Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File: fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier: td2kh+Nd4HZPR6s+SsYvnouhrHFgZ8KSgSNB8coq55I=
Subject key identifier: 54:97:7C:8B:86:BE:A0:78:14:31:00:98:C0:58:4F:CD:32:6A:41:8C
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer: /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial: 019A71B9593DA0E5B7CA5E64927BE44AB25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:43 +0000
Manifest this update: Tue 11 Nov 2025 07:02:43 +0000
Manifest next update: Wed 12 Nov 2025 07:02:43 +0000
Files and hashes: 1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: EkDUe37EMWYREIy00YqhipC/0gwj79a6pALFzpYONHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:59:3d:a0:e5:b7:ca:5e:64:92:7b:e4:4a:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Validity
Not Before: Nov 11 07:02:43 2025 GMT
Not After : Nov 12 07:02:43 2025 GMT
Subject: CN=54977c8b86bea07814310098c0584fcd326a418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:ef:a9:ef:9a:1c:33:33:1a:3c:a6:a4:19:
a2:b0:65:52:b7:8f:cc:75:04:16:73:c1:fc:3b:df:
55:7c:47:29:3a:bf:24:fb:1d:95:cb:fd:4d:43:1e:
03:4a:3a:f0:d4:74:d9:d0:ee:3b:b1:eb:68:1e:4b:
7b:18:52:dd:eb:bc:58:c0:25:bd:3b:b3:e7:39:e0:
3b:59:72:99:56:3c:57:db:13:28:48:bf:c4:fa:7d:
50:49:b0:ef:a0:b0:0b:61:05:58:3d:8b:c8:50:76:
51:09:58:1a:58:43:70:37:54:d3:80:2e:26:b8:c8:
47:38:2a:a1:ac:63:64:8f:ec:f0:55:a6:9f:b2:fc:
ff:ef:e7:15:5e:06:e4:ab:1d:fc:b4:cf:f3:54:dc:
9b:31:81:ef:2e:b9:32:90:e6:e7:f1:46:4f:f4:77:
d7:fb:eb:99:19:90:67:41:34:2e:ce:a9:f2:27:9b:
5d:12:4b:89:1c:70:38:63:48:f5:01:a3:76:01:64:
9d:a3:ac:e3:ed:d0:53:ac:a1:b3:94:ed:32:0f:4c:
eb:45:ed:d9:ac:87:7a:17:0b:b4:2c:00:41:96:f8:
a7:f7:28:71:e0:ef:a3:2a:ee:69:00:1a:ec:f8:6a:
a9:31:4c:cd:3b:36:75:96:07:45:c4:45:f7:a1:de:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:7C:8B:86:BE:A0:78:14:31:00:98:C0:58:4F:CD:32:6A:41:8C
X509v3 Authority Key Identifier:
keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:05:c1:84:0e:cb:66:40:d1:17:24:75:c0:b0:bf:7f:35:21:
04:c5:7d:78:f8:01:83:72:53:ed:41:33:8f:fd:89:7a:c0:a5:
48:62:6e:1b:33:29:80:cf:cc:3f:c2:dc:23:e0:ac:03:67:4e:
31:1c:aa:f7:e3:ce:49:8f:c5:80:9f:0b:8e:4f:03:a7:14:6b:
4a:e2:f0:84:bc:f2:30:85:7d:7c:07:78:98:5e:5b:14:ef:76:
16:7d:78:92:1b:e0:51:67:4e:24:b2:d5:d3:fa:7c:63:66:bf:
3c:98:fd:3f:64:4f:7d:dd:89:f4:0f:ba:4d:30:b1:64:cf:18:
f7:29:e6:7a:5d:81:6c:29:c1:15:4e:d1:22:93:21:8a:4e:36:
71:b9:52:9e:b0:e8:be:ca:e7:dc:18:16:d9:41:c0:bc:1d:e9:
96:d6:4f:49:83:02:c3:48:33:4f:a7:5b:a4:d1:c9:e5:21:88:
72:45:a2:fb:01:13:5f:8c:60:19:1a:94:68:42:0e:f5:c6:e1:
91:0e:18:1e:e4:2e:44:af:2c:8f:10:0d:3b:8a:c5:e9:51:b0:
ca:89:18:eb:8b:66:3f:69:19:8b:3a:b8:5d:93:7c:88:0e:c3:
e6:18:00:16:5c:ed:51:a0:dd:9b:a4:89:c5:1a:0e:6a:38:c3:
24:23:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client