Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: 3S0zmEbUydn5gTg4qWywC1gt+n6YVIdYjOe7O3oqAYA=
Subject key identifier: 21:1D:AB:49:E1:97:94:45:23:5D:D2:8F:4B:B7:15:1E:81:26:13:64
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 019A73385EE6FF157E388B08682A1A9C7832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 042C
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: uZ2xllWKKM2r1F3MmjgBsLvOQAbwOGJbWkU4cFrDKoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5e:e6:ff:15:7e:38:8b:08:68:2a:1a:9c:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=211dab49e1979445235dd28f4bb7151e81261364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:e5:fa:67:2d:23:9b:fc:6a:66:33:ea:e0:
5b:f7:66:dc:cc:18:e6:0b:24:ba:30:18:84:26:22:
26:fd:c9:e9:87:7e:2d:3d:18:35:45:85:e9:14:c4:
37:15:89:d3:5a:09:b8:0f:de:11:cd:4b:d5:0d:e2:
b0:58:be:f5:c0:73:13:f9:fc:bd:cf:71:9f:4f:5b:
b4:ae:cd:62:3a:85:11:cf:c9:c7:42:8d:b4:7a:7a:
e5:be:57:1f:da:d0:91:b3:cd:a9:54:7d:0a:94:d5:
f0:90:14:c2:c2:d1:2f:f7:78:da:be:ed:76:e0:63:
e4:69:f3:24:60:0a:18:eb:11:83:23:c6:53:08:f6:
0e:d9:76:73:0d:11:03:44:14:35:36:98:f5:3c:53:
24:8d:35:00:2c:cb:a4:43:77:9c:d7:87:2f:d9:82:
20:ed:d9:ad:26:7a:b0:e7:34:bd:19:10:eb:50:94:
9d:5f:eb:ed:aa:0b:3e:48:6b:1b:18:71:38:58:35:
fd:8e:3c:90:e9:96:0c:2a:f9:17:4d:0f:51:0a:30:
3c:56:c1:1b:a6:32:c9:5a:29:ad:87:dd:ee:cd:e8:
33:3e:5c:77:6b:6c:77:29:d6:bd:88:0b:f7:a0:2a:
42:9a:3e:ad:1e:92:1f:cb:e6:dd:57:6d:3a:ad:7d:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:AB:49:E1:97:94:45:23:5D:D2:8F:4B:B7:15:1E:81:26:13:64
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f7:6a:f3:79:c5:56:e9:c2:e6:d4:02:02:a3:fc:b6:46:0c:
92:a7:dc:2b:5c:c9:e3:8d:2f:1a:aa:5a:27:99:f1:d3:04:0b:
de:2d:40:55:a2:3c:f6:b6:be:1f:23:88:8f:83:e3:db:47:7f:
8d:9c:a8:ed:85:df:35:25:7e:f3:7b:8e:6d:e8:6c:41:1c:d2:
cc:d7:4d:e4:f1:03:51:85:ee:a5:14:94:9b:c3:97:fc:ef:23:
17:da:28:74:88:9f:17:db:74:26:ba:11:68:f4:11:df:61:20:
f8:92:2e:4c:0a:c1:dd:90:f5:88:11:02:2a:32:d9:08:38:b2:
d7:0f:61:b9:6e:64:89:b4:d1:ea:ca:cf:e7:c9:66:bc:48:9b:
4b:9f:62:92:b1:de:92:b8:5b:08:49:a5:8a:6d:d0:22:7b:70:
9d:0e:30:9b:77:db:a4:7b:22:ef:be:e9:4e:c6:de:66:24:22:
55:27:7b:42:32:3f:48:ec:99:2d:f1:2a:00:9a:66:88:c7:98:
0c:49:bb:6c:fd:13:d9:99:05:56:f6:38:48:c9:af:a8:38:fd:
ba:b7:47:eb:02:da:84:2b:8f:1c:6f:a7:46:b4:e1:6c:3e:59:
12:1b:cb:f5:31:7a:61:42:01:68:2d:19:98:a5:ac:00:b5:bf:
af:83:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:40 2025 by rpki-client