Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: f2d2ZRojwgP/QwJ+gACCM5wFPGvzoVL9tudQR2X8cKA=
Subject key identifier: DD:08:D5:26:29:C9:CD:C3:2E:0A:2B:24:A5:7D:D2:77:31:3A:F7:26
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 019A71B79D3648F2CCAB9ABE685C5DF328C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: HNUYDQnzw7dJQiz9D718Cxn4KMXEViPqeUcWa9RnWwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9d:36:48:f2:cc:ab:9a:be:68:5c:5d:f3:28:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=dd08d52629c9cdc32e0a2b24a57dd277313af726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:36:0f:10:cf:ce:8b:5c:be:d4:5c:c7:61:
9f:6b:ff:69:6e:06:63:e5:2f:f9:75:2b:6f:18:df:
ab:82:bc:57:58:2c:5a:4b:5f:72:06:5c:52:c1:bf:
e6:d6:f2:77:60:d4:e9:6b:78:41:83:15:a6:13:69:
9e:cf:69:91:9a:d2:f7:28:d2:1a:e4:06:26:ad:e6:
30:33:3c:2b:bb:b5:7c:09:9b:58:55:07:93:c3:10:
55:43:0a:16:bd:30:28:bd:4d:95:f5:5f:17:aa:51:
51:49:cc:fb:2d:8c:88:06:e8:27:f1:51:28:c3:f6:
d3:97:60:b7:a4:8c:37:d3:f1:4d:cd:8c:e1:af:96:
3c:e4:80:72:bc:ad:ff:6a:29:c5:5b:e9:25:77:7c:
a1:67:e5:c8:b0:b5:7c:6d:39:25:b7:99:bf:e0:67:
8b:7b:b2:59:c7:34:36:25:ac:8e:50:ab:65:6a:6d:
3d:01:0f:ec:1c:c7:7b:4a:55:2c:42:bd:9e:fc:44:
1e:41:4f:66:8b:50:86:06:4f:bb:7f:78:78:61:f3:
92:6e:70:1a:33:92:f3:47:3e:1d:f9:42:fc:07:79:
38:46:ff:85:2f:9a:b4:a8:93:6b:fb:8e:d7:3b:7e:
33:20:92:63:7b:e9:4c:81:2b:99:28:c9:74:ae:5d:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:D5:26:29:C9:CD:C3:2E:0A:2B:24:A5:7D:D2:77:31:3A:F7:26
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:dd:1f:07:d7:84:2b:08:df:35:da:eb:ab:bf:e6:12:da:
e8:15:d9:43:99:b8:a7:ee:0d:e3:8c:81:6a:1a:44:85:73:bc:
90:6a:b4:f8:bc:83:85:58:8e:7c:19:aa:0c:e8:b2:b5:4e:c3:
b4:a5:68:d5:62:c6:fb:53:61:f4:b2:9c:16:ba:93:81:ef:15:
63:9b:eb:b1:f7:21:46:85:73:2a:c1:70:d8:0c:3d:61:e7:e4:
b0:d5:3e:4d:4b:53:8f:5d:52:9d:cf:cb:0f:73:0f:19:31:29:
33:b1:73:af:8e:d9:86:18:9a:e7:41:6a:51:7c:bf:76:0b:a1:
fa:63:9e:5f:23:d9:af:d7:7b:ee:14:e5:ff:24:43:cb:f8:cb:
9b:bd:0a:86:0c:5f:99:05:64:8b:90:fa:8c:bd:68:c9:e0:61:
e4:9e:5d:da:35:83:4d:f5:8c:50:0a:e2:02:73:81:c5:f3:42:
8e:3b:eb:0e:29:a7:85:3b:11:86:31:54:bb:65:29:8c:c0:27:
fc:cd:e8:63:2c:13:20:97:6f:5a:4a:67:84:55:58:a1:2e:db:
d4:6f:18:cb:ec:23:31:92:b1:3d:fb:45:ef:e6:33:b7:66:f3:
c3:f1:e4:08:7f:ce:bc:fb:10:73:ba:08:40:9f:1a:17:d3:8e:
34:c5:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client