Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier: 8x8whN9j7gR4K6+X1Q4v5E/KDAhCN7pljqWASghgDy4=
Subject key identifier: F5:43:84:D6:1D:6E:D8:E2:81:C5:0F:48:94:73:D8:EF:5C:9C:A9:0C
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 019A52D130A0F88F1D69BBFA7F003F6B16EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number: 0B35
Signing time: Wed 05 Nov 2025 07:00:32 +0000
Manifest this update: Wed 05 Nov 2025 07:00:32 +0000
Manifest next update: Thu 06 Nov 2025 07:00:32 +0000
Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: sYGKaEkY6rjGCfizxVEkLbcjKxYQag36L2yDWFusaTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:30:a0:f8:8f:1d:69:bb:fa:7f:00:3f:6b:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Nov 5 07:00:32 2025 GMT
Not After : Nov 6 07:00:32 2025 GMT
Subject: CN=f54384d61d6ed8e281c50f489473d8ef5c9ca90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:94:01:cb:46:ef:6a:52:93:de:7f:f2:9d:
ff:86:69:f5:17:e2:5e:ec:6d:49:da:56:d5:de:a1:
7e:be:62:a3:b6:a4:d3:c3:30:03:40:43:e3:f4:1b:
82:fd:ad:2f:aa:8f:dd:97:22:fa:60:6c:88:21:d0:
e8:fe:62:af:40:75:5f:dc:9c:00:51:40:9f:ab:e9:
f8:4d:c7:70:6f:2a:6a:d8:0c:c3:b1:8e:c0:49:50:
fd:9e:d4:74:4d:23:eb:26:07:fb:30:72:02:c4:f9:
c0:7f:10:8e:69:64:46:b0:1a:1c:b3:17:fb:99:02:
49:c2:98:26:8b:c2:6e:e3:c8:5d:c2:19:00:84:b8:
20:05:63:5b:b1:34:ee:0e:42:a3:04:c1:33:26:f8:
fb:c2:02:ff:a9:25:b4:b9:04:a9:08:df:2f:0e:c0:
f3:38:27:35:f8:a9:b7:23:df:87:f4:ad:1c:f4:d4:
50:91:e6:4d:01:5c:1a:65:f7:b0:af:5e:a6:92:74:
a6:c8:a5:31:f9:d3:70:63:be:c1:af:70:90:3e:c9:
2e:6d:9d:50:cc:a1:b2:14:75:b4:f2:29:c1:da:cc:
a5:93:03:16:9d:bd:ca:6f:c2:79:6b:b2:d5:86:26:
53:cc:6f:57:27:7b:f9:97:75:16:01:be:01:49:19:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:84:D6:1D:6E:D8:E2:81:C5:0F:48:94:73:D8:EF:5C:9C:A9:0C
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:7e:75:3d:69:83:67:b2:8d:e1:14:9c:d7:26:72:1e:7d:
66:f1:28:71:21:48:d7:f4:f4:e3:2d:c7:b7:2a:c1:60:68:4f:
5a:80:00:90:ec:74:63:60:cb:09:85:5e:d3:35:ca:52:b9:1e:
c4:ce:6b:fd:13:c9:64:fb:10:e8:26:90:f8:ad:29:4f:e4:a8:
a1:55:fb:f6:42:44:bf:df:0c:bf:4c:5c:0b:14:8c:6e:c5:f9:
b3:c5:47:8b:ed:d5:20:35:f0:2e:f8:ae:74:73:e2:7a:fa:1d:
69:d8:64:e5:02:7a:d1:f9:f3:1e:ce:a3:24:c3:28:fc:05:fc:
52:a2:0c:f2:65:29:36:84:02:ae:f5:73:be:5e:60:a1:92:3e:
e3:b9:59:43:df:60:2f:76:4d:2d:84:5e:06:a2:99:8b:be:c9:
50:ae:27:79:f4:68:36:05:2a:d9:57:1a:f0:98:ad:bd:3d:fe:
27:97:41:9e:bf:ea:30:74:6d:44:ed:14:a4:5c:35:4f:4a:cb:
67:55:2a:d7:cf:2b:d6:7e:70:67:15:d6:e9:a1:59:a5:5a:5c:
ba:93:f2:74:02:8d:6d:8f:8f:c8:cd:37:ff:70:14:da:50:4b:
d0:be:ba:7d:82:41:44:1c:59:97:a0:a4:34:24:b3:e6:77:ce:
e1:7f:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:51:59 2025 by rpki-client