Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json)
Hash identifier: CPQHDTry34TGCBvcukrEU5Qklz56kYV79wOUOATJlt0=
Subject key identifier: 32:A8:F5:E8:52:65:35:3B:BE:9D:6E:B9:6C:E7:A2:2A:75:BA:C3:6A
Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Certificate serial: 019A71B7D95F69942ADF585CE0BABA08DA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
Manifest number: 0EAC
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: c53V8R1fClkaDSa8X2ppHhXprFlc6JrB8vA4MgX0DTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d9:5f:69:94:2a:df:58:5c:e0:ba:ba:08:da:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=32a8f5e85265353bbe9d6eb96ce7a22a75bac36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1d:92:d5:f4:59:e7:dd:ea:8e:36:d2:39:17:
56:f7:e9:3a:30:2f:61:fe:0b:78:1a:22:df:b2:bf:
41:f1:db:5e:eb:53:d2:e2:a0:df:5d:25:8e:3c:53:
2d:8f:d5:46:17:33:bd:6d:39:61:10:8d:15:d0:80:
82:d3:f0:80:a5:76:53:7a:1e:6b:0e:ce:f1:2b:25:
3e:35:65:a1:a4:89:86:ca:cc:11:6c:03:42:ff:92:
0a:c8:4a:65:eb:09:b4:34:06:42:21:43:84:a6:66:
38:70:3b:4e:22:89:16:0f:64:df:88:03:ef:db:d9:
8b:75:fe:14:a3:9e:fc:f9:00:2a:06:1c:b9:38:9a:
79:4d:f2:57:f1:5b:e7:f5:f4:92:41:ab:c2:f8:e5:
9b:d6:c5:e9:ea:a7:f8:7d:a4:c6:ea:88:f5:0e:f6:
f2:b3:94:a1:7e:2d:66:6f:c3:be:d6:3b:2d:19:35:
34:b7:4a:77:c6:7d:16:ac:83:f2:c3:fb:d7:af:3a:
2a:43:ad:bc:22:0b:09:a4:bc:ab:24:cb:49:4e:e8:
29:d2:5f:b1:e1:25:35:0f:6b:4e:3e:f9:e0:ee:27:
fa:bd:49:cc:56:8b:33:9f:11:ef:e1:47:8f:e9:21:
7d:88:d3:f8:05:1b:a8:d7:cb:61:a1:bf:1d:53:57:
40:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A8:F5:E8:52:65:35:3B:BE:9D:6E:B9:6C:E7:A2:2A:75:BA:C3:6A
X509v3 Authority Key Identifier:
keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:95:54:62:1c:28:be:55:51:c9:e6:a0:31:e8:4e:3a:bb:59:
6d:db:60:5d:17:d0:ad:67:20:81:fb:72:aa:c4:20:93:63:5b:
d3:ce:a2:db:ab:58:42:34:8e:30:48:1f:6a:c0:65:9f:a2:bb:
32:32:24:91:f1:50:b5:15:bd:bf:24:a4:31:5f:8f:69:95:b3:
6b:bf:b7:ca:07:e3:25:6c:fc:7c:e1:ac:54:dc:a2:90:90:0c:
99:19:d2:c1:7c:2e:23:df:14:66:1d:7e:51:3e:0d:32:bc:3a:
74:34:46:7e:48:8a:74:51:53:d0:48:6f:5b:b1:16:75:63:22:
07:17:b9:41:1a:6f:18:24:8e:20:a2:eb:e8:0b:76:c1:07:9f:
4f:b2:f1:0d:86:97:19:9c:d1:0e:03:ac:e6:d7:29:6b:1b:29:
36:7c:29:ad:f8:01:8a:03:e2:fe:5a:82:72:ce:55:90:54:58:
58:86:59:6d:f3:6a:02:76:b4:98:a1:e5:1c:47:9c:fa:26:ba:
d0:2b:e5:a3:51:95:27:cf:68:94:97:13:fd:da:86:d4:93:c7:
0e:ca:6c:35:44:41:b8:c0:34:ce:c8:f6:a9:bc:ea:81:35:90:
1d:83:dd:b7:19:44:fa:ac:98:08:d5:0e:5c:00:55:e0:b5:7d:
cb:df:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:46 2025 by rpki-client