Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: itusdJSFVnBQS2MlEvYwyO0UArfudjW1psFuONhKnW4=
Subject key identifier: 52:44:11:44:44:ED:02:95:18:53:11:06:E6:FB:42:57:4A:D9:AE:16
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019A4C98285F42310D53521142E8AB4B2BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0425
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: p4Ccq7sV50ODfxgtMklAuagNR8T0avULWea6UInH2yk=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:28:5f:42:31:0d:53:52:11:42:e8:ab:4b:2b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=5244114444ed029518531106e6fb42574ad9ae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:bd:46:ad:0d:58:ce:86:1a:7d:07:ca:3a:
47:fe:03:e7:65:98:f7:d3:62:8c:f1:0c:27:ec:d1:
96:7f:51:09:24:04:c9:ff:8e:1f:bd:bb:9e:a1:51:
e8:e4:0c:d9:37:ea:8f:76:72:6a:64:1f:45:b2:52:
ad:1b:dc:87:cc:c2:0d:0e:f1:34:1b:fd:6a:8b:d2:
ef:7b:e8:2b:05:a9:36:ad:b8:bc:ce:3c:7e:78:8e:
a1:8e:76:3e:8d:17:e0:6b:0b:cf:28:23:bf:31:9e:
d1:1f:53:a6:69:b0:ef:2d:d5:d1:b7:c1:94:80:4d:
b7:6b:e7:6b:0b:f5:c2:ba:3d:bc:04:fd:9c:a1:0d:
9d:93:1c:c5:09:02:3f:6a:46:5f:56:bd:89:1a:f4:
03:f5:c0:a4:f1:52:51:7d:0f:b7:48:2c:d6:8f:f8:
26:d0:8a:37:ed:4d:29:27:34:c5:55:42:8a:60:cc:
95:0d:aa:41:36:0e:65:99:04:a4:7d:80:e9:f7:38:
9a:42:99:46:f0:91:6d:f4:43:07:1a:7d:fe:66:f4:
bb:8e:01:b0:77:70:a5:5a:80:27:72:0c:22:1a:00:
d4:69:4a:81:9b:b5:73:03:36:44:3a:d1:6f:6d:61:
ae:1b:43:3c:5f:d1:44:ea:7f:22:b7:20:2c:cf:50:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:11:44:44:ED:02:95:18:53:11:06:E6:FB:42:57:4A:D9:AE:16
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7a:f5:7f:06:f0:58:52:41:16:7d:d7:29:99:03:79:63:dc:
4a:83:d3:3b:67:ab:85:b1:25:78:8f:8d:be:9e:a2:6e:3f:cd:
ae:7d:e7:71:60:08:cf:d3:0b:b4:d1:d8:75:62:68:ab:22:01:
bb:6e:3c:b9:f6:9d:71:73:11:42:4f:5b:7f:5d:59:18:49:ea:
6d:0b:2b:04:31:d1:2e:20:42:53:0c:a0:39:71:b6:75:14:6d:
a7:66:8b:28:5b:48:e5:9c:4f:82:f3:10:aa:82:b0:53:fa:44:
28:d4:b5:6e:e5:95:f7:48:6f:75:49:92:42:95:35:4e:d1:3c:
86:4e:96:d7:92:49:de:d2:c2:44:80:21:aa:92:76:0e:14:e4:
c6:24:3b:73:73:04:da:c2:fb:0a:77:1b:c9:a3:2e:3c:99:3f:
d4:9c:ec:63:34:dc:40:10:8b:7e:14:ec:e3:8b:d6:49:d9:8e:
1c:de:2c:a4:f9:e1:5c:0c:0a:9d:aa:9a:1d:80:e2:ec:94:85:
c9:b8:0d:cf:47:83:d2:a0:c2:99:6f:d5:69:58:6e:26:eb:85:
ab:a3:b9:f0:ab:0d:6f:61:50:6f:ee:74:05:cb:b2:b0:5f:24:
4d:07:8f:11:82:14:b4:17:3d:12:a8:a4:b8:df:9a:4b:0e:14:
1e:ce:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:44 2025 by rpki-client