Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier: /YuDfHjzLCzo9vEaYorDVBqWEcqByeAZk8Xq86ATizg=
Subject key identifier: 9B:78:A7:86:0B:9A:48:6C:60:E7:2B:42:6C:AE:41:50:74:26:B1:CC
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 019A72CA905BE0CB5E9794FE4ACDE9CF681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:09 +0000
Manifest this update: Tue 11 Nov 2025 12:01:09 +0000
Manifest next update: Wed 12 Nov 2025 12:01:09 +0000
Files and hashes: 1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: jn049Pzcptc/kr43hLKs/wsP0hLzFcH8m4GpF2nS6Hw=)
2: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (hash: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:90:5b:e0:cb:5e:97:94:fe:4a:cd:e9:cf:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Nov 11 12:01:09 2025 GMT
Not After : Nov 12 12:01:09 2025 GMT
Subject: CN=9b78a7860b9a486c60e72b426cae41507426b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:52:01:0a:d4:ba:7a:69:93:05:08:fa:c1:
bf:ca:8b:0d:a8:7e:24:9d:8e:d6:90:c9:1a:e9:6d:
02:f9:7c:2d:f4:ab:37:16:c9:f2:b7:8e:a7:44:8c:
f9:f8:36:d5:64:81:6c:45:d8:dd:e1:06:db:c8:48:
4c:d3:26:da:1f:ec:ee:f4:51:c8:c5:77:d4:70:e8:
5a:23:c1:79:87:b2:f3:90:4e:8a:f2:fe:25:01:f5:
99:4a:b2:18:a2:63:9e:b3:a5:b1:d9:47:69:b8:25:
50:de:af:6f:d0:6e:85:29:91:2c:08:e6:64:92:0e:
7c:9b:77:6f:00:7c:7e:a6:92:ac:44:a8:33:98:d3:
38:58:ad:96:23:df:a4:50:cd:e5:0e:90:ce:e7:46:
31:b6:67:33:f5:23:a1:56:04:55:3f:ad:e1:4a:77:
74:95:3b:be:b7:5c:ab:47:9c:c5:40:5c:88:ba:1f:
9b:71:cb:17:23:67:f3:50:9c:ff:81:5d:27:95:0b:
9f:55:e4:d3:59:3f:13:d0:93:47:4f:c0:8d:03:5c:
7a:50:c6:54:bb:29:55:30:5f:95:d7:48:70:72:08:
80:3f:43:24:9a:c7:51:eb:50:44:70:b1:31:aa:e2:
eb:80:6f:91:e7:88:40:24:9a:d6:37:71:02:a5:a2:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:A7:86:0B:9A:48:6C:60:E7:2B:42:6C:AE:41:50:74:26:B1:CC
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:18:b7:53:df:c3:a4:e5:15:a4:b8:96:3e:88:26:7c:db:1c:
11:a8:3d:9c:1b:70:3f:7d:31:31:da:32:28:b7:7e:7a:df:69:
f5:76:5f:74:85:f5:ce:24:26:69:4b:73:63:aa:72:e9:c4:74:
50:83:d3:17:6e:1a:1e:cc:b2:98:34:71:7b:88:1a:ba:7b:21:
3d:a8:45:93:90:0d:bf:67:8e:05:97:53:f6:c9:cb:9b:94:5c:
6f:a4:1c:e3:c9:64:0a:8e:59:5a:34:c4:35:e6:e8:2e:36:23:
3e:a7:1d:50:79:82:df:46:33:2c:ec:20:1f:c6:6f:a3:a6:82:
f4:54:ee:ce:99:28:85:b2:e0:69:55:c6:e5:95:ae:3e:e3:d3:
03:da:61:56:4d:95:36:3b:8b:ff:12:7e:7f:32:83:d1:0d:54:
c6:b5:11:11:11:e9:44:23:89:a7:d8:f8:66:bf:05:74:d5:e0:
a9:0b:8a:d8:f1:38:14:2b:1f:fd:a7:ba:23:fd:bd:26:6e:48:
e5:cb:d6:b0:ad:0b:20:81:e7:13:4d:b9:4a:0b:c2:0c:dc:1a:
f3:aa:b8:0d:68:21:14:82:1e:73:16:83:8c:6d:cd:78:e6:b7:
cc:a4:be:99:be:8c:91:a7:59:d7:20:7a:1f:d6:f1:b3:82:38:
18:c1:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:16 2025 by rpki-client