Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File: fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier: KhlNT6LMBek614eKoeT+EE4mdFLdVLfLnjvhUhTYOcU=
Subject key identifier: A4:45:DC:F8:2A:91:E9:FB:5F:50:23:94:AA:CA:F0:58:84:08:20:2A
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer: /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial: 019A4EF4CEB51EA2181D316DF9D135E6A0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: lT8ofvp3Fx8Y6BMXKmHCq1CBzac2gIzaAKIondBaeVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ce:b5:1e:a2:18:1d:31:6d:f9:d1:35:e6:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=a445dcf82a91e9fb5f502394aacaf0588408202a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:16:16:a8:94:65:63:50:f6:ec:93:65:f8:
a1:c9:f2:a2:3a:95:1e:eb:a0:8d:63:61:bc:9f:6c:
8d:1d:93:bd:e2:06:58:30:de:0a:95:78:29:9a:9f:
b2:26:96:8a:cb:d6:47:9d:38:bf:09:be:1e:f7:52:
a2:f8:8c:9f:7d:62:21:4f:21:01:0c:5d:df:4f:d4:
bf:f1:a7:0c:92:31:15:51:d5:91:78:0f:39:1f:58:
0c:03:29:dc:8f:40:7f:d4:a0:08:84:f1:f9:fd:04:
c5:c8:bd:a8:73:21:18:1c:1c:f5:dd:f7:2d:df:cb:
90:41:7a:53:4d:ce:32:28:a2:fa:f8:66:8d:4a:90:
d2:51:19:3c:bd:77:00:b1:48:76:85:23:01:46:3d:
2d:35:17:d1:21:f6:32:05:5b:87:14:b2:c2:76:28:
98:e8:d4:28:95:85:23:65:10:1d:1a:23:0a:4e:75:
1c:0e:f1:d1:65:9a:7a:bd:fb:c8:c5:b9:3f:57:9d:
98:a0:30:7b:a8:ac:41:49:d8:98:9b:3d:21:54:82:
f4:82:4a:bf:db:28:a9:dc:4f:2c:10:54:71:63:11:
58:49:30:ec:89:66:7d:46:f2:1e:22:22:61:69:09:
1e:67:96:36:50:84:a1:be:ba:ff:a6:40:13:6f:fb:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:45:DC:F8:2A:91:E9:FB:5F:50:23:94:AA:CA:F0:58:84:08:20:2A
X509v3 Authority Key Identifier:
keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:f3:af:c5:30:a9:be:99:ca:12:ff:f2:85:4c:50:eb:30:
79:b2:c2:88:25:5f:c2:4b:d4:f2:20:bb:de:e6:28:37:33:30:
93:56:0f:e9:37:99:35:e2:c4:bb:97:87:69:e5:24:7c:ff:0f:
a9:a3:e7:6d:a6:c7:31:f9:d9:fe:d9:51:34:50:0a:bb:89:92:
b6:48:65:44:b0:ab:97:a8:4e:8d:ce:77:4c:76:1a:ef:17:64:
7b:df:04:3a:6d:83:1e:89:c8:0e:fe:49:5d:ea:f6:dc:df:0a:
a5:8d:04:ad:99:ec:98:94:60:ed:3e:07:be:93:e1:8c:ba:d3:
91:3b:99:e3:ef:ed:f8:79:63:29:24:ca:4e:fa:e7:92:ab:85:
b7:2a:82:ed:c3:2e:9e:41:e2:44:66:e5:08:6c:4a:20:01:ae:
0f:24:40:ea:59:ce:51:5a:5f:a7:a1:a5:f9:71:36:67:c0:13:
a4:b0:04:7f:6a:1b:05:3d:18:4b:41:72:97:70:5f:0f:bf:2f:
e0:4a:2c:fd:ff:36:d9:27:73:2a:74:b7:21:90:33:f8:c8:7d:
a8:6b:4c:ac:84:6d:bd:9b:69:56:9f:8c:f1:18:fa:4d:cf:6a:
11:f4:16:d5:20:00:0e:17:90:69:7c:bb:bc:3f:dd:56:61:e6:
da:5b:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:46 2025 by rpki-client