Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: BmcLiPvFegRZlFOBsJLkjhE+MlrrWjnXjCoBLXIBuK4=
Subject key identifier: 73:75:CC:88:CA:A4:0E:A9:A8:F9:B0:B7:56:81:5F:62:7C:5E:65:5E
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 019A71137083AB47422103922FCA3038594F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 032F
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: vcu5SaRsQKBTCYbCOZMhERX39BRq76sMD5nwnFKyfbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:70:83:ab:47:42:21:03:92:2f:ca:30:38:59:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=7375cc88caa40ea9a8f9b0b756815f627c5e655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:ba:bb:14:5c:a6:cc:0b:9d:a1:20:08:76:
4c:59:30:bb:01:ad:db:95:ef:5f:03:3a:d2:c1:f6:
61:16:7e:96:0c:31:32:69:70:82:8a:e9:f6:38:eb:
c4:b6:5a:ce:86:67:8a:9a:e5:a3:f0:d7:99:8d:18:
28:56:ba:de:bf:00:d0:cf:b6:54:7e:94:91:34:f7:
99:e4:f3:2d:a2:fb:8e:25:35:87:32:44:dd:80:0c:
63:27:8e:ff:96:ee:a6:e7:84:65:77:ad:44:60:30:
5f:f0:ec:33:ab:5a:87:63:72:e2:6b:4f:bf:de:77:
3c:9c:30:71:af:df:a0:34:dd:c4:93:a4:83:d5:e1:
fe:19:47:95:d6:44:6f:d7:6e:39:b0:a2:8f:45:f0:
1d:b4:dc:39:61:df:fa:2f:09:28:b8:8b:29:11:58:
ee:87:fb:be:47:81:59:ab:7d:38:a1:94:65:eb:5d:
b2:ba:04:3b:ff:1d:30:34:17:7b:7c:c2:dc:f0:df:
51:08:1d:b4:d3:0c:7e:92:c7:d0:7b:9d:12:3e:7b:
be:06:76:53:4d:be:8c:c0:83:8b:1a:66:b6:d5:9c:
55:70:79:2c:74:b5:04:bd:3b:4b:10:ea:58:4b:6a:
e0:02:6e:b7:26:9a:05:2b:e5:d1:5d:a5:72:29:85:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:CC:88:CA:A4:0E:A9:A8:F9:B0:B7:56:81:5F:62:7C:5E:65:5E
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:fe:40:da:71:32:cc:e1:3b:49:d0:98:8f:99:ad:28:09:
9f:be:69:e3:7e:26:8a:5c:91:c3:2e:39:29:38:50:1b:eb:b4:
b0:a0:fd:74:75:e5:cd:78:fe:ee:ec:b1:f5:3e:4d:46:98:3e:
25:c0:49:2d:89:d9:15:8a:c7:8d:8d:cf:33:24:a4:e3:fa:53:
58:9e:65:78:15:66:a9:89:ac:80:d3:65:52:85:33:0c:57:01:
39:26:eb:39:49:ba:75:7d:50:8c:64:df:78:ac:ee:e7:ec:e7:
97:93:b1:fc:8d:7e:a1:e6:ac:f6:9b:c3:1c:7e:40:40:c6:65:
cb:9a:4e:00:db:75:da:dd:fa:6d:a8:da:3f:56:be:ca:39:bc:
27:32:42:d3:d9:65:8c:fd:c4:ca:b2:fe:e7:07:be:4a:ad:b7:
c0:2d:78:a8:96:41:c5:59:f2:2b:4d:75:29:bd:80:12:6a:79:
91:84:ed:d6:a6:c3:b2:8a:77:da:1c:49:6b:15:56:7b:b1:d7:
4a:fd:1a:fb:fd:d9:a2:63:7d:af:44:e1:3e:88:ab:88:5c:18:
3a:10:89:7f:bf:2d:b4:f2:28:bd:c7:29:3e:74:15:09:69:8b:
4d:e1:7c:ed:0b:44:25:5b:ce:d7:c0:7b:9b:c4:bc:ca:7b:51:
5e:64:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client