Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: U8+Ump0eTo1kqNBcc0nsw1s9Mn8sIqm058vikZOA6mk=
Subject key identifier: 5B:AC:EA:8F:D9:BB:CF:14:98:D2:E4:92:5C:25:F3:8F:CC:1C:15:E8
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 019A50E2DEFE5D34638231FF2D0321691250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 036F
Signing time: Tue 04 Nov 2025 22:00:36 +0000
Manifest this update: Tue 04 Nov 2025 22:00:36 +0000
Manifest next update: Wed 05 Nov 2025 22:00:36 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: kb0ERIHYMaaw4tk8x+2Pdv2j9yMddpWF+coi01F/zmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:de:fe:5d:34:63:82:31:ff:2d:03:21:69:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Nov 4 22:00:36 2025 GMT
Not After : Nov 5 22:00:36 2025 GMT
Subject: CN=5bacea8fd9bbcf1498d2e4925c25f38fcc1c15e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:1d:a9:40:7d:28:07:08:1e:d7:a9:8f:4f:
45:f4:0d:43:e6:20:fb:2e:5f:25:77:3c:62:48:12:
c2:c4:05:a3:71:a7:48:dd:99:22:b0:b7:b3:78:7a:
54:9b:bc:18:d3:1c:41:f4:e6:a9:f1:4f:90:97:49:
08:53:9a:2b:5b:1a:d3:0b:f9:62:7a:ce:9c:15:ec:
96:48:d5:58:fe:41:0c:d6:5f:3d:77:06:97:1d:05:
c1:a7:57:85:50:fc:95:91:d9:c0:bf:71:71:22:43:
f2:bb:13:0e:54:77:16:4b:c8:78:55:3b:af:f4:82:
93:d0:34:6e:e5:e2:5f:97:f6:a3:37:1b:74:26:2b:
02:24:98:e7:d6:ef:ca:76:33:dd:05:a1:84:da:43:
b4:ea:45:d7:fa:76:94:33:f9:30:65:73:c0:14:84:
25:f0:da:70:70:2b:ad:f1:00:dd:48:e5:c6:86:78:
81:a4:9a:12:e2:a6:45:1e:e7:94:7e:c6:fe:26:5d:
da:35:ed:75:36:52:f3:be:7d:4e:99:93:50:b8:60:
2c:cd:8c:7f:7f:8a:35:ed:c8:02:91:02:3e:da:e4:
59:48:04:f0:b7:ee:fa:8c:4d:fc:f4:b6:51:ce:4d:
ce:4d:b9:bb:3e:73:6e:50:ae:18:12:cb:a5:47:47:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:EA:8F:D9:BB:CF:14:98:D2:E4:92:5C:25:F3:8F:CC:1C:15:E8
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:df:58:d6:dd:c6:7e:f5:b0:2e:79:ea:d9:e0:d0:6e:6c:
32:ef:76:d8:89:78:d8:04:c6:49:a3:51:2f:c8:8c:a2:62:08:
ee:bb:39:ae:36:69:c0:63:18:87:69:7f:a9:01:73:46:a8:8e:
26:31:98:2d:64:92:fa:3c:94:d9:31:c8:a0:65:c2:52:b3:f3:
99:db:64:a6:fa:5f:35:c1:a3:fc:d2:45:0c:d6:58:4d:1b:51:
5e:5e:a3:a2:10:4a:55:83:d5:c6:f5:f1:64:5c:f4:67:14:84:
bd:6c:00:d5:00:4c:97:02:86:37:3b:47:85:b6:ef:5e:d8:47:
77:71:20:53:f0:ed:3d:94:8f:06:f8:7d:c7:07:b1:0c:57:dd:
63:a0:9f:56:56:7e:80:14:c5:ae:57:f9:f6:fb:f7:e3:33:f4:
4d:13:c3:ec:da:55:d8:04:6b:2e:ca:90:26:4a:65:8f:38:9d:
44:95:3a:f1:4b:33:20:c4:98:a7:2b:cd:e3:ea:30:48:8a:56:
5c:e0:c7:e6:e8:3a:e3:15:d6:0f:d6:6b:f1:57:53:65:66:6d:
33:b3:ec:7c:0a:bc:52:14:1d:c3:f1:c9:36:2d:23:1c:89:1b:
4c:c0:0a:7b:43:73:f1:b2:55:df:57:09:75:bd:b1:8b:b9:fb:
2c:69:c9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4t7+XTRjgjH/LQMhaRJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3
NWVmZGEwHhcNMjUxMTA0MjIwMDM2WhcNMjUxMTA1MjIwMDM2WjAzMTEwLwYDVQQD
Eyg1YmFjZWE4ZmQ5YmJjZjE0OThkMmU0OTI1YzI1ZjM4ZmNjMWMxNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6MdqUB9KAcIHtepj09F9A1D5iD7
Ll8ldzxiSBLCxAWjcadI3ZkisLezeHpUm7wY0xxB9Oap8U+Ql0kIU5orWxrTC/li
es6cFeyWSNVY/kEM1l89dwaXHQXBp1eFUPyVkdnAv3FxIkPyuxMOVHcWS8h4VTuv
9IKT0DRu5eJfl/ajNxt0JisCJJjn1u/KdjPdBaGE2kO06kXX+naUM/kwZXPAFIQl
8NpwcCut8QDdSOXGhniBpJoS4qZFHueUfsb+Jl3aNe11NlLzvn1OmZNQuGAszYx/
f4o17cgCkQI+2uRZSATwt+76jE389LZRzk3OTbm7PnNuUK4YEsulR0dqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFus6o/Zu88UmNLkklwl84/MHBXoMB8GA1UdIwQY
MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt
NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw
LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUXfWNbd
xn71sC556tng0G5sMu922Il42ATGSaNRL8iMomII7rs5rjZpwGMYh2l/qQFzRqiO
JjGYLWSS+jyU2THIoGXCUrPzmdtkpvpfNcGj/NJFDNZYTRtRXl6johBKVYPVxvXx
ZFz0ZxSEvWwA1QBMlwKGNztHhbbvXthHd3EgU/DtPZSPBvh9xwexDFfdY6CfVlZ+
gBTFrlf59vv34zP0TRPD7NpV2ARrLsqQJkpljzidRJU68UszIMSYpyvN4+owSIpW
XODH5ug64xXWD9Zr8VdTZWZtM7PsfAq8UhQdw/HJNi0jHIkbTMAKe0Nz8bJV31cJ
db2xi7n7LGnJSw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:22 2025 by rpki-client