Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
File: fSroDN5c12nI8UTmwmYRO_rt7D4.mft (raw, json)
Hash identifier: i59DsfLehGIpgS4JI9B1xAk58Pl04lPvUK9wB6TZ/rg=
Subject key identifier: 1A:8E:5B:2D:FC:12:BB:07:A8:B9:25:12:47:C9:43:79:56:8B:94:89
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Certificate issuer: /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial: 019A71EE8DBC40C6322ED1CB45215E459902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: fSroDN5c12nI8UTmwmYRO_rt7D4.crl (hash: aneYFBQ3LZsbub73YTntl7X2/nbJUw1vNwHWN386XJc=)
2: sxNlViRMFBeyCKHK1V0sQojloaU.roa (hash: B7neqRuXw3EzuRHFQ3Xdq+BC5xmWvSgD18hq8QHGols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8d:bc:40:c6:32:2e:d1:cb:45:21:5e:45:99:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=1a8e5b2dfc12bb07a8b9251247c94379568b9489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:68:ad:8d:d5:ee:d0:5d:d8:1b:11:4a:ec:
57:0d:80:f6:3b:b6:71:3a:41:fb:e6:41:26:dc:07:
84:6d:92:62:19:dd:b9:5a:ba:25:ac:1a:9e:1d:e5:
22:c2:9c:85:4e:40:ce:38:e7:62:e1:a6:6b:f8:f5:
f9:b5:d1:78:6b:f2:0f:78:2c:89:33:23:01:c2:de:
18:a5:12:cf:fd:7c:7c:24:68:41:25:d3:a1:c6:5c:
cd:df:6e:9f:85:33:e0:8a:ba:df:b2:39:6a:76:5a:
cf:4c:01:78:ee:0e:23:f2:db:63:f0:e2:6a:b4:fd:
8a:b1:d0:3e:2b:95:ad:07:2b:a9:bb:67:ce:95:18:
fb:50:cc:6d:6c:12:f8:a4:93:60:1a:02:98:0c:e9:
f1:ec:bf:7f:2c:f0:c1:f4:93:8c:6b:49:9d:fd:c9:
99:8f:22:ec:ed:f6:b1:ed:1d:bd:1c:74:6c:f3:09:
9a:f9:2a:33:04:85:5d:42:77:e7:c0:d4:4d:52:2e:
ce:b9:3e:dd:f5:5c:9e:56:e3:e5:1f:47:58:d6:ad:
8f:bc:59:34:ed:18:6d:28:85:b9:9a:f2:9f:3b:5d:
bf:46:cc:e9:70:40:2b:b9:40:24:c4:f7:b1:d6:71:
ed:47:21:b6:b6:c1:61:e4:dc:a9:1a:56:d9:32:e9:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:5B:2D:FC:12:BB:07:A8:B9:25:12:47:C9:43:79:56:8B:94:89
X509v3 Authority Key Identifier:
keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ed:0c:a7:3c:e4:eb:dc:bc:40:5b:a0:63:5e:33:34:43:02:
3f:a6:60:73:e1:bf:f8:44:dd:49:ae:13:c0:91:f9:0d:ec:20:
ef:82:84:60:66:f6:96:8d:10:b8:85:66:7c:75:6d:dd:65:90:
3a:84:51:c3:ea:7a:e1:44:6a:a8:c5:13:2c:70:a5:14:0d:18:
51:c9:a6:d9:08:19:48:c5:b1:4c:ac:b8:e2:9e:14:60:cd:8d:
25:79:af:fa:65:50:6c:07:9b:eb:4b:27:22:55:24:bc:ac:9a:
7b:84:28:60:92:40:45:bc:cf:07:67:e3:19:5b:45:eb:dc:cd:
ea:06:da:72:ef:8a:c7:8a:2a:0a:cb:94:7a:86:c0:d0:48:91:
33:bd:4b:2e:13:19:c2:8b:3d:77:6f:3c:1b:1b:75:21:3d:53:
5b:72:e5:76:23:ab:f7:8c:3e:31:aa:66:c6:a1:79:1e:de:6a:
b5:de:91:3e:f7:0a:61:84:ac:fc:59:6b:56:42:da:3e:b0:8b:
04:5c:e6:7a:58:c6:87:e2:4d:2d:0a:a2:bb:56:6b:e3:1e:4f:
22:49:85:01:a8:10:53:5c:02:dd:47:f1:dd:78:8e:5c:49:e2:
f6:ed:09:1b:2a:81:83:2f:29:c6:34:ce:e8:a5:e3:94:ca:fb:
49:c8:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:58 2025 by rpki-client