Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File: fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier: 17H/NG3bpYrOOyH+Uc5I+dHI0imXWV0kLJEioM6o45A=
Subject key identifier: B3:78:88:56:93:DE:CF:74:82:F7:DB:A7:7D:1C:E9:83:2A:8A:86:48
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer: /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial: 019A71EE7A9A624B236D9EEE983D43EBFB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number: 11DD
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: THfKQ6RgrSKh/PBwsyefXuXmltg2IxhNkiy50buYtsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7a:9a:62:4b:23:6d:9e:ee:98:3d:43:eb:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=b378885693decf7482f7dba77d1ce9832a8a8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:31:3b:06:e9:86:13:75:90:6f:88:71:c3:
fe:8a:cc:b2:c8:d9:e3:42:10:64:a3:35:11:0d:25:
e0:75:4a:c2:d1:94:59:d9:5b:85:37:9a:22:05:06:
eb:31:b5:f9:af:6e:08:86:49:52:6f:f3:3c:40:a9:
ee:79:7d:ae:e1:28:ac:d3:90:18:55:da:0a:bf:d6:
83:7c:f7:f0:98:91:41:57:9a:7f:af:82:03:cd:09:
41:34:1f:2e:9b:84:2d:e8:49:16:68:89:99:f0:75:
2c:0f:6b:53:3e:d7:e5:91:65:a6:13:b2:a3:75:f4:
f2:9d:a2:90:79:c1:eb:81:9f:f6:fb:25:ea:b1:c2:
0f:6e:4d:da:d1:3f:cf:21:da:05:5d:31:17:76:f5:
af:95:2e:e7:1a:42:de:78:e7:08:b0:3a:b9:99:d4:
73:8b:f9:89:47:f6:be:d1:66:bf:70:1e:b9:be:8c:
5a:5c:d3:b4:40:26:76:84:9d:3a:5e:fb:58:11:5b:
a0:eb:ab:74:aa:f9:a7:5a:ea:65:f4:f1:d9:81:3c:
0a:0c:6d:ea:b8:7f:de:79:2f:19:25:f5:8c:44:0d:
5d:fc:53:c7:c9:fc:d0:81:59:8a:4a:7e:86:3e:f3:
52:3c:95:34:02:23:79:d0:5f:19:ad:13:2d:ec:c8:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:88:56:93:DE:CF:74:82:F7:DB:A7:7D:1C:E9:83:2A:8A:86:48
X509v3 Authority Key Identifier:
keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:70:33:8d:fb:45:c3:1b:09:01:63:63:d0:66:0c:8e:2c:
25:fc:d0:b0:77:aa:af:b6:9d:6e:c2:ff:10:60:0d:29:5b:6b:
8d:03:54:35:e2:d2:f0:6f:13:60:59:92:2f:54:c2:4a:77:82:
af:0d:7f:d6:67:ca:60:48:86:3c:78:a4:8b:b0:86:21:c0:f1:
a3:84:e5:c3:eb:ec:0c:75:1d:61:aa:8d:62:b2:c2:8e:b0:cc:
1e:40:ba:a1:03:b9:13:21:5e:33:55:94:1c:7c:16:7a:b9:68:
c7:8a:8b:81:3a:32:6a:04:3c:05:9e:4f:a8:a9:65:81:6d:04:
74:2b:75:d6:ee:02:42:40:7e:4b:28:c8:22:70:b7:29:db:28:
87:84:ab:9f:ed:35:5e:29:0a:e0:e2:7b:42:36:af:2a:e7:9c:
e2:ec:35:79:b0:b6:54:87:1c:d0:f5:93:c5:f8:b7:b3:41:a1:
bd:e5:f6:28:cc:8e:0f:e2:5f:57:bb:f9:da:24:9d:74:43:a2:
ec:7c:39:27:87:bc:e8:72:07:7d:f9:19:6c:d2:83:66:f7:d0:
f3:70:ac:cf:74:2a:e5:59:e3:88:e7:01:ac:a5:38:92:cc:ff:
4b:9d:02:ba:c1:ff:ee:4c:1c:b0:12:9d:c0:c1:ad:56:45:13:
44:15:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:10 2025 by rpki-client