Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
File: fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft (raw, json)
Hash identifier: rHBO26z0BvHQUJnj4v5YpPEcVwVgyyNUH8TFUCuzLno=
Subject key identifier: AB:0B:0A:4E:9F:A3:B0:B4:9A:CB:79:E2:E4:21:D1:D1:BB:D5:47:7B
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 019A73017A9D43557681C189F0C54D9A0696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 13:01:08 +0000
Manifest this update: Tue 11 Nov 2025 13:01:08 +0000
Manifest next update: Wed 12 Nov 2025 13:01:08 +0000
Files and hashes: 1: MLwEXlz7vUwc5SjWgOx55jqHjfY.roa (hash: nEFYTn5TUjsaiq+RhC3lF8ai3Uf+0UFa/4rn5vibuks=)
2: fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl (hash: LGHPrSkY//ojSc5cgf+//3rF3jhL7JUkp0wkuHE4V7o=)
3: mfViMC5WzFmHy2d2V9evB-1C54M.roa (hash: AYo63SdEVlQlgz+glCe/AMcSKXW/Zi4rvSvNYshL2xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7a:9d:43:55:76:81:c1:89:f0:c5:4d:9a:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Nov 11 13:01:08 2025 GMT
Not After : Nov 12 13:01:08 2025 GMT
Subject: CN=ab0b0a4e9fa3b0b49acb79e2e421d1d1bbd5477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:d0:6f:d7:a3:0f:82:59:29:23:a2:00:98:
82:e9:da:f7:c8:8c:b9:64:61:2c:a1:06:b5:2b:4f:
f7:54:c3:a2:6c:69:68:38:8f:76:55:de:e1:be:23:
29:b9:bd:a2:dc:76:a5:26:81:b0:bf:15:2a:25:d1:
b4:83:52:0b:0f:df:6e:db:e3:48:ec:99:e1:26:2c:
14:7e:04:14:18:03:5d:21:b0:80:5f:97:d3:46:69:
b8:e8:2b:db:4d:e6:49:27:6d:8d:fa:6c:9e:98:11:
73:fb:a5:df:08:4a:b8:21:a1:0b:f0:0d:47:27:c9:
0a:05:d4:1d:da:51:e5:7d:36:e4:78:27:07:f0:e6:
44:94:af:b5:18:ce:2a:67:27:3c:dc:f6:e0:0a:66:
bf:56:0a:e3:d0:39:44:68:5e:09:f9:01:41:45:69:
9a:c2:f2:6f:05:51:f9:40:64:a8:bd:ad:e6:8e:6c:
d5:68:c8:c1:eb:2f:c8:02:d2:ed:71:ee:b8:70:f0:
a9:9a:58:8a:11:43:3f:4a:93:51:2a:9f:01:e8:74:
e1:c0:a8:5c:1a:3e:ed:f7:0c:e7:b7:11:b8:eb:95:
43:d6:8f:3b:c2:99:bb:44:ef:be:09:43:7a:87:25:
c7:fa:97:ca:1c:26:05:46:9b:12:8f:1e:8f:d4:d6:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:0A:4E:9F:A3:B0:B4:9A:CB:79:E2:E4:21:D1:D1:BB:D5:47:7B
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:bf:3c:ba:41:fa:ab:4f:30:8f:5b:d7:e7:13:6d:8e:45:
fc:02:71:6c:ec:4f:f6:af:16:6b:b4:c0:cb:f7:4f:97:36:78:
b5:2a:13:85:da:a9:21:eb:53:b1:ce:4f:35:8a:1c:24:bb:45:
b6:67:53:f3:09:74:dd:95:42:60:ba:d0:45:19:a7:19:37:5a:
40:5f:64:f6:34:2d:13:75:39:4a:a7:ee:ff:e7:23:72:3f:bc:
c7:0f:26:cc:9a:4b:f5:cc:b7:f4:82:3a:e4:dd:41:87:05:1d:
59:ed:4b:7a:7d:c6:ed:7e:da:34:88:a4:ba:10:c6:c8:39:66:
99:7d:1d:5a:80:21:ec:42:f9:7a:b9:68:2c:c4:00:e8:42:73:
61:87:27:84:78:ce:db:37:4e:10:ee:86:16:05:70:31:b4:f1:
ba:0e:cd:64:a8:cb:16:ac:9b:56:22:ac:02:fb:7b:b2:fc:19:
6f:fe:ab:35:d1:b8:a0:e8:22:a3:4f:99:8b:25:7c:2d:61:38:
ad:ef:f6:cf:d2:4e:cb:59:3b:14:9a:2f:e5:99:6f:ce:2f:44:
2b:25:5e:8f:f8:5b:16:be:1d:ef:66:4c:b4:60:b3:65:45:02:
a9:08:7a:dc:a4:ee:bc:4b:8d:de:06:30:4e:4e:ca:7d:9e:42:
9a:85:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:26 2025 by rpki-client