Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier: RRaDfaAMqJ7/fZjO9U9o71Zhu6Sg0o0DQZBhwwaDAuE=
Subject key identifier: 78:E0:0B:7E:F0:7B:BE:F2:C3:D3:B9:F9:4F:6C:FA:E9:FC:9C:BF:E2
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial: 019A71B87B2FFED7B4B3F828DA5C7AF994AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: SXSb7KeWrSbkMYjoNfLCkhvHDeNWKrINuNBNppm1frw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7b:2f:fe:d7:b4:b3:f8:28:da:5c:7a:f9:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=78e00b7ef07bbef2c3d3b9f94f6cfae9fc9cbfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:77:58:f7:bd:db:f8:f8:27:1c:61:19:0b:
f9:02:4a:2f:30:e8:59:8b:c4:a8:cf:e9:4e:fa:4b:
cd:9f:6a:17:f2:0a:cf:f6:87:9a:6b:02:75:23:c2:
2b:db:7b:27:76:d4:77:52:68:ef:53:cc:a7:5c:76:
e9:7f:bf:62:e8:7c:01:3f:52:50:de:94:c7:fc:2e:
b8:0d:a6:b7:ad:c8:7d:4a:d1:c8:04:03:2e:19:d4:
2a:dc:5d:00:00:ab:4a:f4:b5:6a:b1:d4:15:89:e4:
2d:0a:7f:2e:20:43:31:64:55:16:ab:02:6d:87:29:
6e:82:b3:a2:2e:58:78:e9:5b:ef:a0:81:87:be:48:
fa:a1:c5:a1:4b:3c:a6:24:ac:dd:1b:38:11:5a:0f:
7a:7f:a4:7e:68:1b:76:ec:14:e4:d7:82:96:9b:27:
5b:83:e8:11:d7:39:86:8c:5b:78:38:ce:3e:b7:2f:
1d:5f:d0:18:c7:08:bd:fa:57:f8:58:d6:5a:e4:49:
e9:d0:db:c2:6a:3c:d7:23:85:46:1f:84:ba:b0:5f:
d0:17:27:a4:89:67:ae:43:43:08:28:e1:9b:6e:d8:
be:b0:bf:ee:ca:ab:65:f3:9e:94:0e:ce:b6:ce:9a:
8f:ff:c4:33:e0:bd:8b:1c:0c:14:7b:ef:db:5c:5a:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:0B:7E:F0:7B:BE:F2:C3:D3:B9:F9:4F:6C:FA:E9:FC:9C:BF:E2
X509v3 Authority Key Identifier:
keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:0e:7c:85:23:ac:e3:e5:0b:3f:34:b2:b9:2b:3b:b4:3b:
2a:f0:a9:51:3a:48:14:58:11:6f:84:05:26:24:0d:7c:64:31:
4e:5c:dc:5c:ab:9f:ec:a5:69:40:f3:b7:dd:b0:32:ef:d4:30:
56:57:9d:83:07:b4:74:3b:c8:b8:73:f3:15:a2:86:e8:b5:ce:
b1:ac:15:a9:7a:49:60:37:70:ef:ea:e8:40:f9:58:af:e0:d9:
8e:8b:42:ed:ac:ac:61:c6:e8:f7:b1:a9:df:c8:6a:0e:3c:90:
f6:12:a5:e4:e7:97:a8:2a:ad:af:50:b8:85:2b:dc:7e:3e:f2:
2e:48:a5:f9:f1:ba:ba:81:91:d0:89:1c:66:8e:62:0b:b2:b5:
75:82:a5:5f:eb:6c:81:a6:1f:7b:89:89:e0:9f:be:c6:b1:ed:
30:23:d1:3c:eb:ae:d8:e2:22:13:10:2e:c3:6c:c8:2e:a2:11:
1c:c8:11:c6:7a:12:3f:89:c8:41:a8:db:f6:e9:82:7c:00:3a:
0a:ac:87:99:34:27:fd:32:bb:5d:c1:ec:00:e2:ba:13:2e:01:
d8:31:20:2b:03:22:4b:ea:ef:06:28:d6:ff:2f:bd:af:3b:32:
40:4f:83:02:b5:a1:a8:27:69:51:e2:34:b3:f6:81:89:69:d5:
5d:9a:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:54 2025 by rpki-client