Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json)
Hash identifier: HsOpJWWxhYFI979AE4EqPKuK4Oy3Igi+lwpLloO6HoM=
Subject key identifier: 4B:FF:70:C5:72:8C:00:39:41:C1:2B:CA:F7:73:2D:4E:CC:D4:4C:D4
Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Certificate serial: 019A54BF35F55014BD0BF2662AD3EFB4C251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
Manifest number: 0AA0
Signing time: Wed 05 Nov 2025 16:00:08 +0000
Manifest this update: Wed 05 Nov 2025 16:00:08 +0000
Manifest next update: Thu 06 Nov 2025 16:00:08 +0000
Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: 1RPOLKbxKUbykk9MXcKC6HXqkFyyjq643C2pZX0FwQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:35:f5:50:14:bd:0b:f2:66:2a:d3:ef:b4:c2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd
Validity
Not Before: Nov 5 16:00:08 2025 GMT
Not After : Nov 6 16:00:08 2025 GMT
Subject: CN=4bff70c5728c003941c12bcaf7732d4eccd44cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:c1:0c:b5:f6:64:7d:1b:ce:bb:af:3d:6e:
24:91:9d:d7:dc:c4:75:63:92:4c:8d:04:5e:50:0c:
75:9f:50:a5:dc:35:b1:37:63:67:f3:fd:c7:84:2d:
1b:4b:e8:05:47:96:2c:4a:82:f8:60:70:83:53:c2:
79:29:a6:ef:e1:fc:15:f6:d5:7e:37:d0:ec:5c:c0:
92:80:4a:5e:b9:01:17:54:e8:9b:e1:a3:d1:d5:c5:
58:26:11:d8:de:8d:bc:db:55:03:d3:88:c9:73:69:
73:a1:77:c8:3a:aa:1d:32:9d:e1:4f:3b:d5:34:3b:
bc:c8:6e:8a:ed:6c:a3:54:ce:ab:e5:94:89:c7:45:
30:f3:b1:0b:83:3a:fe:49:68:df:99:56:1b:0a:4e:
16:5e:56:16:4f:c1:b5:87:41:23:8d:e2:66:ec:a2:
17:1a:3e:66:e2:10:91:4c:e2:33:61:4f:52:92:a5:
98:20:6c:e5:e4:a5:6e:8d:a0:0f:ea:41:16:8c:81:
19:43:da:48:ca:b8:e2:8a:d7:3d:75:8c:c5:4b:0c:
e9:76:e6:05:25:d0:a5:a9:be:de:7c:7d:bc:a2:ef:
d6:85:6b:fd:e6:7a:5f:84:54:c2:13:69:49:aa:f2:
9e:b5:f5:48:fa:00:e9:e9:25:62:9e:58:2b:f0:26:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:70:C5:72:8C:00:39:41:C1:2B:CA:F7:73:2D:4E:CC:D4:4C:D4
X509v3 Authority Key Identifier:
keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:ee:fb:fd:6d:dd:82:93:42:4e:a0:61:d1:a9:29:c4:a5:
4c:bb:dd:77:e9:f8:b1:b7:30:25:f6:8c:f8:37:14:d8:00:05:
45:9f:4e:2f:ec:c5:3b:04:e8:08:bd:b9:de:b4:09:24:5b:4d:
48:bd:c6:d9:46:64:73:0a:5a:4f:bd:cc:93:e9:2d:d0:6c:62:
0d:ba:80:3b:d6:6f:06:c1:b5:7b:8e:0a:b7:27:0f:ad:9b:83:
c6:38:0d:a3:3f:9c:cb:7a:0f:90:29:c7:d0:e4:c7:5f:84:86:
05:62:21:2b:16:98:9c:f7:98:df:b4:30:b5:7e:5f:e2:cd:f4:
8b:6e:79:7d:4e:76:34:69:46:73:4d:d9:6d:d5:a8:76:96:bd:
22:a5:f9:ac:c2:f8:8e:9f:9c:46:4a:ff:af:22:eb:77:91:7e:
da:aa:7e:26:ef:1a:0f:fb:70:73:37:93:5d:3f:e7:24:0d:cc:
88:80:b9:cb:4c:1d:b4:2b:d5:ef:18:35:53:bb:c9:44:f0:2a:
2f:c7:c9:27:70:6f:8c:bf:50:dc:6d:c3:44:5d:d0:1f:a9:de:
b8:bb:87:e6:a2:19:ca:f1:0d:81:54:87:25:02:ac:5f:83:a3:
28:7b:7c:ba:2c:96:97:78:fb:78:1b:71:b0:fd:61:67:e0:c0:
3b:75:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:20:40 2025 by rpki-client