Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: qhb0GLz5YU97Zt/qF1UojKrRT8pDKPE9Y71miWtL55E=
Subject key identifier: 8B:A2:6D:BE:9B:D5:8D:E7:91:A5:2C:6F:EB:6A:C9:A5:63:C6:B8:EB
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019A71131F319D5520523AAFC63F607E60CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0E32
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=)
2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: UPfatJgSyY2oE/fZ+/jmRLxix/5C3D7zfUbecldhF+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1f:31:9d:55:20:52:3a:af:c6:3f:60:7e:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=8ba26dbe9bd58de791a52c6feb6ac9a563c6b8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:f9:d2:01:39:a3:df:9d:ea:d9:a9:a2:f6:
d2:32:67:ab:2e:3c:25:a9:79:b1:77:72:21:8c:25:
c5:62:28:60:7e:50:0a:2d:ff:2d:79:11:27:a8:b4:
36:4f:1e:8c:75:cc:2f:75:7a:ea:5a:08:14:60:a5:
68:40:1c:24:e8:aa:c5:62:2f:22:7e:ed:35:5e:93:
3a:aa:db:8c:fd:ea:6d:10:f2:15:20:f5:d7:17:05:
56:f1:58:eb:bb:d6:76:c6:e9:f3:ca:9c:7f:cb:f4:
2a:d3:d8:3f:d0:f5:e1:41:4d:99:1e:65:93:35:fb:
33:35:39:94:3f:09:69:a4:64:dc:09:84:8c:41:29:
f6:e4:b3:12:dd:a2:65:0e:b8:af:1a:a3:2a:13:ec:
75:5b:19:dc:f7:ff:a8:48:b9:e9:3e:23:a5:80:79:
66:dd:5b:97:b5:47:82:eb:c0:7d:4f:00:b1:f4:b1:
b7:3b:46:f4:d1:4a:eb:02:8d:b3:91:ab:5a:04:e1:
77:9a:77:53:e1:9a:1e:f7:89:04:75:61:b8:ea:b5:
51:b8:44:73:0c:d8:56:f6:0a:f4:1c:81:95:33:41:
73:6a:4a:ef:9d:4e:06:37:36:b6:bb:2d:93:11:4f:
fa:2c:16:06:af:d8:19:8b:d8:79:de:28:e8:eb:e2:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:6D:BE:9B:D5:8D:E7:91:A5:2C:6F:EB:6A:C9:A5:63:C6:B8:EB
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:80:f9:aa:d6:1b:90:ce:d9:2e:28:3e:d1:f9:e4:f8:b2:
02:0e:62:86:8b:22:7e:81:37:9d:69:58:db:a4:1b:d1:f8:83:
45:61:a8:b7:0a:f5:d9:09:18:07:44:98:df:29:fe:d6:c5:b5:
33:10:5c:f1:62:44:7a:42:f2:84:a3:de:3a:ba:bd:03:ad:8a:
39:73:dc:f9:33:25:0f:7a:80:20:b2:d0:ec:36:49:3f:b7:55:
ca:ae:37:b7:5e:c4:00:16:ec:0a:02:0a:ae:8c:dc:11:cb:45:
b6:d4:d3:18:af:f5:a7:38:ad:0f:8a:7a:92:af:a5:77:01:7e:
d4:9f:bb:79:70:9b:c3:83:16:cc:2c:4c:3b:d9:7d:0e:43:bf:
9b:2b:ad:69:8a:15:56:18:9e:af:dd:fb:ed:7f:de:d7:84:42:
15:7e:f7:0a:61:84:d4:33:63:b5:41:83:65:f1:1d:74:b3:49:
e1:0b:ef:3b:bf:f4:ad:c4:9c:cd:48:c7:19:a9:8b:53:f1:37:
02:15:a0:ac:d0:52:44:ac:ec:8d:d4:71:73:5f:75:56:fd:56:
65:c1:e2:1a:79:79:49:43:86:c8:2f:2b:ac:a9:8c:7a:2a:85:
b6:66:b3:84:1f:80:97:cc:f3:6b:8c:93:46:b6:ed:aa:7b:86:
16:3f:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:28 2025 by rpki-client