Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: UxofWqVajz30QdU8h/VQUh4BQIXz6OukFLh4C+Lwjwg=
Subject key identifier: 3B:F1:28:DB:0D:8D:E2:04:12:BD:54:7D:0A:7F:8B:AB:63:ED:4F:2C
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019A71B96D2C9952F9A6562A35D3DC7CEB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:48 +0000
Manifest this update: Tue 11 Nov 2025 07:02:48 +0000
Manifest next update: Wed 12 Nov 2025 07:02:48 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: YuO2KqxvfpQQT02/CSFvSlmgz4iLbdc2xaaebc/ym6A=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:6d:2c:99:52:f9:a6:56:2a:35:d3:dc:7c:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Nov 11 07:02:48 2025 GMT
Not After : Nov 12 07:02:48 2025 GMT
Subject: CN=3bf128db0d8de20412bd547d0a7f8bab63ed4f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:5f:87:38:fb:33:80:e8:a9:b9:b3:f8:45:
3b:c7:d1:be:02:9a:47:f4:5f:45:06:d1:00:00:3d:
97:35:14:ba:c9:6d:31:ce:3b:d1:2d:6a:01:55:80:
b3:87:c2:6a:42:42:43:b6:c4:8c:8f:97:47:28:eb:
08:cc:fe:77:74:2e:31:0a:98:69:32:0f:76:fa:55:
3d:b9:c2:a6:51:7c:44:b0:88:d8:f4:3f:87:08:54:
ef:2c:1e:16:bd:76:49:e5:9a:aa:1c:31:27:53:45:
1c:27:dd:78:9e:11:a8:a4:2d:d0:35:a6:95:ce:2e:
b7:d3:b5:cc:09:fe:46:62:09:97:79:a9:83:37:90:
27:12:78:8c:44:30:17:9c:ad:2d:d7:37:08:90:b1:
1f:44:cc:6f:51:2b:91:30:fd:74:62:00:7f:9e:85:
f9:b6:ee:d6:c0:54:61:d1:75:7e:6d:05:74:e3:2d:
d6:ca:b6:33:f5:32:11:f5:02:11:ce:72:5b:30:f5:
4c:67:ae:48:4b:fc:02:77:ad:85:e1:09:d6:10:19:
18:cb:64:b2:91:7f:c1:70:55:3a:29:f9:64:d2:ae:
3b:ae:e3:16:7b:73:64:44:8e:2a:07:db:7b:1e:26:
23:93:c0:54:a6:40:e3:30:1d:5f:69:89:4f:75:2d:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:28:DB:0D:8D:E2:04:12:BD:54:7D:0A:7F:8B:AB:63:ED:4F:2C
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:8e:9a:9a:0c:c0:52:49:4b:45:82:c6:6f:e9:d1:80:c1:
1c:a2:6c:6b:3c:fa:b6:d6:f5:26:96:b4:88:db:5c:b8:3b:8e:
4f:b9:e0:78:5e:d7:e4:a5:b4:25:68:8d:df:a1:98:ee:bd:e9:
5b:92:1c:14:a4:8b:35:11:26:b4:55:ac:5d:87:53:af:44:f5:
b5:0d:d5:a5:32:03:9d:ae:3a:da:51:2d:92:c8:28:3e:c6:a5:
34:f6:dc:89:66:85:ac:cf:c2:7f:9c:5e:0a:ee:63:50:82:3c:
c5:35:d4:3e:dd:f0:24:fe:88:8b:2b:eb:8b:51:2e:d0:8a:ea:
f2:bc:be:15:cd:86:37:fe:86:e4:5c:92:ae:a0:15:0f:f9:13:
cb:cd:41:60:b5:a9:56:34:b9:19:b5:2f:ac:b4:92:2c:e4:dd:
31:07:23:14:65:62:cf:c1:c8:10:33:d8:2d:13:38:6c:41:40:
ae:0d:81:4e:99:fd:1d:db:54:01:f9:2d:e9:c5:1f:00:fc:34:
dd:8e:71:e5:87:6c:36:70:7c:45:0a:63:f2:e9:5e:ba:bb:b6:
c7:fa:5b:98:65:1f:1d:c8:2e:49:49:52:6b:c0:ff:e9:f2:55:
73:6f:3e:08:f9:7a:02:c7:5d:f8:1d:f8:90:5a:56:b2:e1:77:
a1:7e:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:45 2025 by rpki-client