Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: F8FshqNblhRX6Y3tXmThn2lt96Bbmsklt2JWCWeJb/8=
Subject key identifier: 23:5A:3A:F4:17:D6:7C:65:6A:37:3B:93:FA:A7:72:ED:9B:0C:A5:49
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019A71B788DB7E85FAD14A96DCFC2AF7F1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 1731
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: 5gJqSd9paDQe+LtBImVUOqypFh5QmLn6cqXRlhxH2/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:88:db:7e:85:fa:d1:4a:96:dc:fc:2a:f7:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=235a3af417d67c656a373b93faa772ed9b0ca549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:02:39:7b:91:c0:b8:78:29:f0:f1:a5:13:
e9:5e:2d:15:65:b1:04:52:5f:cd:32:db:1a:d9:43:
4c:8c:13:ff:dd:36:01:8f:d0:14:f4:f7:54:6a:a6:
14:00:91:dd:4b:41:8a:4b:59:e4:e6:07:0c:6a:73:
b9:b9:8e:28:d7:92:50:5d:1d:0a:fd:98:5e:9d:7d:
ab:47:33:1c:ba:70:c9:ef:94:89:37:c5:c2:88:ec:
b5:2e:54:18:dd:7b:46:ee:8c:47:87:cf:31:a7:7c:
db:9a:3a:0c:e5:fa:15:21:86:b8:45:30:92:fa:b7:
8f:e2:c1:4a:76:fe:e3:7c:4a:bf:6e:26:d8:48:91:
04:b1:de:6c:cd:d8:4a:9b:68:18:54:c3:b8:c2:89:
87:a2:c2:4e:3f:e0:72:e9:f0:37:65:9e:4b:e1:8e:
2a:13:1f:54:d0:d3:d2:59:65:4f:5b:26:fb:97:75:
cc:f9:be:03:3f:2c:e6:0c:b8:fa:e6:f5:a3:e5:16:
aa:3c:d0:f1:54:a3:72:fa:90:f9:d3:0e:bd:33:a9:
5d:f8:ba:b9:ad:7a:e4:79:e1:fc:20:8b:43:08:f1:
d9:b5:3d:14:85:e5:1d:92:11:58:cb:a2:f9:72:a0:
ed:13:49:51:90:b1:0c:6e:55:aa:5b:ed:65:2a:94:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:3A:F4:17:D6:7C:65:6A:37:3B:93:FA:A7:72:ED:9B:0C:A5:49
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fc:ca:6c:3f:59:60:95:cc:5f:5a:cf:ff:d2:69:85:f8:4b:
fa:13:3c:8c:60:eb:a9:62:08:88:f3:25:4c:3c:0f:42:83:69:
8e:3d:ba:84:0b:3b:3f:ed:fd:d1:8f:5e:67:d8:44:e4:89:b9:
5e:1a:e7:84:e1:9f:01:de:3a:3e:62:6b:1d:03:4e:4f:56:1d:
d9:b2:8b:75:eb:01:9f:7f:cb:32:f2:06:3b:23:d9:53:4e:55:
1a:f2:6a:f6:5b:22:ff:ca:b2:61:24:e8:06:52:d2:cd:3f:a8:
bc:9b:3d:de:09:77:be:9d:16:27:40:b0:c3:ee:a2:22:40:b8:
1c:b6:93:5a:89:23:de:1b:35:30:97:f7:ee:76:f4:45:7d:83:
54:ec:9b:e2:37:48:4a:26:0c:54:f2:bf:2c:8e:63:74:56:26:
cd:da:1c:50:85:93:fe:be:58:b1:93:df:57:de:40:3f:3a:b7:
cc:61:a5:dd:f9:45:95:3b:13:ee:ae:82:03:94:87:be:5a:de:
81:74:8c:d3:0e:de:92:04:a4:63:d1:11:d9:de:16:53:f6:76:
53:d0:96:ea:21:ad:a8:80:e3:cf:84:e5:28:7c:44:79:3e:24:
db:33:fa:82:30:85:b0:95:6a:2d:61:57:70:5a:76:26:98:0f:
e7:b8:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:24 2025 by rpki-client