Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json)
Hash identifier: 5Be38bIb33o3vM8kNYdoc47tTOQCQqQeDo5xw728ahA=
Subject key identifier: 79:7F:DA:F0:60:A8:A6:C6:08:6C:3A:D5:9E:E2:3B:39:A6:4A:2A:E8
Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Certificate serial: 019A4EF5D649160F6C4D90FCDF4520124329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
Manifest number: 08DA
Signing time: Tue 04 Nov 2025 13:02:05 +0000
Manifest this update: Tue 04 Nov 2025 13:02:05 +0000
Manifest next update: Wed 05 Nov 2025 13:02:05 +0000
Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: cIbLMCtldCzszegUbBA2M/7/kOiHjkdd1UGMQ9X+vf0=)
2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d6:49:16:0f:6c:4d:90:fc:df:45:20:12:43:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab
Validity
Not Before: Nov 4 13:02:05 2025 GMT
Not After : Nov 5 13:02:05 2025 GMT
Subject: CN=797fdaf060a8a6c6086c3ad59ee23b39a64a2ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:37:f4:8a:ae:eb:f8:18:ac:06:21:63:73:
66:ac:85:d9:53:f0:d6:3f:ec:98:d6:9b:58:1b:fb:
0b:85:c0:9e:7e:5e:6d:7a:f8:01:fa:68:a5:7e:21:
8d:08:28:db:df:37:3d:1e:19:d4:bd:aa:d3:17:6b:
22:d0:0a:3c:8e:4a:de:84:2a:a7:26:59:a4:87:5c:
44:67:33:71:44:2c:6e:b6:02:b0:2f:3b:29:76:0e:
d4:26:36:fb:62:6b:60:43:55:54:98:3c:93:b0:ea:
c8:19:90:12:a5:ae:0a:16:62:02:56:23:4f:2f:80:
d8:f7:2f:be:a8:86:60:85:6c:01:00:3d:16:5c:ea:
cf:6b:22:aa:ff:d1:d0:ae:e5:f4:61:3f:6a:33:1c:
1c:45:72:96:61:ae:02:27:a6:0b:c5:bf:53:17:c8:
b8:99:9d:fa:0f:d5:a1:81:c8:95:11:ff:f8:aa:ef:
4b:f2:06:b5:0b:0d:db:41:e3:48:ef:f0:53:56:40:
13:0a:3d:1f:fc:4e:ca:47:ef:bf:17:2e:e7:b4:46:
e2:14:4e:02:a9:63:ca:48:db:cc:43:3c:d6:11:26:
22:5a:22:00:01:c8:9d:65:a2:f3:0e:c0:2e:6b:46:
b8:45:53:7f:21:e8:82:6c:93:f0:c3:1e:c0:e2:fd:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:DA:F0:60:A8:A6:C6:08:6C:3A:D5:9E:E2:3B:39:A6:4A:2A:E8
X509v3 Authority Key Identifier:
keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:10:d5:29:e3:ef:50:94:3e:94:1a:05:6b:8a:56:5c:f8:69:
e8:2e:73:6b:02:83:be:4e:0e:f2:26:e8:4e:66:20:d4:67:50:
15:fa:98:f3:ce:50:fa:9c:09:f8:dd:39:f4:da:17:aa:ca:4f:
de:d0:04:5a:d3:c1:2d:a0:fa:04:29:56:a6:43:94:1b:6b:88:
24:c4:08:1c:31:20:58:06:b2:ef:c5:f1:35:4f:b2:6a:c4:e1:
e0:6f:00:1e:06:95:2a:ff:de:28:34:f7:91:31:18:2b:ba:99:
35:32:f2:ec:f4:24:49:01:11:61:84:fe:a2:bc:7c:f1:07:06:
64:87:b3:34:5b:3b:5a:ad:6c:ab:1b:37:df:19:67:7a:8d:56:
2f:78:cb:18:2f:d3:0b:39:2c:cd:be:9b:53:26:ae:d0:35:1d:
b3:34:46:84:55:af:70:de:ee:31:19:e9:a3:4e:45:52:55:d9:
fb:d3:0b:75:c0:27:ce:31:13:27:8b:ec:f4:ac:77:e5:2b:c7:
7c:a1:69:fb:79:0c:0b:ec:82:b2:1b:b8:a5:10:b8:f2:bd:7c:
0f:07:7d:5f:a2:0c:68:ff:f3:33:34:26:fe:58:d5:65:06:b7:
b7:7b:40:78:90:6d:48:b5:b7:cb:81:0d:7b:74:bf:0b:21:c7:
b0:0d:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:46 2025 by rpki-client