Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: IS6rsP6Bar59oTlOl4akO8cjXAYDN4gKR3lT9gdwecA=
Subject key identifier: C4:1F:A3:4D:54:9B:33:C2:07:85:25:77:E0:2E:A6:99:E9:F6:BA:DB
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 019A71EE9792BD0122BB0C1F8E20950847B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 09DA
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: n0PQi0MzTaWMw3XyIk5gReXev1/6GK7VI5J76kJuLzU=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:97:92:bd:01:22:bb:0c:1f:8e:20:95:08:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=c41fa34d549b33c207852577e02ea699e9f6badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:04:0d:5e:79:d5:1a:f3:0c:2a:21:9b:cb:
c6:4d:c8:2b:49:08:81:03:98:c8:28:ef:b8:dd:11:
29:c3:a3:25:fe:27:dc:42:74:73:75:71:40:fa:1e:
aa:fa:32:43:8e:8d:b5:a8:0c:fd:98:d5:62:55:db:
e5:a8:e6:9a:a9:c5:f9:25:3b:3b:2d:b5:f8:e0:78:
c3:f7:fc:a0:32:db:b7:99:4e:24:ca:52:f1:63:f2:
db:b1:a7:a0:c2:5e:db:f8:3d:90:5d:bd:a0:8a:9e:
b1:30:ea:b5:18:05:d0:47:3b:6d:e4:e0:e2:d1:b6:
01:23:d1:4e:03:b4:a8:35:0f:24:5f:8f:0d:0f:fe:
f5:0d:c4:d9:95:98:50:31:fe:b9:41:35:53:d3:b5:
13:23:d1:af:f5:92:63:7b:60:d4:ca:2d:60:37:a8:
44:e1:20:7d:b1:27:ba:2b:16:c5:f3:d6:11:e8:5c:
f3:b9:c2:e0:19:0a:eb:fd:60:3a:fe:3a:ec:ca:13:
1a:90:47:a2:ce:a5:34:19:d2:07:06:10:04:94:87:
e4:f0:a0:f7:d3:7a:7e:ac:b0:68:dc:f6:88:a3:2c:
c6:bc:cf:38:6c:88:63:5c:ff:d9:f0:e6:f8:09:42:
ed:ef:20:8b:73:f2:8d:ea:85:34:9a:74:b1:57:b4:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:A3:4D:54:9B:33:C2:07:85:25:77:E0:2E:A6:99:E9:F6:BA:DB
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2a:48:7c:9d:73:89:0a:73:32:87:aa:41:af:c8:f7:0a:d7:
01:11:63:09:e6:db:bd:a2:f0:ae:3e:03:0c:e2:0a:38:0b:49:
4e:07:76:da:fb:59:1e:15:56:40:93:ea:91:85:54:3c:d0:de:
f2:52:c3:70:a8:03:bc:1d:8c:ae:ac:94:8c:f1:71:3c:df:20:
63:f6:76:5f:37:7c:b8:c4:c0:ae:53:eb:54:60:bd:1f:53:b6:
15:f0:b0:3a:26:3d:79:bd:0c:e9:17:ed:83:0c:8f:78:b3:f7:
b9:02:22:bf:b8:e9:6e:c1:2f:8d:f6:e5:00:e7:3e:04:95:46:
91:d2:e6:19:4f:d3:dc:d8:aa:f1:6c:86:7d:04:6d:42:e3:7e:
6b:7a:4e:c1:7e:d8:f7:62:0f:01:cb:b1:6b:ba:66:df:1a:d2:
a5:86:25:f5:e0:81:60:60:09:2a:3a:f5:bd:5d:9d:af:17:f0:
58:30:cd:3d:41:cf:f3:5a:0e:9f:40:9b:bb:06:ff:b8:b0:9a:
d5:ce:2f:07:91:19:0e:08:99:58:7d:89:4f:61:81:6f:15:a3:
d5:0a:3c:1a:33:95:7e:f6:6e:78:d7:d9:d3:4d:da:05:82:46:
ef:c2:7c:bf:3e:89:7c:c7:b4:1a:51:00:e6:bc:5a:f9:ce:9e:
64:7f:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:58 2025 by rpki-client