Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: /Lg8IxXuZO+jZhgtjGFdC3M3FuS9XESgSemm+mRff0k=
Subject key identifier: E3:2D:F5:CE:37:94:0C:C3:34:78:9E:D1:7A:94:67:75:C4:13:BF:C6
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019A7113776907002418BB9F0138530CB47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 14D7
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=)
2: gEXvMQFDNz1aGEXTxBfhGOGVeNo.roa (hash: ajVAuxCTYl0Gl8xjRk/pbvxecOxPr7KE3CecnpOLH8Y=)
3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: hGb5EeEook24IOcubV5Fks9rUrohGbAwRO5k3uVA5/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:77:69:07:00:24:18:bb:9f:01:38:53:0c:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=e32df5ce37940cc334789ed17a946775c413bfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:50:d1:39:07:f5:6a:6d:ee:8a:22:06:80:
23:09:0b:84:f3:a2:07:db:17:a5:5a:d1:36:90:65:
e8:98:de:48:bd:39:e5:65:f2:af:bc:d9:3c:85:85:
0a:b7:18:be:a5:79:d2:a6:06:33:f6:6b:f0:6a:87:
2f:11:e2:c3:05:6d:1c:50:dd:d3:44:86:64:4a:79:
4c:70:34:1e:33:59:2d:a1:ea:8a:65:62:b0:d7:60:
7b:6d:fd:83:65:24:64:85:c7:39:30:49:2d:a6:b1:
19:3a:95:ba:b6:e3:b8:3d:80:08:a9:3b:2f:4c:71:
57:b2:21:a8:98:a0:e6:81:99:f8:6c:ba:ed:62:67:
22:46:74:0c:ed:4b:45:f8:be:e3:5b:88:e5:3a:ac:
10:1c:79:04:03:f7:64:89:b4:35:36:b1:7c:75:8a:
28:b8:9e:81:b7:7f:3a:95:0e:d3:e2:4b:1c:7e:c5:
8a:ac:54:7b:cd:ab:a4:51:9a:06:fc:a7:9e:93:41:
71:cc:b0:e7:25:06:82:de:79:2b:d1:13:b3:7d:45:
94:9f:c3:22:0d:21:9f:55:d9:f2:b3:62:55:49:0c:
19:5a:41:1e:74:a7:88:d3:5b:dd:37:18:11:12:4e:
c0:a4:d2:8c:b9:bf:93:c2:0a:5d:f8:7d:0d:87:7e:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:F5:CE:37:94:0C:C3:34:78:9E:D1:7A:94:67:75:C4:13:BF:C6
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:1f:3c:96:57:52:24:3e:36:e2:a7:1a:49:b0:a8:2d:8d:
24:0a:22:dd:c8:33:ac:96:a6:72:6b:44:eb:52:fa:75:82:87:
14:dd:1e:89:d6:71:8e:91:69:2a:98:24:75:8b:43:6d:b1:3c:
da:f9:21:d4:7e:65:0f:d6:4d:ba:2d:df:54:1e:bc:4d:43:55:
bf:16:43:68:4c:e7:fa:0a:d3:5f:00:95:73:67:9d:d1:56:6b:
ab:8a:1e:cd:3c:f3:4a:5c:bb:45:d0:a6:61:5b:7f:9a:ee:30:
cd:36:2b:06:53:d1:84:5e:29:de:b5:9a:05:b3:90:b1:64:2f:
73:33:2c:16:51:1f:31:9e:76:56:d8:ce:b5:86:76:dd:00:31:
3e:20:27:95:2e:1e:43:8a:cf:d7:0a:34:c1:fa:b3:0a:c3:a9:
08:09:54:11:2f:10:1f:79:3a:31:94:c1:44:8f:3a:55:8a:ca:
8f:7d:1e:6a:a3:e3:21:bb:92:6c:17:48:0c:8e:fe:56:9f:f2:
cc:71:12:2c:98:07:b6:71:97:12:44:fa:44:11:44:1e:be:00:
60:90:f4:03:ba:0d:01:f7:b4:fb:95:43:f4:e3:b2:0c:b3:a1:
cf:74:ac:aa:e0:41:bb:47:cc:3c:3d:de:c1:ff:f2:b0:e2:ae:
ef:e0:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client