Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: eXtSD6dfKr8oFfu0Kbz+wJNOY2eB3WkIZJY1+h0iZ88=
Subject key identifier: B3:C0:7E:7F:CF:A1:CB:50:0B:BA:57:D7:A1:07:3F:FE:D9:84:38:79
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019A4D73C6C3C7877FA3E9EFEE3338EBE590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 1441
Signing time: Tue 04 Nov 2025 06:00:24 +0000
Manifest this update: Tue 04 Nov 2025 06:00:24 +0000
Manifest next update: Wed 05 Nov 2025 06:00:24 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: DqStuXgF9hOO4mOfFSRgVffBRpbxVZpKndUHktLkZYM=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c6:c3:c7:87:7f:a3:e9:ef:ee:33:38:eb:e5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Nov 4 06:00:24 2025 GMT
Not After : Nov 5 06:00:24 2025 GMT
Subject: CN=b3c07e7fcfa1cb500bba57d7a1073ffed9843879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:bf:15:2f:9a:9b:1b:82:74:f1:52:16:9a:
39:70:7b:37:1d:ee:88:9f:02:32:2c:e6:dc:16:21:
4d:71:1f:76:c7:20:b3:b4:38:d4:41:6e:d3:78:78:
e2:fb:92:40:a8:02:f7:52:4c:ce:40:96:9c:b6:6d:
8e:65:7f:ae:1a:6f:b9:2d:90:8a:ee:f3:9d:99:92:
4a:4d:57:a5:2a:23:3d:5d:69:b7:f5:35:4a:2a:53:
59:99:d6:d9:b4:bd:f0:04:27:db:2f:08:e8:24:4e:
59:fd:97:5b:a6:8d:89:5e:08:76:54:d0:80:13:f3:
1c:81:9d:e5:67:81:ed:88:87:d3:55:56:5c:6c:42:
e1:14:99:65:6c:e4:ff:99:70:3d:8d:bc:c7:29:61:
f5:da:09:69:14:22:4a:d5:4e:60:12:ad:a9:77:97:
3d:b0:b4:a6:e1:37:57:8a:29:9b:5f:49:e6:5f:cf:
01:9b:1e:86:3c:e7:ae:45:f8:7f:f9:ab:3a:87:cd:
fb:5e:9e:cf:68:68:1a:af:6e:b4:03:b3:8b:25:82:
62:c0:a3:1e:5b:a0:a1:e8:23:17:0b:d3:61:08:c5:
a0:60:d2:bd:e4:ff:25:74:9e:25:78:97:a9:af:57:
a4:4b:15:4e:c7:82:ab:d2:93:04:13:95:5b:fc:a9:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:7E:7F:CF:A1:CB:50:0B:BA:57:D7:A1:07:3F:FE:D9:84:38:79
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:7c:51:d9:1b:96:4d:f0:f7:e5:21:4e:13:b4:3b:66:36:
40:8b:d8:6e:81:53:5f:be:7a:3b:b5:b0:cf:86:2e:84:aa:fc:
30:56:4c:d3:e7:04:3e:77:8b:13:04:48:cf:42:e9:24:36:b4:
33:77:82:62:76:8a:aa:41:f0:33:05:df:5b:64:83:06:bb:41:
9c:b2:ea:15:9d:73:5f:af:32:87:75:da:85:e3:6b:36:d5:3a:
06:ae:1a:da:8a:7b:c7:04:21:1a:52:59:64:33:12:a7:1a:c2:
4a:10:e1:b1:c8:7d:ed:80:28:14:e1:71:52:de:ec:ea:2a:f5:
4c:a5:e6:a9:2d:50:46:a3:65:bf:7e:c7:c6:93:ce:17:43:65:
33:61:d7:d8:0f:77:4d:4a:35:e6:33:fb:a4:a4:14:26:d9:10:
4c:1d:48:0b:bf:95:c2:2d:81:53:1e:f1:42:dd:14:89:db:28:
68:cf:0c:7f:3d:2f:de:a7:10:44:e5:d0:0e:de:d6:01:b5:c4:
c3:8a:cc:d5:7f:99:cf:16:42:07:01:ee:c0:50:1a:5d:86:af:
ff:1a:a3:c8:81:f1:4f:38:0c:72:13:6b:77:c8:bd:ae:aa:3d:
a4:aa:f0:30:08:27:19:07:f7:e2:0b:29:25:2c:68:f8:73:30:
85:75:05:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc8bDx4d/o+nv7jM46+WQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm
MWJkZjkwHhcNMjUxMTA0MDYwMDI0WhcNMjUxMTA1MDYwMDI0WjAzMTEwLwYDVQQD
EyhiM2MwN2U3ZmNmYTFjYjUwMGJiYTU3ZDdhMTA3M2ZmZWQ5ODQzODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PK/FS+amxuCdPFSFpo5cHs3He6I
nwIyLObcFiFNcR92xyCztDjUQW7TeHji+5JAqAL3UkzOQJactm2OZX+uGm+5LZCK
7vOdmZJKTVelKiM9XWm39TVKKlNZmdbZtL3wBCfbLwjoJE5Z/Zdbpo2JXgh2VNCA
E/McgZ3lZ4HtiIfTVVZcbELhFJllbOT/mXA9jbzHKWH12glpFCJK1U5gEq2pd5c9
sLSm4TdXiimbX0nmX88Bmx6GPOeuRfh/+as6h837Xp7PaGgar260A7OLJYJiwKMe
W6Ch6CMXC9NhCMWgYNK95P8ldJ4leJepr1ekSxVOx4Kr0pMEE5Vb/KlqMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPAfn/PoctQC7pX16EHP/7ZhDh5MB8GA1UdIwQY
MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt
ODlhYThkMmU4MDA0LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0
LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC18Udkb
lk3w9+UhThO0O2Y2QIvYboFTX756O7Wwz4YuhKr8MFZM0+cEPneLEwRIz0LpJDa0
M3eCYnaKqkHwMwXfW2SDBrtBnLLqFZ1zX68yh3XaheNrNtU6Bq4a2op7xwQhGlJZ
ZDMSpxrCShDhsch97YAoFOFxUt7s6ir1TKXmqS1QRqNlv37HxpPOF0NlM2HX2A93
TUo15jP7pKQUJtkQTB1IC7+Vwi2BUx7xQt0UidsoaM8Mfz0v3qcQROXQDt7WAbXE
w4rM1X+ZzxZCBwHuwFAaXYav/xqjyIHxTzgMchNrd8i9rqo9pKrwMAgnGQf34gsp
JSxo+HMwhXUFOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:36 2025 by rpki-client