Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json)
Hash identifier: iVgrlhu5ADvgvSIzZu3a0jsaMX6IM4blaPKeTc01zTg=
Subject key identifier: 3B:8D:64:91:27:FC:C1:AB:B6:D3:85:3F:5D:77:40:A4:77:CB:07:36
Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Certificate serial: 019A53084DEC3DFAE7A3AA4246819EBACF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
Manifest number: 09CA
Signing time: Wed 05 Nov 2025 08:00:44 +0000
Manifest this update: Wed 05 Nov 2025 08:00:44 +0000
Manifest next update: Thu 06 Nov 2025 08:00:44 +0000
Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: T4o2Hd/Z46EDAbm6XAZgsWCcn5zxLMwY865nzqOnT18=)
2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:4d:ec:3d:fa:e7:a3:aa:42:46:81:9e:ba:cf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9
Validity
Not Before: Nov 5 08:00:44 2025 GMT
Not After : Nov 6 08:00:44 2025 GMT
Subject: CN=3b8d649127fcc1abb6d3853f5d7740a477cb0736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:df:b2:72:d8:f4:45:fd:1c:c8:8f:8f:8a:
f5:23:8e:aa:d0:10:5c:e4:37:77:3f:dc:e7:d1:05:
01:0e:08:47:bb:d5:b6:9c:16:05:f5:44:c3:5e:a3:
3e:29:72:55:d3:2d:ca:26:7b:a3:fe:c0:27:9f:70:
d0:70:cd:43:b4:0b:2f:54:a3:90:40:c6:8d:b5:c7:
c7:fa:fb:fe:17:1c:5c:62:c4:3d:ea:e8:19:ad:a1:
d3:04:a3:c3:1e:c4:90:a1:47:4f:7a:51:63:82:30:
59:5d:b4:d6:e1:6b:cd:74:90:f7:5e:8b:0e:94:78:
5d:ea:80:bc:d7:16:98:8f:bc:04:4f:94:ef:11:4f:
63:d1:70:ac:d0:e7:62:81:9e:8f:09:a8:36:9c:5f:
12:7d:81:76:a4:e5:1c:af:af:de:b6:e3:9c:53:da:
f9:96:ed:05:3c:41:f3:76:01:92:e3:b2:28:c6:9e:
db:7a:ac:ca:f7:14:af:3c:10:4e:8d:37:0e:8b:cb:
db:88:bb:eb:f7:ec:a3:30:8e:95:b6:1f:cd:dc:84:
75:af:29:dc:44:88:24:4a:0b:e4:b3:71:56:2c:8b:
24:f4:01:4a:15:d8:f3:1d:90:28:e3:e9:5e:8e:be:
68:ec:a8:7a:db:91:1c:33:2e:ff:68:e0:06:de:9e:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:64:91:27:FC:C1:AB:B6:D3:85:3F:5D:77:40:A4:77:CB:07:36
X509v3 Authority Key Identifier:
keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:03:38:08:b2:96:01:39:98:27:68:21:0e:2e:2f:b9:0f:a5:
e9:b5:10:95:10:d5:03:63:cd:71:5b:d9:ca:b2:90:41:c2:4a:
2d:e3:34:c7:c5:12:14:e7:0e:19:71:a1:f8:42:98:92:f7:56:
c5:f5:2b:61:05:50:96:83:09:aa:50:52:fa:37:3c:6b:f2:b7:
54:14:ad:b8:6a:f5:d4:35:3e:0f:eb:f1:85:85:26:5e:ed:9d:
11:ac:bd:09:bd:73:57:3d:35:be:ed:7e:ce:4a:fe:b4:9f:66:
e8:65:73:66:76:2a:7a:f0:a6:56:29:34:91:69:85:4a:16:95:
3c:ba:3f:93:07:99:21:18:16:fd:1d:1a:f0:6f:56:f3:c5:7e:
58:d5:fd:53:67:ae:60:54:89:a1:9d:ea:d4:14:9a:74:0d:b7:
c4:87:a2:f0:93:17:e9:ca:2d:a3:b2:16:cb:2b:01:2c:e0:ed:
df:e0:38:3c:c6:68:dd:20:a7:44:f2:6c:99:f8:7b:ab:77:a4:
f4:93:9f:02:f1:2a:db:fc:cf:4c:82:90:b1:98:21:14:d9:5d:
20:3e:7d:88:53:7f:7e:63:98:e5:ff:aa:74:a6:0c:69:32:a6:
f3:94:4d:57:e4:1e:f4:f0:8b:96:f7:f8:89:fc:3a:9c:c2:a0:
6f:ed:14:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCE3sPfrno6pCRoGeus9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy
ZDZmZjkwHhcNMjUxMTA1MDgwMDQ0WhcNMjUxMTA2MDgwMDQ0WjAzMTEwLwYDVQQD
EygzYjhkNjQ5MTI3ZmNjMWFiYjZkMzg1M2Y1ZDc3NDBhNDc3Y2IwNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY/fsnLY9EX9HMiPj4r1I46q0BBc
5Dd3P9zn0QUBDghHu9W2nBYF9UTDXqM+KXJV0y3KJnuj/sAnn3DQcM1DtAsvVKOQ
QMaNtcfH+vv+FxxcYsQ96ugZraHTBKPDHsSQoUdPelFjgjBZXbTW4WvNdJD3XosO
lHhd6oC81xaYj7wET5TvEU9j0XCs0OdigZ6PCag2nF8SfYF2pOUcr6/etuOcU9r5
lu0FPEHzdgGS47Ioxp7beqzK9xSvPBBOjTcOi8vbiLvr9+yjMI6Vth/N3IR1rync
RIgkSgvks3FWLIsk9AFKFdjzHZAo4+lejr5o7Kh625EcMy7/aOAG3p5KkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuNZJEn/MGrttOFP113QKR3ywc2MB8GA1UdIwQY
MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt
MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm
LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAM4CLKW
ATmYJ2ghDi4vuQ+l6bUQlRDVA2PNcVvZyrKQQcJKLeM0x8USFOcOGXGh+EKYkvdW
xfUrYQVQloMJqlBS+jc8a/K3VBStuGr11DU+D+vxhYUmXu2dEay9Cb1zVz01vu1+
zkr+tJ9m6GVzZnYqevCmVik0kWmFShaVPLo/kweZIRgW/R0a8G9W88V+WNX9U2eu
YFSJoZ3q1BSadA23xIei8JMX6coto7IWyysBLODt3+A4PMZo3SCnRPJsmfh7q3ek
9JOfAvEq2/zPTIKQsZghFNldID59iFN/fmOY5f+qdKYMaTKm85RNV+Qe9PCLlvf4
ifw6nMKgb+0Upw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:50 2025 by rpki-client