Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier: 5KYJOjkPO4BUofu1BvbE/GAmhv79OYXqptVVyGPavsE=
Subject key identifier: DC:A5:28:4E:59:21:44:CE:A2:D3:D2:0F:3B:B8:5D:53:AD:6B:8D:C3
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 019A714A22499ECCAF51E3DE8F4D97B3C0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number: 0B9C
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: rUcVuwaaVrjZWPd7E9cOze5YcaxUK3BBjtBYlr5wR+4=)
2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:22:49:9e:cc:af:51:e3:de:8f:4d:97:b3:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=dca5284e592144cea2d3d20f3bb85d53ad6b8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:07:22:ba:43:7b:d4:8f:bd:02:6e:6e:87:
b0:ca:0a:a8:97:6d:29:8a:1b:d7:b5:3e:63:25:6f:
9c:cd:b7:da:b6:38:a8:e4:af:06:6e:5b:ed:7c:5b:
75:6e:70:a6:b8:ba:17:62:09:1d:1c:2b:da:7f:df:
51:cf:61:d0:c0:f1:38:5e:39:d6:78:1b:62:d0:2c:
bb:0c:b0:0f:24:f2:8f:40:63:33:74:2a:41:2e:60:
4c:68:e9:b9:1d:a2:f2:48:e0:00:ae:76:27:68:10:
4b:73:38:60:5a:d9:9b:6f:93:89:8e:76:a9:cb:47:
ac:9c:15:26:f8:36:2d:87:84:ff:63:f8:e3:ef:f9:
d2:fa:fd:55:04:bb:36:cf:78:c2:d2:62:26:64:a3:
20:72:6c:39:87:d6:85:54:0c:03:8c:74:05:1d:2e:
f6:fc:a2:0c:fd:c4:c4:1f:5b:11:96:e3:51:f3:12:
75:0a:4a:61:75:4e:bd:68:26:98:38:3d:97:41:6e:
6f:51:69:7a:ff:9b:16:30:39:50:90:fa:a7:90:51:
bc:a7:c8:59:7d:11:fd:01:98:55:3b:48:6a:1c:c5:
09:4a:2f:4e:c6:6d:5a:22:0e:b9:63:75:38:c1:f6:
33:66:00:7b:37:96:58:1b:4a:6a:f1:09:1d:3d:0a:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:28:4E:59:21:44:CE:A2:D3:D2:0F:3B:B8:5D:53:AD:6B:8D:C3
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6a:e2:b3:dc:f7:77:53:dd:5b:6b:37:84:f4:89:bc:af:7a:
e6:15:be:79:68:4e:89:f2:42:12:80:b1:a4:df:b6:48:62:71:
e1:15:ad:8f:e7:61:c9:3e:97:c8:6f:11:97:8e:19:ca:39:4d:
ff:b2:c0:54:36:4b:03:b8:42:59:c0:9b:9b:f4:22:92:44:3a:
ed:76:55:0d:56:11:0f:9f:cf:02:25:99:3e:af:e6:4a:08:4a:
51:4e:6a:c0:7e:bd:34:ac:50:4b:d1:2c:34:67:09:d9:0d:4a:
fa:f5:4a:01:e1:2c:45:31:5f:03:2c:c6:73:d0:ce:10:8a:63:
74:f1:d4:dc:15:43:9b:36:8e:14:2b:20:34:64:b6:13:76:38:
a8:4c:31:ae:d6:a5:f3:d1:40:97:0c:b8:5f:f9:23:9b:00:fb:
f3:9c:00:4e:13:0a:57:d4:df:52:e6:95:02:44:de:50:bd:a5:
3a:d5:40:c2:38:c1:e7:1a:e8:a2:3a:e6:52:1f:ab:62:01:6a:
ca:65:9a:a5:a4:44:8a:8d:8b:ce:21:6c:c9:39:73:61:78:31:
19:0d:41:cc:14:ed:b9:78:c3:b4:11:07:4b:68:96:8b:d0:2a:
41:ca:90:5c:8f:37:f4:3b:b6:3b:80:e3:8e:43:f4:22:9b:03:
7f:95:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:11 2025 by rpki-client