Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: 1tHcW43SXLtWsUVjdltlQ00/7qtCkMIMAG0QKAnTxa4=
Subject key identifier: D1:A3:54:0C:90:2D:1C:3C:F6:A9:43:5A:C9:82:56:27:5D:89:C3:9D
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019A7338523111165C8E242A367DEC3F194E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 14:01:02 +0000
Manifest this update: Tue 11 Nov 2025 14:01:02 +0000
Manifest next update: Wed 12 Nov 2025 14:01:02 +0000
Files and hashes: 1: 2EgNkY8LCfJBqiF5G8pJe3q0hB4.roa (hash: wdnhU8m5AMaVCnPJuJ1ikMuyahXryJ7xnwDGzqvqxIk=)
2: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
3: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: qmLuF1LEHUSXm9Ucny9PXHiewWcL/cgmklKL5CAk2io=)
4: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
5: onHMu3bAahxq_cU4SfKfk6E_UV4.roa (hash: iPBBLCVey8nRw59EFOtKkUkXyLv07ioTCFN/ZWTNZaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:52:31:11:16:5c:8e:24:2a:36:7d:ec:3f:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Nov 11 14:01:02 2025 GMT
Not After : Nov 12 14:01:02 2025 GMT
Subject: CN=d1a3540c902d1c3cf6a9435ac98256275d89c39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:07:db:ae:d4:28:8f:37:25:6b:1b:02:0a:
33:c0:ef:2e:58:59:d2:a7:b4:1d:6e:3c:52:76:6c:
0c:f1:a0:5f:c7:06:b3:f0:39:8e:b8:9a:54:11:fb:
cc:58:4c:ce:6d:c7:d6:7b:4e:83:0d:b6:02:93:13:
e0:e7:a4:89:f9:13:d7:a0:26:d8:59:74:15:80:a8:
ef:cc:61:f8:85:de:d2:d8:9b:6f:6b:2c:cc:ff:a0:
a7:8d:af:bc:7a:fb:5f:16:7f:ea:69:e2:45:8c:5e:
c7:95:2a:b7:2e:f7:5b:81:e1:3b:72:39:87:9f:83:
e2:fb:0d:23:0d:90:12:27:d8:42:69:30:9d:59:d3:
2f:5f:b4:4c:df:e4:1d:77:93:ef:be:13:b1:1f:42:
b4:c5:44:3b:96:b3:e8:bc:ad:f7:9f:79:ad:2e:07:
c5:2d:76:ee:a1:38:38:f6:59:68:6f:6c:30:ad:7b:
91:d3:dd:fb:27:1f:9e:e5:c9:06:6f:e1:0b:07:d5:
c5:17:4e:93:6e:44:e2:a8:ee:14:5a:f7:11:06:6c:
32:a8:d4:9e:4d:4b:f8:20:dc:19:c3:cb:2e:22:4c:
70:4f:b5:b3:b7:6d:6a:2b:22:53:4a:6f:5c:ed:7a:
b8:3d:a9:3c:09:0d:f4:9e:6d:65:64:de:48:64:0c:
2b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A3:54:0C:90:2D:1C:3C:F6:A9:43:5A:C9:82:56:27:5D:89:C3:9D
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d8:0e:56:08:29:4f:ac:a5:4d:de:89:31:cb:4a:79:a8:f1:
51:d0:42:33:0f:2a:c2:13:d1:c2:b4:2b:4a:f6:9f:66:51:f2:
f1:13:17:bf:22:fe:4f:e7:05:2b:76:e1:bf:01:32:de:d7:79:
dd:cc:db:73:03:98:62:a1:7d:fe:61:33:27:11:af:2c:3b:61:
47:11:69:8e:0b:82:56:b0:f5:f4:12:a3:79:e7:6d:2e:03:f8:
49:f6:c3:4e:e9:5b:a2:41:dc:35:e9:32:f7:60:f3:b8:af:fa:
34:c1:a9:11:9f:dc:fc:c6:8a:7a:18:75:79:f8:23:36:41:05:
23:fd:15:e7:a7:74:35:b9:9a:44:51:f3:a5:1d:55:19:db:89:
b7:c6:a3:52:c7:67:85:16:20:a9:91:a6:9a:fc:f6:03:da:32:
44:e4:72:6f:01:90:54:e8:4b:92:96:29:1c:45:e5:9d:eb:88:
da:8d:40:51:e1:da:ab:93:2c:38:db:dc:3c:bb:f6:2a:c6:e1:
73:42:34:e1:68:42:28:fb:28:ea:cf:58:d4:92:41:13:18:b0:
42:a5:9f:90:1e:2d:20:24:b9:19:f8:41:d5:a8:4a:cc:c9:33:
26:29:69:81:d9:0b:3f:b1:89:59:26:42:ff:f4:fb:91:bf:a0:
98:1e:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:32 2025 by rpki-client