Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
File: fAMRalBjzm8X_OpTUcneSgxosN0.mft (raw, json)
Hash identifier: tLIZV5zZbtdkJQVZEndqLds5qK0UgcLlXzeQ3zRykoM=
Subject key identifier: 20:DC:FC:21:DD:FA:BF:F9:AF:4E:E3:B9:3A:B5:82:8F:29:B2:B7:45
Authority key identifier: 7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
Certificate issuer: /CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Certificate serial: 019A71B95A9A610BD28753BCDE460BF98EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
Manifest number: 0BD6
Signing time: Tue 11 Nov 2025 07:02:44 +0000
Manifest this update: Tue 11 Nov 2025 07:02:44 +0000
Manifest next update: Wed 12 Nov 2025 07:02:44 +0000
Files and hashes: 1: fAMRalBjzm8X_OpTUcneSgxosN0.crl (hash: 5HGCP570k2ohadDiEZupKn7frMUdLakP1MtQl4ZWRe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:5a:9a:61:0b:d2:87:53:bc:de:46:0b:f9:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c03116a5063ce6f17fcea5351c9de4a0c68b0dd
Validity
Not Before: Nov 11 07:02:44 2025 GMT
Not After : Nov 12 07:02:44 2025 GMT
Subject: CN=20dcfc21ddfabff9af4ee3b93ab5828f29b2b745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:df:90:9f:81:80:5a:0c:4e:31:92:0e:fc:
af:5b:c7:1e:f1:56:c9:b3:de:7f:12:19:ee:89:cb:
74:69:60:29:59:6a:37:55:91:e1:22:72:cf:7b:4e:
4f:aa:2a:4c:58:11:fe:1d:6c:9c:a1:c6:2d:5f:8c:
de:7f:30:6c:51:d0:78:5b:3b:a9:3d:fc:eb:22:46:
40:15:e5:13:19:55:87:84:c1:55:e0:c0:1e:f8:97:
2b:50:4a:e2:52:c1:c3:6b:39:93:18:96:ba:b7:09:
75:01:e7:e5:2c:c6:86:f5:c6:55:66:05:8b:48:62:
83:22:25:fb:e4:1c:95:f7:52:70:3c:3f:60:be:09:
f9:4c:f8:67:8d:18:74:85:00:60:a6:68:43:e1:30:
0b:c7:e4:aa:4d:14:f8:6f:63:d1:3f:a5:ac:5e:65:
6f:c6:da:54:c9:67:ed:2f:4a:0f:ec:f7:86:8c:c9:
b2:f4:6a:c3:e3:c0:99:24:e0:fb:12:e3:c0:ca:bf:
1e:ed:e2:8c:98:26:25:57:b0:db:1c:47:38:3f:3d:
65:33:70:b0:f0:11:0d:b1:c8:60:45:b9:e2:de:81:
ae:64:3c:67:67:82:63:10:8b:d2:06:d0:01:a5:ab:
ac:cf:04:97:a0:42:4b:5c:19:ac:88:1c:6d:fb:0b:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:FC:21:DD:FA:BF:F9:AF:4E:E3:B9:3A:B5:82:8F:29:B2:B7:45
X509v3 Authority Key Identifier:
keyid:7C:03:11:6A:50:63:CE:6F:17:FC:EA:53:51:C9:DE:4A:0C:68:B0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAMRalBjzm8X_OpTUcneSgxosN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4bdc4d-0899-4709-9424-891b455c2c53/1/fAMRalBjzm8X_OpTUcneSgxosN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:b3:1a:c1:21:0c:5d:e2:27:17:1b:12:bf:81:ed:fe:0d:
