fb:
59:ea:f7:8e:8d:5b:49:c6:1f:24:f1:83:c7:c5:c6:8f:d6:f7:
74:b4:b6:da:1e:4c:fc:43:77:74:ad:66:25:f8:70:04:02:ed:
4f:d8:04:cb:37:29:5e:65:73:ed:2a:b2:da:a2:8e:f8:c4:97:
e6:f6:74:d2:9f:39:08:63:45:d8:5b:30:90:6b:03:b5:08:53:
af:75:3e:fc:09:ae:1c:ab:bc:ce:43:d5:43:0d:c8:fc:9b:59:
c5:c6:79:c8:4b:4c:1c:b2:d6:0f:94:42:41:14:ea:8d:e4:4a:
8d:63:ef:48:5e:41:f6:06:49:7f:b8:f0:51:7b:9a:4e:cd:4f:
b9:77:a0:7b:d4:e2:49:11:2d:6c:0a:21:09:8f:87:40:14:97:
ea:c0:2e:4c:d2:0d:f7:8e:c8:fb:15:26:1f:ff:e4:06:60:48:
8b:26:dd:3c:09:0c:76:9c:d5:31:32:ba:b5:db:bc:c8:c8:e1:
21:4f:d3:08:ef:61:54:47:7a:67:4a:d4:25:72:08:29:43:33:
b7:87:8b:2b:ae:ce:28:bc:97:9e:6f:b0:d9:ad:06:fd:4b:c7:
e9:3e:9f:c7:f8:7f:cf:6c:cb:a3:ec:ba:b5:b3:a6:85:81:70:
85:b1:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:54 2025 by rpki-client