Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json)
Hash identifier: lsEs2UImtR3Tkie8ES9d1hTAlfWDQxuvlSiAmqgYboE=
Subject key identifier: 02:55:5C:00:D6:BF:48:90:FE:D9:1D:4E:08:B0:CF:91:FE:F2:50:49
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 019A7226219BD42F2C271C7724D66B1ABE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=)
2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: f4ycWoHEWFaI8QIxjNE3m0hIYHU0u2metuo+tKXrybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:21:9b:d4:2f:2c:27:1c:77:24:d6:6b:1a:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=02555c00d6bf4890fed91d4e08b0cf91fef25049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:20:a5:9c:fb:87:e0:e8:cc:ce:fc:c7:a6:
bd:29:ee:d8:de:65:30:60:9f:d6:02:8c:8f:ae:24:
31:c7:47:a4:94:2d:fa:18:45:b3:be:06:d6:2d:f7:
93:20:4a:f8:6e:7c:33:7d:b3:af:cc:47:83:08:93:
00:4a:e5:1f:df:f8:af:17:2a:0e:1f:2d:de:13:15:
a8:35:69:bc:49:53:79:80:56:c5:fd:87:30:39:6c:
b1:c9:7b:b3:7b:43:9c:c5:27:af:55:51:d9:82:ac:
8b:f1:8b:bb:ef:84:36:94:8a:de:d8:e3:0e:bb:cf:
93:08:86:e0:ec:39:af:1e:91:48:66:8f:0a:da:51:
e6:0d:a3:4a:16:cb:69:b7:cf:0b:a0:0f:42:0e:1d:
dd:bf:72:58:af:f5:f6:04:40:89:40:e4:84:43:b8:
48:53:7b:8b:88:e2:b5:93:93:18:bf:28:2d:64:c5:
56:c9:6b:dd:b9:5a:3b:97:99:ed:f6:7e:6d:82:64:
1d:92:f9:1f:f4:10:ee:43:91:38:93:89:90:a1:ac:
87:36:2b:d7:4b:d4:37:a3:57:cd:1e:30:38:90:89:
b9:16:78:74:d1:5d:c4:cb:b4:fd:01:68:db:d6:c4:
b8:fe:07:dc:7f:23:c3:7d:43:45:b9:07:4d:41:04:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:5C:00:D6:BF:48:90:FE:D9:1D:4E:08:B0:CF:91:FE:F2:50:49
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:10:d5:77:c0:b9:17:e9:2d:16:cc:05:69:5e:19:35:cf:b4:
48:cb:4c:a9:0f:aa:a6:9c:72:87:52:24:df:3f:ed:0d:21:ea:
7f:6a:be:cd:72:3f:59:37:a2:ce:7a:58:ad:4e:9b:ce:60:a6:
64:65:aa:07:3d:ae:79:d2:28:26:de:34:fd:1d:6a:fe:6b:72:
a4:c4:77:aa:55:1b:6a:92:d4:fb:61:7e:8b:c0:9a:4d:f9:31:
b5:c6:cf:da:4b:67:00:6e:23:2c:e9:62:48:bf:eb:0e:73:81:
e2:00:cd:b4:cd:f6:61:f1:ba:c5:12:34:c6:42:d8:e8:00:98:
bf:d7:01:0c:ed:27:26:10:78:0b:d1:f8:2d:b1:29:9b:33:98:
7f:c4:3f:0c:3d:1a:92:5b:97:1f:c9:32:b3:35:33:90:36:96:
cf:15:b2:0b:e4:22:fa:32:a4:39:fb:85:2a:52:7c:3b:3d:0c:
03:99:f6:52:2b:60:0f:26:4f:ec:65:11:87:e8:35:4b:8f:27:
dd:91:d9:a2:99:8d:c8:e8:27:c6:40:32:1d:6d:a0:69:7e:19:
3d:85:73:6d:3b:3e:ec:6e:ac:b9:3c:fe:d5:b6:cb:02:24:40:
43:68:d0:17:8d:a7:7b:20:98:a0:1c:d2:9d:c3:d3:fd:2d:78:
26:a0:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client