Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json)
Hash identifier: 8VT/HRNIv7EMIijAcXzuyKqnr6peQ2w6cE2RKD+Dg3g=
Subject key identifier: E4:5C:8C:A4:F7:00:8C:17:CF:6E:08:5C:26:8B:0E:96:50:89:2A:C5
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 019A4C9846629477079576AF47B2B6EF35B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 02:00:39 +0000
Manifest this update: Tue 04 Nov 2025 02:00:39 +0000
Manifest next update: Wed 05 Nov 2025 02:00:39 +0000
Files and hashes: 1: BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa (hash: ojCr5JBVKUCnA0I9p1E7esZg/ahEto7MwTtjkK6NUEk=)
2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: JDmCM5Jw5pTqW3AR1Ogy31U+mRdrOv5ObmW3PcpUpqs=)
3: jZCTuDYNLnCGsAPDwWIixMbLxV4.roa (hash: V9apneKgCADjYV+Y9jMV35PL/ZewdT33ExfgNVHPedw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:46:62:94:77:07:95:76:af:47:b2:b6:ef:35:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Nov 4 02:00:39 2025 GMT
Not After : Nov 5 02:00:39 2025 GMT
Subject: CN=e45c8ca4f7008c17cf6e085c268b0e9650892ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0e:3a:bf:0e:d0:ff:41:d0:97:d9:90:f4:46:
dc:7b:a8:8d:ae:db:7a:75:21:66:c2:60:9b:fb:7e:
9b:60:65:f8:34:76:f3:a3:c8:a9:31:bb:04:30:7d:
4e:d5:89:e5:8a:cc:56:d6:c2:79:7a:f4:98:85:2c:
bf:a9:59:b4:de:4d:0b:c6:b3:3d:37:e3:6b:56:38:
13:58:16:0b:7f:60:af:98:2a:37:a9:dd:fa:99:1e:
be:08:e1:fb:88:0b:67:fc:04:f1:ba:57:76:da:bd:
1d:ea:17:ae:e0:91:4c:5e:87:b1:1a:f9:91:8a:ec:
e2:7d:19:1b:c3:b6:11:60:bb:9b:4b:a0:f5:68:6a:
3f:5a:e7:59:d7:5e:48:fb:c5:f6:8e:38:29:03:e9:
b5:bb:db:9b:a5:c5:c6:1c:d8:bd:bc:d9:83:8a:ed:
61:94:b5:1a:b5:86:90:c2:e6:f5:85:b5:09:4e:c6:
fc:52:5e:24:f2:0d:0a:db:aa:13:99:85:fe:46:4c:
44:fb:1a:01:4d:28:5b:11:ab:59:cf:4b:7a:e8:b4:
5f:e1:99:46:64:15:ae:58:69:db:e4:99:a9:34:f1:
e4:07:19:62:d2:2e:22:6a:49:d2:06:04:f2:1c:7d:
66:41:26:e1:c7:b3:10:83:1f:58:15:e3:b7:11:db:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:8C:A4:F7:00:8C:17:CF:6E:08:5C:26:8B:0E:96:50:89:2A:C5
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:55:a0:1d:6f:d8:82:d7:36:6e:81:07:55:2c:b9:10:c9:b1:
a8:1f:37:b8:f4:b2:50:73:d7:ad:1f:ec:8f:8d:48:a6:6c:c9:
6b:8d:31:da:f8:35:43:d2:36:75:c7:79:aa:1d:e9:4a:ee:42:
ae:8d:de:bf:cd:42:c7:16:22:c0:9a:ce:5a:30:77:e0:cd:d0:
50:5f:dc:d2:12:1f:3c:de:e8:b3:4b:38:07:f3:d2:80:5e:45:
33:11:f5:ae:29:a5:28:98:18:9f:47:95:80:55:48:02:69:5f:
ea:a3:d2:b1:56:b9:be:37:3b:de:79:13:1d:e2:92:12:80:b9:
9a:8a:13:0b:9a:8b:19:7e:5a:b6:6f:f6:43:75:8d:aa:87:5d:
aa:36:c9:83:c1:02:4b:8b:c5:be:11:a7:9e:be:32:66:3f:c0:
5e:3c:e8:fd:1b:89:99:5f:c3:11:99:dc:ea:31:5f:18:9d:40:
78:ec:74:9e:d7:66:2e:77:be:58:b7:ab:a6:24:49:7a:19:c2:
f7:d4:f6:98:6a:eb:62:4e:7b:42:fc:34:f4:85:c6:ab:61:94:
a5:db:92:0e:29:a1:15:c2:51:85:73:73:dc:96:ae:75:8d:90:
b8:70:27:cb:60:62:68:f0:77:8e:4e:ac:a2:74:d1:21:e3:c9:
bc:34:15:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmEZilHcHlXavR7K27zW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz
M2EyYmQwHhcNMjUxMTA0MDIwMDM5WhcNMjUxMTA1MDIwMDM5WjAzMTEwLwYDVQQD
EyhlNDVjOGNhNGY3MDA4YzE3Y2Y2ZTA4NWMyNjhiMGU5NjUwODkyYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow46vw7Q/0HQl9mQ9Ebce6iNrtt6
dSFmwmCb+36bYGX4NHbzo8ipMbsEMH1O1YnlisxW1sJ5evSYhSy/qVm03k0LxrM9
N+NrVjgTWBYLf2CvmCo3qd36mR6+COH7iAtn/ATxuld22r0d6heu4JFMXoexGvmR
iuzifRkbw7YRYLubS6D1aGo/WudZ115I+8X2jjgpA+m1u9ubpcXGHNi9vNmDiu1h
lLUatYaQwub1hbUJTsb8Ul4k8g0K26oTmYX+RkxE+xoBTShbEatZz0t66LRf4ZlG
ZBWuWGnb5JmpNPHkBxli0i4iaknSBgTyHH1mQSbhx7MQgx9YFeO3Edu9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORcjKT3AIwXz24IXCaLDpZQiSrFMB8GA1UdIwQY
MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt
Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2
LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVWgHW/Y
gtc2boEHVSy5EMmxqB83uPSyUHPXrR/sj41IpmzJa40x2vg1Q9I2dcd5qh3pSu5C
ro3ev81CxxYiwJrOWjB34M3QUF/c0hIfPN7os0s4B/PSgF5FMxH1rimlKJgYn0eV
gFVIAmlf6qPSsVa5vjc73nkTHeKSEoC5mooTC5qLGX5atm/2Q3WNqoddqjbJg8EC
S4vFvhGnnr4yZj/AXjzo/RuJmV/DEZnc6jFfGJ1AeOx0ntdmLne+WLerpiRJehnC
99T2mGrrYk57Qvw09IXGq2GUpduSDimhFcJRhXNz3JaudY2QuHAny2BiaPB3jk6s
onTRIePJvDQVtw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:29 2025 by rpki-client