Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File: fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier: StHBhx6QiLN3TQudDFpjAh7HDZKswZVfNeLRfWIJsM8=
Subject key identifier: F2:8D:E6:69:F4:B8:C4:08:C4:31:9A:F1:7A:6A:10:EF:EA:2C:94:CE
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial: 019A725C3A083FD5F68AD52C6AEDD6635A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number: 22
Signing time: Tue 11 Nov 2025 10:00:37 +0000
Manifest this update: Tue 11 Nov 2025 10:00:37 +0000
Manifest next update: Wed 12 Nov 2025 10:00:37 +0000
Files and hashes: 1: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: k1p2qJbKTTZlbh5VS2wvCxqDQ5a6YcTA/WR5/T/f650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3a:08:3f:d5:f6:8a:d5:2c:6a:ed:d6:63:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
Validity
Not Before: Nov 11 10:00:37 2025 GMT
Not After : Nov 12 10:00:37 2025 GMT
Subject: CN=f28de669f4b8c408c4319af17a6a10efea2c94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:75:52:e1:48:fd:2d:74:7a:6e:70:a6:ec:
61:7e:d2:1a:c0:31:28:e9:17:f7:12:b4:e0:25:00:
50:20:2d:f4:80:e0:6e:71:5b:ca:4f:cc:c9:93:bc:
fa:ab:1f:23:04:80:42:28:67:46:eb:7b:81:51:c9:
e9:31:7c:dd:eb:13:18:1e:ad:5c:f5:69:29:ee:53:
43:2d:25:44:02:0f:64:b1:1b:87:1c:a8:9d:18:f6:
28:8a:b2:cb:64:2b:3d:7f:8c:f9:6c:cb:32:36:a6:
d6:78:81:9a:94:89:57:e6:8c:af:0d:7c:b4:25:2d:
33:06:4a:50:9b:c7:78:61:ae:f1:f6:27:46:02:0f:
8f:23:53:cb:a9:1c:65:7f:d2:e7:0d:a3:5d:95:8d:
b0:57:86:e0:a6:59:c9:a8:9c:24:9f:c0:97:a4:26:
b7:c7:b3:d9:be:64:9c:50:fa:e7:d2:1e:7c:d3:17:
92:59:9a:94:2b:35:12:50:91:f9:c7:d7:f9:c9:a7:
2c:46:3e:78:8a:86:d3:55:7b:bf:2a:f8:24:80:6d:
8d:ea:5f:19:30:77:ec:b1:89:25:0d:99:da:cd:82:
8e:58:19:28:b7:59:ad:a1:40:6a:cb:bf:6e:5e:bf:
aa:5d:d5:2d:d6:3c:39:8f:25:db:a1:44:77:aa:9e:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:E6:69:F4:B8:C4:08:C4:31:9A:F1:7A:6A:10:EF:EA:2C:94:CE
X509v3 Authority Key Identifier:
keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:12:5d:d7:18:5a:21:ec:0c:05:be:a7:57:59:b0:d2:7e:e0:
68:e1:ab:4c:3f:ed:5c:3b:0a:0a:b5:0e:a0:48:3b:38:af:95:
9b:f7:b6:f7:e2:37:f7:03:d7:50:14:78:18:74:32:0d:d2:68:
42:f8:be:a6:a8:c8:1d:39:8f:92:ed:be:ca:28:82:44:f5:b2:
fe:63:ab:24:63:a3:67:db:e2:8f:7a:21:27:c4:be:b8:5a:1a:
72:a1:48:d3:81:f0:b3:b5:ef:54:f3:b0:df:9b:05:d9:51:3d:
56:e2:4e:a5:8a:b1:54:8b:21:a5:4b:c4:e6:75:5a:d5:a4:1a:
ac:d6:97:9e:de:4c:14:fa:05:e3:20:88:eb:11:04:78:e5:b0:
50:36:7e:e1:70:f8:e7:39:c5:e4:bf:88:2b:95:97:cb:ec:32:
24:0e:99:07:d4:79:c4:4c:e6:fa:f4:02:2f:b3:30:22:f7:2e:
18:d4:58:fc:12:2b:35:a1:7d:54:37:91:76:cd:a8:f9:af:60:
52:7e:0d:2a:a0:5c:39:8d:fd:b9:cc:c9:ac:20:bb:54:7b:b2:
9f:df:e5:d3:49:e2:07:6b:b9:78:50:0a:e8:60:4c:be:06:1f:
cf:08:4d:a0:99:b2:9e:79:e0:95:9c:26:07:e7:1e:96:ce:a3:
3d:c6:fd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:21 2025 by rpki-client