Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier: 7rc2m5vXcc44PQnENVOcCC+lIzuiGysejlTY/Pv89PE=
Subject key identifier: DE:A9:8C:DA:6B:6A:F0:7F:A5:BC:51:9D:03:27:B9:7A:D1:16:A3:1D
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial: 019A71B7DFE96EDC686DEA4320538CA94EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number: 07BD
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: R4uymHhNKN5Ue3BSvYAv/qeoQglHYRpQLRJRFhcyH4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:e9:6e:dc:68:6d:ea:43:20:53:8c:a9:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=dea98cda6b6af07fa5bc519d0327b97ad116a31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:12:ad:e7:6f:f9:9d:9d:4c:95:1a:1b:a6:
a3:2a:6a:0a:02:dd:ac:39:39:65:54:d9:89:cb:9b:
44:ad:6f:89:c7:8a:e7:d8:bb:ab:3c:14:36:ca:1d:
6b:25:e6:9f:6c:0c:18:a2:c1:46:58:1e:9e:f3:45:
00:a6:ff:97:dc:3e:e4:e6:31:6d:b3:b4:34:c6:5d:
bf:f4:d1:31:48:3f:5f:98:77:a3:b4:97:c7:55:70:
32:bf:b5:d1:5f:23:ad:95:87:6e:63:06:ce:77:16:
41:cf:9a:af:a6:0c:af:86:de:81:79:7f:18:e3:4c:
71:16:f3:4f:73:69:a9:b3:c3:e6:7a:c6:bc:5f:e4:
08:b8:bd:1f:9b:a0:7d:6b:4d:a5:82:d3:b7:8d:cc:
89:07:b4:c3:84:0e:c6:8b:da:97:3f:ab:f9:52:d4:
67:f6:23:a4:af:8d:34:32:77:59:9b:bd:09:fb:ff:
76:9c:25:4e:df:b1:a7:5b:cc:f5:01:25:2a:ec:e0:
2e:9a:2e:a5:45:37:c3:6c:ae:d9:95:3d:38:3e:0b:
6e:5c:d4:83:6a:cb:8a:7f:62:71:cc:21:e8:d3:90:
c8:41:de:95:99:74:72:a0:a7:06:c9:9d:64:a4:a7:
7a:f5:ad:5f:4f:f5:41:20:cb:7b:eb:47:85:74:cc:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:8C:DA:6B:6A:F0:7F:A5:BC:51:9D:03:27:B9:7A:D1:16:A3:1D
X509v3 Authority Key Identifier:
keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7b:de:84:51:db:5f:8a:5f:8e:f5:90:eb:f9:17:0a:19:92:
bb:a3:e5:97:2c:cc:f2:f7:6a:97:b7:ea:dc:52:a8:36:4d:56:
fd:0d:83:c2:fc:73:e7:64:23:ca:3e:77:e3:0c:1b:8d:14:32:
fa:64:9b:32:fd:84:c5:c2:09:6d:98:aa:fa:c8:3f:0e:0d:99:
37:5e:2e:bf:1d:f1:a3:4a:ee:a5:2b:49:64:b7:69:95:38:3c:
3e:58:a2:27:d5:54:fb:93:6c:fa:eb:6f:b5:b0:3f:27:f6:f4:
25:eb:ba:7e:40:1c:7f:f6:31:55:2d:f4:22:84:34:3e:d1:34:
b1:ce:15:20:a9:47:cf:ec:d5:67:0a:e7:15:eb:b7:5c:ac:a8:
de:b5:72:39:cb:5d:82:7d:b8:4d:60:e6:cf:ae:34:dc:4b:ff:
08:84:e4:dd:25:c0:8b:47:73:e3:31:b3:55:db:21:af:27:be:
0f:9f:ea:67:20:e0:ff:12:82:65:76:ae:4c:01:8c:6c:c3:77:
79:20:9d:d0:60:a0:2b:58:f5:43:a2:79:0f:4f:4d:9b:62:18:
02:2d:12:cd:23:d6:de:ba:2c:e1:cd:98:04:85:e4:b6:de:d2:
ee:e9:d3:21:35:ab:6f:4b:81:b3:8f:0f:34:16:c8:a4:21:90:
64:da:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:32 2025 by rpki-client