Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier: PgS91uVHyxcXKNwq4c/5Gkb5cFlPt4hUTSvnOXy/h38=
Subject key identifier: 3A:A4:B6:96:C5:D3:59:8E:3B:F3:42:B9:4E:42:02:4D:DE:FE:88:C5
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial: 019A361056EC5908F87DC126C5389F58F5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number: 054B
Signing time: Thu 30 Oct 2025 17:00:31 +0000
Manifest this update: Thu 30 Oct 2025 17:00:31 +0000
Manifest next update: Fri 31 Oct 2025 17:00:31 +0000
Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: vJAutPshJGT4kBsNLD31ILLhJJopFoluT8zzy1JKOTw=)
2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:10:56:ec:59:08:f8:7d:c1:26:c5:38:9f:58:f5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Validity
Not Before: Oct 30 17:00:31 2025 GMT
Not After : Oct 31 17:00:31 2025 GMT
Subject: CN=3aa4b696c5d3598e3bf342b94e42024ddefe88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:c4:a3:1a:47:f9:c0:6f:19:46:3d:e9:8f:
d8:f0:e4:8b:38:5b:83:2f:cd:87:4a:b7:19:f9:d3:
29:3f:01:e6:d0:52:24:d6:80:da:fa:00:a2:2d:ff:
c7:fc:2f:52:bb:92:96:f1:2e:0c:0a:96:23:6c:d2:
35:4f:3c:39:12:f5:e6:d5:9c:65:d1:65:61:df:35:
f5:63:56:86:12:94:3e:49:bf:08:c9:6a:19:ed:f0:
b0:6f:55:0f:a5:74:1f:be:e9:6c:c0:46:5c:d6:00:
b1:90:3b:0c:d1:bb:a7:01:d7:b8:98:ec:9a:a3:a7:
7d:d3:13:a9:c9:94:88:b5:73:df:c2:a0:f2:30:ce:
79:19:15:5a:03:eb:6e:04:f3:fe:15:84:7c:b9:c0:
70:d1:48:59:07:8e:bc:2b:7f:d0:47:f7:67:6b:e5:
b9:15:d2:b5:b8:b1:dc:ea:59:ad:02:2a:88:d8:23:
dc:f6:c8:d7:d3:9a:37:7b:3a:60:5d:7e:e0:7f:7c:
a8:7b:bc:ea:00:15:59:df:21:f7:85:6c:b5:59:76:
c0:1a:34:ed:31:4f:cd:a2:e5:8f:b5:71:cd:26:c9:
37:ee:16:3d:16:fa:1a:40:68:79:7b:05:5b:5d:65:
9c:d5:09:e6:1c:cd:5f:7a:36:95:ae:56:05:9e:7d:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:B6:96:C5:D3:59:8E:3B:F3:42:B9:4E:42:02:4D:DE:FE:88:C5
X509v3 Authority Key Identifier:
keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:e8:91:8e:0c:8e:7d:8b:6d:1e:53:e3:68:86:70:73:93:
5d:1e:8b:0f:df:e2:b6:3f:17:68:9d:5a:c5:b0:b5:51:03:43:
11:73:ee:b3:98:57:ce:e5:a4:66:6a:16:65:c1:fd:26:72:a2:
6f:d0:9e:5c:e3:ac:cf:8f:1f:6a:41:44:ec:4e:f7:e1:82:b2:
ed:f1:a7:a2:7d:28:74:21:29:7f:8f:c2:fe:78:32:ff:94:7f:
1d:57:f2:eb:53:b3:77:74:01:b9:4a:ce:c7:e4:4f:df:8d:a0:
4f:b2:39:b8:8f:2a:cb:ba:65:8b:26:81:1c:fb:6d:9c:6b:39:
6a:ba:0e:4f:f9:14:b4:d1:54:8f:47:50:59:b8:65:0e:74:6f:
25:3e:ad:4b:36:10:ef:68:d9:8f:b6:38:e1:04:28:3a:ff:20:
bc:3d:79:18:93:51:f2:6d:c4:b4:95:75:97:19:ce:6c:b9:4c:
e4:91:37:ea:d1:7a:68:cd:a9:e3:77:a8:59:f6:36:29:a2:3b:
c0:cb:3e:3f:3e:5d:f3:a0:ff:cd:23:1e:14:d8:53:fe:51:3d:
7f:7c:c1:c6:68:3b:e5:7a:49:d9:36:28:f5:33:be:43:49:e1:
ed:dc:fb:6c:01:d0:f3:f8:1a:22:0c:f8:50:8e:8b:28:1b:6a:
0c:d3:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:38:54 2025 by rpki-client