Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: XOVhG41q+TqWOi/PrnZQoWkn4cdsbvHC3skNg14lBAM=
Subject key identifier: 7D:BC:2F:03:ED:E7:42:6E:CC:C2:05:5F:45:CD:81:0E:3A:64:B3:68
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019A4EF47A29688E0FC8AB7C56EF0C81F375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: 53R5sWd3bxU4uwjYBoGnSmUsCoslRVXdK6B8/Xjvzdc=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7a:29:68:8e:0f:c8:ab:7c:56:ef:0c:81:f3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=7dbc2f03ede7426eccc2055f45cd810e3a64b368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:9a:5c:21:d4:9f:c5:70:d3:0c:5f:0e:7c:
77:7e:59:e7:77:48:5b:df:29:b1:dd:14:c0:93:04:
0e:c9:f8:50:6c:1f:3b:fa:4e:a4:29:de:a7:29:1a:
4e:b0:24:c1:aa:fd:7f:3c:3a:28:3f:e2:9d:38:3f:
c3:97:41:58:2c:35:10:d4:f4:7e:3c:8a:85:9d:81:
4f:e6:80:21:ec:a2:c9:f0:f3:b0:ce:78:76:13:95:
48:5d:b9:6f:40:be:5b:a7:ef:1e:f0:97:1c:aa:1e:
36:b9:41:5b:ae:4d:f9:98:74:85:18:46:88:2a:b1:
b2:d6:47:2f:65:59:c9:b6:b0:47:db:da:e8:79:42:
34:9e:f5:2e:17:b8:22:65:06:e8:62:7b:1d:71:78:
51:21:9e:cb:88:04:e5:76:a1:36:4b:d7:a0:6d:d2:
56:0e:75:e2:a6:64:68:07:39:7a:7c:57:dc:d0:54:
f6:d4:7d:57:53:31:65:9d:5f:c8:d4:88:6e:bc:4a:
14:21:4a:cb:d1:6f:ea:61:e8:8b:98:1e:ec:d2:80:
59:8d:6e:ae:9d:67:b3:96:20:02:08:f7:ae:38:3a:
88:f2:92:b0:01:3f:03:33:4e:f6:e4:12:31:29:c6:
16:1a:65:cf:37:9b:61:b9:96:bb:55:53:f8:58:d1:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:2F:03:ED:E7:42:6E:CC:C2:05:5F:45:CD:81:0E:3A:64:B3:68
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c7:b3:b1:13:b5:dc:ce:e2:58:07:45:c0:a2:df:03:e8:20:
b8:aa:c0:89:35:99:9c:01:c5:8c:e8:79:60:8c:74:18:85:6b:
05:3f:76:20:3f:03:1a:9e:92:91:e7:b4:99:49:ac:e0:06:16:
46:d7:bf:e5:fe:9e:68:04:a7:b8:3e:16:df:b1:80:89:42:06:
5f:a8:a8:43:bf:e6:03:1c:23:1d:e4:cd:57:eb:0d:cb:b5:58:
23:c1:52:4a:59:57:ee:51:21:cc:01:46:d0:b0:d6:b3:8e:b7:
08:8b:2c:ad:ab:8b:9c:17:d6:19:2b:7d:64:7e:8b:fa:a4:13:
63:17:aa:b6:31:c4:d3:dd:e1:0b:2a:b3:9f:2f:03:f5:98:ce:
64:f3:f2:ab:51:f1:aa:97:d9:2f:b5:fb:30:e4:38:66:7c:1b:
1d:ac:bc:ff:2e:7c:05:00:8b:5c:10:ff:08:81:c6:71:0b:b6:
33:03:73:e5:9c:e6:37:f3:ad:51:fc:53:e2:4e:9f:ef:55:3f:
2b:7b:dc:f8:31:f8:83:f9:8c:ad:63:03:7c:63:08:7a:c3:ad:
0a:5c:52:1a:a7:c7:c2:17:6b:b7:95:4b:c5:cc:87:a0:fd:ee:
8f:99:9e:81:7c:4a:85:30:7b:45:50:48:ce:9e:2f:63:a6:dd:
b1:d8:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client