Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: s2Pxymg+I71dvT7AoijXFeVMpk11b9te3injKUpwQ7g=
Subject key identifier: 32:01:D0:C7:07:5E:50:80:21:3E:2A:B8:CC:0C:63:15:50:E3:79:7E
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019A71B89B95E0559D24C42A80E33AB9C013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 0380
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: /6SOo8YyIlPcBqtGUl5BlJ79S8A08UtSU3gnxt7WEus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9b:95:e0:55:9d:24:c4:2a:80:e3:3a:b9:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=3201d0c7075e5080213e2ab8cc0c631550e3797e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:a7:a8:f4:80:ce:9c:b5:f0:0c:92:04:fd:
a4:a6:d2:d2:4b:5c:31:b9:98:33:bb:1e:13:c9:1d:
b1:c1:f4:38:4b:ff:2d:83:af:c3:a6:db:c2:d4:84:
83:f9:67:52:79:16:88:d6:6a:ba:ba:84:87:f0:2a:
80:0a:d2:b7:eb:c2:bf:8b:62:ea:66:63:fb:5f:34:
e3:af:78:72:9c:7d:ee:d6:63:3e:a0:75:65:9e:29:
e1:2f:44:6c:ba:0a:52:e1:29:a0:54:4c:ac:bb:f0:
8b:4f:b6:f9:e6:7e:3b:a1:23:ae:97:90:3e:79:3b:
6e:6d:8f:0d:2b:0b:f3:04:f0:42:ae:f8:0d:85:8d:
11:bd:dc:53:00:1c:34:6e:49:85:ac:61:ae:c8:c3:
9e:4f:06:f3:cb:41:9f:ea:cf:27:eb:cf:24:d7:df:
26:b7:1f:da:d7:5f:89:95:8b:3b:c5:68:77:20:a1:
00:b0:50:d4:f4:5f:0c:0e:38:3e:cf:08:ec:74:62:
23:c2:e2:cc:02:57:ff:7b:8f:52:f1:41:b9:50:8c:
e1:99:40:dc:f4:87:45:7f:80:8b:36:33:1a:43:d9:
a5:b3:3e:ab:c1:d0:92:a5:3f:ba:40:ce:67:5b:b0:
03:75:0b:4c:35:11:ab:79:6b:72:dd:66:2c:86:6e:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:D0:C7:07:5E:50:80:21:3E:2A:B8:CC:0C:63:15:50:E3:79:7E
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:67:2e:8d:3b:b6:b2:5b:71:26:41:78:40:6f:d7:d2:e2:7f:
e6:58:55:7e:93:f3:73:e6:f7:7c:ce:c7:be:30:97:11:8f:ae:
52:e3:8e:85:b6:b9:40:e6:fe:27:ab:e7:00:a8:7a:f7:85:67:
e8:3c:3f:ad:36:a0:85:0f:02:c3:4f:42:14:d3:8c:3f:3c:a4:
af:0d:f1:ef:c6:29:18:e2:71:b3:18:a4:37:f8:8e:bc:f6:07:
07:76:75:3f:5a:d7:be:a3:f7:16:f0:63:ac:26:33:c7:60:de:
60:19:7e:1a:4c:fe:27:05:57:51:a7:bc:65:6c:dc:cf:c8:08:
84:60:f1:46:3d:6a:5e:05:c2:e7:35:15:ea:0d:64:20:77:46:
8c:6a:78:4f:81:db:1b:2b:a6:5b:53:db:25:8e:7a:e8:6f:f6:
c9:bf:f6:e5:65:b5:4d:62:5d:5b:75:06:2b:e4:ae:ee:0f:05:
0a:1f:03:42:3f:07:e6:29:4c:26:a6:51:71:b0:14:4c:28:09:
10:7b:4f:f0:0e:68:2b:b7:1a:57:1b:31:40:fa:32:46:39:99:
17:7b:c9:89:98:af:9f:3d:0c:21:58:53:c8:4c:3c:f8:53:ee:
bf:3a:fd:ae:6a:44:4c:3b:16:a1:1d:73:fc:a5:8a:af:03:ac:
fe:3c:ca:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJuV4FWdJMQqgOM6ucATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3
NWVmZGEwHhcNMjUxMTExMDcwMTU1WhcNMjUxMTEyMDcwMTU1WjAzMTEwLwYDVQQD
EygzMjAxZDBjNzA3NWU1MDgwMjEzZTJhYjhjYzBjNjMxNTUwZTM3OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmKnqPSAzpy18AySBP2kptLSS1wx
uZgzux4TyR2xwfQ4S/8tg6/DptvC1ISD+WdSeRaI1mq6uoSH8CqACtK368K/i2Lq
ZmP7XzTjr3hynH3u1mM+oHVlninhL0RsugpS4SmgVEysu/CLT7b55n47oSOul5A+
eTtubY8NKwvzBPBCrvgNhY0RvdxTABw0bkmFrGGuyMOeTwbzy0Gf6s8n688k198m
tx/a11+JlYs7xWh3IKEAsFDU9F8MDjg+zwjsdGIjwuLMAlf/e49S8UG5UIzhmUDc
9IdFf4CLNjMaQ9mlsz6rwdCSpT+6QM5nW7ADdQtMNRGreWty3WYshm6vZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIB0McHXlCAIT4quMwMYxVQ43l+MB8GA1UdIwQY
MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt
NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw
LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGcujTu2
sltxJkF4QG/X0uJ/5lhVfpPzc+b3fM7HvjCXEY+uUuOOhba5QOb+J6vnAKh694Vn
6Dw/rTaghQ8Cw09CFNOMPzykrw3x78YpGOJxsxikN/iOvPYHB3Z1P1rXvqP3FvBj
rCYzx2DeYBl+Gkz+JwVXUae8ZWzcz8gIhGDxRj1qXgXC5zUV6g1kIHdGjGp4T4Hb
GyumW1PbJY566G/2yb/25WW1TWJdW3UGK+Su7g8FCh8DQj8H5ilMJqZRcbAUTCgJ
EHtP8A5oK7caVxsxQPoyRjmZF3vJiZivnz0MIVhTyEw8+FPuvzr9rmpETDsWoR1z
/KWKrwOs/jzK9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:45 2025 by rpki-client