Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier: ZckRHJiI2V8nRc/xfRVcJpmRySJ2KffjG8s9UexRstQ=
Subject key identifier: 31:D1:1F:F1:B2:E3:23:51:C0:50:12:25:3C:AE:16:25:95:C4:6D:62
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial: 019A4EF42A694205AB56D1BD6ABD27BD8D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number: 053F
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: GETR8fDyhgXPT6Ifem2RAoezZAxKFixXA6rU+1zoskM=)
2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2a:69:42:05:ab:56:d1:bd:6a:bd:27:bd:8d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=31d11ff1b2e32351c05012253cae162595c46d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:7d:7e:1c:2b:cf:b6:5a:1d:68:c0:8e:02:
46:98:6b:f3:89:8c:7a:94:f5:82:b0:a9:68:4c:52:
db:41:4b:ed:02:cd:1e:f7:73:9d:e8:44:be:0b:21:
30:c2:8e:d6:a7:09:c5:de:93:b6:14:74:5a:70:9a:
d4:d6:9d:52:42:8a:58:79:86:67:65:32:36:f0:8f:
3b:9a:d7:d3:fe:19:d4:fd:4a:d0:02:7e:c2:44:c5:
f1:ff:fe:03:90:3b:ec:59:56:55:a9:c4:f8:9e:6a:
db:22:f4:7a:e4:cf:1d:b4:53:87:85:90:9d:af:3e:
81:54:df:aa:07:c2:b5:44:db:19:cb:70:42:a3:5d:
82:2f:9b:1b:7f:99:2b:4a:5b:1d:a9:0a:a0:fa:de:
19:3c:d5:1d:48:84:c6:ad:69:a6:35:e4:37:a5:79:
8b:6c:79:ae:da:58:0b:e5:00:c8:d5:7f:56:25:7e:
3e:6b:50:22:63:97:33:f4:c1:73:e7:cd:15:b3:47:
a5:ea:57:68:1a:ac:76:be:d8:04:d9:ff:f7:f8:94:
83:0f:e2:25:73:36:28:84:78:48:f4:3e:f1:ea:79:
f7:73:2c:85:6d:c7:f6:f8:38:e5:1d:10:df:92:a0:
b1:0b:73:6b:0e:03:e6:58:43:65:04:df:71:e7:65:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:1F:F1:B2:E3:23:51:C0:50:12:25:3C:AE:16:25:95:C4:6D:62
X509v3 Authority Key Identifier:
keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:d2:fb:c7:77:a7:09:ce:be:dc:7a:da:d9:f3:3d:9a:28:
ad:50:38:66:08:55:07:e9:e3:03:50:ea:84:4e:cd:8c:82:98:
65:33:2e:3b:1f:a5:1c:dc:dd:11:bd:60:9d:18:40:52:4a:1c:
2f:7d:e3:6d:e8:76:73:83:c7:a6:8e:47:0a:f8:91:00:40:5d:
af:18:9a:68:d9:63:6e:11:01:df:ea:9d:0f:cc:b8:aa:c8:1a:
ca:49:1e:06:71:61:08:ca:29:3f:87:fe:ec:db:0a:5a:2a:aa:
84:75:1f:75:ef:98:6a:30:17:25:78:1e:67:e0:f8:8a:02:3d:
aa:31:b6:6f:b9:79:ef:54:e3:4c:cc:80:8a:0f:b7:ea:bf:46:
36:71:ec:74:10:e4:ee:a1:93:15:15:5d:cc:c9:2d:34:7a:44:
95:ec:8e:2a:cc:09:66:7f:be:08:41:7e:fe:5b:70:1e:97:70:
55:d8:1f:2a:7e:06:2d:48:4d:ce:81:dd:d0:79:b2:05:2c:0e:
5d:ff:b1:95:ed:95:24:85:b8:59:4d:c0:06:b3:c7:79:43:74:
40:c3:63:78:3a:a7:66:01:c8:be:c0:82:86:4b:a1:a5:77:d3:
d0:72:e1:3b:9a:04:20:ac:59:7d:a3:df:fa:38:8d:14:ae:d2:
d9:5d:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:00 2025 by rpki-client