Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File: fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier: 49hZRqQedvv0kJE5NVclfNZcvcCLAKkDDv1WZl1MavY=
Subject key identifier: 7C:A5:CB:0E:15:75:BF:4A:8C:34:4F:72:BA:41:47:61:A1:E9:BA:B4
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 019A258A6BD37C6A7BDE74B84B058810C088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number: 0BD9
Signing time: Mon 27 Oct 2025 12:00:19 +0000
Manifest this update: Mon 27 Oct 2025 12:00:19 +0000
Manifest next update: Tue 28 Oct 2025 12:00:19 +0000
Files and hashes: 1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: 9E4CtjjsQ1Zk2jtBD1EllWesYlvzVvRNcl3/s+PhMRA=)
2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:6b:d3:7c:6a:7b:de:74:b8:4b:05:88:10:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Oct 27 12:00:19 2025 GMT
Not After : Oct 28 12:00:19 2025 GMT
Subject: CN=7ca5cb0e1575bf4a8c344f72ba414761a1e9bab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:02:f9:8b:3a:84:de:8a:6f:f3:d4:01:00:
45:89:60:ff:e5:52:01:63:99:83:45:4e:4c:3d:1d:
36:8d:a4:a5:60:5c:0f:e4:93:6c:3a:35:f8:da:0f:
2a:40:f2:4d:97:8c:44:35:e0:2a:96:9f:07:ed:f7:
fe:d0:79:b9:90:09:b2:58:f7:06:5f:d4:06:fe:29:
62:7c:03:e1:4f:a4:6c:98:db:24:f6:96:9a:e9:8f:
ea:cc:8d:f1:ca:80:75:f6:1d:95:13:cc:2e:60:10:
02:23:14:f3:a9:ed:da:8e:78:d5:cd:88:42:8b:74:
d8:ec:53:8a:f7:fd:af:b5:3b:88:8c:32:7d:08:f8:
dd:75:bf:3f:33:d9:6a:6e:06:7b:33:5c:48:00:84:
0f:df:8c:7b:1b:a3:2f:29:7a:28:f7:d9:27:03:87:
04:53:86:2f:fb:26:4a:8c:c4:7f:ac:db:3a:ce:cf:
46:aa:20:22:11:f7:d5:df:9f:a6:34:83:cb:4c:be:
fb:32:ec:19:93:01:ba:84:08:42:46:81:4c:be:64:
b7:90:83:4a:47:fc:11:b5:67:19:41:08:80:42:a4:
cc:5b:ce:4e:b8:fe:88:bd:f4:ef:60:a0:c5:2b:df:
ad:c3:c2:50:ec:81:c8:cb:55:3b:20:c1:19:ed:03:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:CB:0E:15:75:BF:4A:8C:34:4F:72:BA:41:47:61:A1:E9:BA:B4
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:6f:82:0d:b4:15:5c:99:91:46:a5:eb:19:38:bc:96:8d:
5d:9d:71:85:84:2b:89:1d:6b:f1:6f:4e:84:f8:c4:23:76:7a:
15:16:42:f0:95:b0:36:e0:17:73:5c:fe:06:d3:4e:f9:93:6c:
85:15:19:74:dc:c1:d8:55:97:42:a4:9f:55:1e:1e:51:d7:b0:
55:d9:15:17:25:f2:1a:18:87:33:25:ee:b3:1f:6c:dc:af:11:
72:ba:a3:b7:7d:da:5b:9b:66:0b:ca:96:e7:0f:2c:74:cd:73:
40:2f:a7:16:01:cd:08:c2:7f:3f:40:7c:0b:d3:f4:72:73:4a:
d3:ac:08:a5:e7:0c:a3:64:fe:d4:dd:dd:00:28:fc:13:63:a3:
93:f7:f3:2e:67:bc:83:a6:11:de:9d:59:c9:78:0b:3d:f5:bd:
9f:bb:68:fd:27:21:79:ac:88:e8:cd:e3:b9:f6:eb:91:13:46:
58:91:99:e7:46:49:3b:7e:de:13:df:c5:bb:54:6e:25:7b:e5:
68:b6:a7:ce:47:fc:db:78:f5:d5:11:72:f3:0c:00:64:b8:70:
8b:a8:94:22:73:e6:3a:ba:fc:61:d7:77:60:f3:9e:92:de:24:
88:d3:52:fe:50:0c:f1:3f:f3:6b:58:ef:c3:ef:d2:f8:1b:3e:
d1:98:d8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolimvTfGp73nS4SwWIEMCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNWFhMGFmZThlNmYwYmI4NWU1Yzc1ZjJmNmMxNDEyMTgz
MGVjODUwHhcNMjUxMDI3MTIwMDE5WhcNMjUxMDI4MTIwMDE5WjAzMTEwLwYDVQQD
Eyg3Y2E1Y2IwZTE1NzViZjRhOGMzNDRmNzJiYTQxNDc2MWExZTliYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjYC+Ys6hN6Kb/PUAQBFiWD/5VIB
Y5mDRU5MPR02jaSlYFwP5JNsOjX42g8qQPJNl4xENeAqlp8H7ff+0Hm5kAmyWPcG
X9QG/ilifAPhT6RsmNsk9paa6Y/qzI3xyoB19h2VE8wuYBACIxTzqe3ajnjVzYhC
i3TY7FOK9/2vtTuIjDJ9CPjddb8/M9lqbgZ7M1xIAIQP34x7G6MvKXoo99knA4cE
U4Yv+yZKjMR/rNs6zs9GqiAiEffV35+mNIPLTL77MuwZkwG6hAhCRoFMvmS3kINK
R/wRtWcZQQiAQqTMW85OuP6IvfTvYKDFK9+tw8JQ7IHIy1U7IMEZ7QMthQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHylyw4Vdb9KjDRPcrpBR2Gh6bq0MB8GA1UdIwQY
MBaAFH1aoK/o5vC7heXHXy9sFBIYMOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2Yt
OGZmYjEyN2IzMjRlLzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2YtOGZmYjEyN2IzMjRl
LzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf9vgg20
FVyZkUal6xk4vJaNXZ1xhYQriR1r8W9OhPjEI3Z6FRZC8JWwNuAXc1z+BtNO+ZNs
hRUZdNzB2FWXQqSfVR4eUdewVdkVFyXyGhiHMyXusx9s3K8Rcrqjt33aW5tmC8qW
5w8sdM1zQC+nFgHNCMJ/P0B8C9P0cnNK06wIpecMo2T+1N3dACj8E2Ojk/fzLme8
g6YR3p1ZyXgLPfW9n7to/ScheayI6M3jufbrkRNGWJGZ50ZJO37eE9/Fu1RuJXvl
aLanzkf823j11RFy8wwAZLhwi6iUInPmOrr8Ydd3YPOekt4kiNNS/lAM8T/za1jv
w+/S+Bs+0ZjYew==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:43:57 2025 by rpki-client