26:f4:09:75:ed:5f:07:1c:aa:2b:52:34:df:26:5b:c5:c0:7d:
dc:2a:2d:39:a8:f0:b4:24:24:8a:af:d1:91:eb:f7:c6:8a:85:
fd:1e:4f:e4:c7:10:72:20:56:e4:30:36:f4:ee:b7:aa:a6:ac:
79:c4:1d:76:15:8e:c7:15:49:ff:8b:52:41:d5:ea:53:37:c2:
10:30:26:58:d8:6b:d7:2e:f7:0a:9e:f7:5e:d0:cf:95:5b:3d:
d8:10:b9:1e:f0:1a:7a:d8:5e:a0:b8:0e:54:ee:1f:fa:70:5b:
ee:1a:07:ac:b4:25:0e:55:fd:dc:93:78:1d:03:98:cf:ab:14:
43:a2:6d:b1:a8:26:eb:69:47:b0:e5:07:fb:cf:b4:c5:b4:54:
d3:4f:40:3f:0c:d9:4c:a4:fc:cf:13:5d:39:17:4a:34:b2:8e:
9e:23:f7:b5:23:c2:e0:1a:fe:14:1e:c4:fb:31:1e:0a:e9:f7:
89:5f:45:d4:33:f1:39:bb:7a:1b:b3:f0:21:5d:40:6f:16:02:
11:40:00:3b:6e:d7:eb:86:4d:6f:3e:29:4e:87:60:0d:8e:c0:
19:df:bb:21:62:4a:6e:b8:bb:5b:80:a7:7d:53:f2:26:08:c1:
3e:27:eb:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuVqaYQvSh1O83kYL+Y7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMDMxMTZhNTA2M2NlNmYxN2ZjZWE1MzUxYzlkZTRhMGM2
OGIwZGQwHhcNMjUxMTExMDcwMjQ0WhcNMjUxMTEyMDcwMjQ0WjAzMTEwLwYDVQQD
EygyMGRjZmMyMWRkZmFiZmY5YWY0ZWUzYjkzYWI1ODI4ZjI5YjJiNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmXfkJ+BgFoMTjGSDvyvW8ce8VbJ
s95/Ehnuict0aWApWWo3VZHhInLPe05PqipMWBH+HWycocYtX4zefzBsUdB4Wzup
PfzrIkZAFeUTGVWHhMFV4MAe+JcrUEriUsHDazmTGJa6twl1AeflLMaG9cZVZgWL
SGKDIiX75ByV91JwPD9gvgn5TPhnjRh0hQBgpmhD4TALx+SqTRT4b2PRP6WsXmVv
xtpUyWftL0oP7PeGjMmy9GrD48CZJOD7EuPAyr8e7eKMmCYlV7DbHEc4Pz1lM3Cw
8BENschgRbni3oGuZDxnZ4JjEIvSBtABpauszwSXoEJLXBmsiBxt+wvhnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDc/CHd+r/5r07juTq1go8psrdFMB8GA1UdIwQY
MBaAFHwDEWpQY85vF/zqU1HJ3koMaLDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQt
ODkxYjQ1NWMyYzUzLzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YmRjNGQtMDg5OS00NzA5LTk0MjQtODkxYjQ1NWMyYzUz
LzEvZkFNUmFsQmp6bThYX09wVFVjbmVTZ3hvc04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2mzGsEh
DF3iJxcbEr+B7f4NJvQJde1fBxyqK1I03yZbxcB93CotOajwtCQkiq/Rkev3xoqF
/R5P5McQciBW5DA29O63qqasecQddhWOxxVJ/4tSQdXqUzfCEDAmWNhr1y73Cp73
XtDPlVs92BC5HvAaetheoLgOVO4f+nBb7hoHrLQlDlX93JN4HQOYz6sUQ6Jtsagm
62lHsOUH+8+0xbRU009APwzZTKT8zxNdORdKNLKOniP3tSPC4Br+FB7E+zEeCun3
iV9F1DPxObt6G7PwIV1AbxYCEUAAO27X64ZNbz4pTodgDY7AGd+7IWJKbri7W4Cn
fVPyJgjBPifrFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:53 2025 by rpki-client