Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: UFJnkRoT8Daeppf81gzxY2/jfSM9IecLL67gtb4r/+k=
Subject key identifier: 88:71:B0:C4:19:6A:80:C1:53:49:AE:57:7E:59:25:71:B2:E2:C1:44
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019A515105C56C793569B2D8A6EDAAB66932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 100E
Signing time: Wed 05 Nov 2025 00:00:55 +0000
Manifest this update: Wed 05 Nov 2025 00:00:55 +0000
Manifest next update: Thu 06 Nov 2025 00:00:55 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: q82hfUP7KrlVqxwMRbZT40af19uJIDgcWnXfOlv944M=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:05:c5:6c:79:35:69:b2:d8:a6:ed:aa:b6:69:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Nov 5 00:00:55 2025 GMT
Not After : Nov 6 00:00:55 2025 GMT
Subject: CN=8871b0c4196a80c15349ae577e592571b2e2c144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:4f:67:27:18:49:fb:dc:af:dc:67:d9:54:
80:e8:75:a1:c2:39:8f:85:b9:85:35:ff:11:86:31:
eb:9c:ea:00:37:a7:7a:35:f6:43:e5:0c:62:b9:6b:
3e:f4:af:37:7f:2d:4b:ea:31:1a:36:ce:bb:1a:43:
c8:11:5b:d6:90:3f:be:4c:cd:19:4a:dd:1f:68:04:
30:e9:74:eb:1f:53:b7:6a:d5:99:cf:86:3f:e3:92:
1b:26:21:00:10:3b:77:1b:6d:f1:f2:e5:6e:e7:f0:
3f:48:be:11:21:84:59:4a:36:6d:7f:c8:cc:6e:73:
1c:3e:ee:87:86:2f:80:17:3a:37:31:63:09:75:07:
01:3a:1d:fc:6b:22:28:19:07:bb:c1:04:6c:fd:b7:
51:af:7a:95:11:c9:58:1b:1d:02:c6:4e:5b:86:4c:
ab:46:33:f1:4e:d4:19:d3:32:25:b8:0a:5f:ac:df:
1e:32:b3:af:78:22:47:ea:d1:22:a3:1b:00:b8:43:
cb:8c:6c:5a:66:2c:bc:6c:5e:0d:67:bb:d6:77:2f:
03:27:54:28:35:9b:a2:b4:0b:8a:58:95:5b:6e:61:
b6:73:1d:5e:c8:52:c8:82:8c:90:e5:af:7e:55:f8:
c0:87:7e:96:df:06:62:69:1f:c3:fa:56:5d:f6:56:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:B0:C4:19:6A:80:C1:53:49:AE:57:7E:59:25:71:B2:E2:C1:44
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:43:30:83:44:b8:d4:69:1e:7c:6a:97:2b:1a:ea:c7:6c:
41:35:92:31:31:9f:e0:33:88:73:5a:56:6c:b8:11:18:68:b4:
94:06:66:89:31:41:75:67:7f:5e:b3:1a:27:14:00:59:9a:bc:
74:2c:98:74:47:6e:bc:c4:35:27:79:57:de:c3:a6:38:93:66:
be:e9:ad:4b:57:2b:d7:d9:a7:ca:b0:e6:8f:c1:5c:8a:66:ec:
12:34:68:3c:2e:4c:84:23:ef:ef:a3:fc:48:d3:46:97:eb:ac:
5f:69:52:b5:73:2b:d6:af:73:07:91:95:43:6c:b9:f7:8c:48:
39:11:72:fd:c6:53:e7:30:1c:08:e7:2f:3e:c1:b6:b6:a4:c4:
a8:1a:59:ff:e8:20:bf:43:08:b6:a8:a9:d0:aa:c5:a3:44:f8:
76:42:9a:ea:38:ac:28:ec:ab:df:77:fa:79:bb:46:08:91:5a:
9e:9e:8b:05:b0:f3:5f:27:00:f2:f5:57:99:f0:8e:73:b1:25:
89:79:b1:14:a4:40:27:f1:40:08:c9:3c:a3:40:24:70:42:ae:
16:66:36:94:22:2c:f0:02:07:80:90:87:4d:09:59:85:6d:a8:
b3:47:0b:07:32:72:31:6e:7b:6e:d7:8f:7c:7c:27:bd:29:a5:
9e:b8:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:27 2025 by rpki-client