Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: aHcaLI2bi+SPCVRq9yJrnkjRR/SOdTWff8naNffLlWM=
Subject key identifier: CC:E7:64:94:F2:96:00:C2:A5:D5:E9:60:F0:10:A4:C7:99:5E:E8:4F
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019A5151222C3DFAC31C0CD5177250EE8E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 01D1
Signing time: Wed 05 Nov 2025 00:01:02 +0000
Manifest this update: Wed 05 Nov 2025 00:01:02 +0000
Manifest next update: Thu 06 Nov 2025 00:01:02 +0000
Files and hashes: 1: 5lQnFnU-84I8pBL0bmtu_5E7JBE.roa (hash: choN2tt2VLbw64yYa4mcGxM9D/1eWfgY0Zlzr2QBz8I=)
2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: bdb/5zglS6X2K183J2D3CAXeLCECIuaANe9iDL1s6jE=)
3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:22:2c:3d:fa:c3:1c:0c:d5:17:72:50:ee:8e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Nov 5 00:01:02 2025 GMT
Not After : Nov 6 00:01:02 2025 GMT
Subject: CN=cce76494f29600c2a5d5e960f010a4c7995ee84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:38:e0:e9:d7:75:3f:22:45:e9:3b:f4:e5:
eb:5d:fa:8c:2a:b5:4b:be:12:11:d8:6a:7f:7e:a6:
9d:74:dd:13:be:a9:de:9d:c4:8e:93:eb:93:2d:6b:
41:e7:e3:18:c7:68:26:ca:f0:8b:cf:8a:c9:3f:87:
c2:a0:df:35:29:6a:9d:a2:3a:38:3e:c6:61:bc:36:
1d:f5:60:8d:b4:86:72:e5:e2:c2:9a:bb:18:eb:49:
fd:64:77:83:2c:aa:fc:8c:b1:93:36:2f:c2:b6:18:
61:ac:98:b8:ef:36:50:eb:21:ce:31:43:58:db:c4:
e8:29:fa:a9:80:d9:e7:b0:7d:7a:e6:11:87:ce:3d:
f5:3d:ec:04:61:65:a5:27:ae:38:63:59:f2:c0:ce:
b4:03:55:58:e8:28:47:fe:3c:5d:51:fb:90:cf:f2:
90:24:eb:61:9b:f9:4d:78:d0:7e:11:46:8e:ab:26:
57:df:28:9e:a5:95:1b:76:5a:95:a4:cc:3e:ce:dc:
d0:0e:ca:6f:db:b8:df:65:82:2e:18:be:53:f6:5c:
80:2c:fa:91:e0:b6:af:51:d2:41:64:00:12:78:6b:
00:96:17:8c:f3:13:b5:59:9c:a8:fe:19:5d:bc:1b:
dc:69:51:33:05:a5:78:45:09:6d:b3:33:42:94:39:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E7:64:94:F2:96:00:C2:A5:D5:E9:60:F0:10:A4:C7:99:5E:E8:4F
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:a8:96:05:d5:a8:a3:6d:25:8a:4e:ba:21:88:fb:55:77:
39:f4:4b:c7:d4:2c:23:d0:f3:ef:0f:05:64:dc:02:21:02:d4:
ef:e4:63:3b:7e:07:88:62:91:f7:e6:76:5e:40:aa:6e:18:fc:
f8:cd:5f:44:14:d9:46:22:ba:92:0c:58:63:ff:65:4b:62:90:
ac:46:cb:39:a5:b7:60:c3:d9:6f:c6:3b:ef:34:67:9e:71:81:
61:d8:aa:59:83:df:89:c8:45:ca:f0:53:bd:d9:29:a4:a4:25:
cf:14:48:9c:d0:08:eb:56:ee:9f:9a:ae:9a:89:70:87:4f:40:
08:e7:7c:76:c7:2b:d7:5f:0d:02:eb:f5:ff:dc:ef:1e:e0:49:
dc:e5:ae:86:77:9e:03:5a:5a:24:71:71:29:30:7e:59:68:a3:
05:9f:6e:cc:57:1e:51:45:a3:aa:1b:43:79:db:c9:5d:fa:c8:
f9:8e:35:8a:f3:ae:9f:22:f7:d8:0b:57:76:c6:39:fe:e4:8d:
d7:d2:c2:20:32:ca:bf:ef:ea:4b:46:45:b2:5b:a0:dd:c7:55:
59:f4:9f:60:0d:eb:dc:55:24:90:94:d5:4f:bc:4f:b0:ac:d5:
b4:da:62:60:a4:16:68:b9:22:4a:10:ea:05:10:41:2e:5e:f2:
c3:54:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:57:29 2025 by rpki-client