Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File: fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier: n/IT0kG18T+qi6GD3DwcqymWT0MZ8c77fWPn+vqXLIQ=
Subject key identifier: 67:FB:62:9A:83:F5:8B:AE:73:09:D2:97:F2:B6:BF:68:E3:73:85:83
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer: /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial: 019A4E4F74BA9C9D5FBCC3007BD37F0B34F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number: 0DF8
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: 1M64bp2D6OoninKtd2dTV1Hn7lI.roa (hash: gBHtNRumJYHeajotR/1OOcz7o/b7zA7upFunHXmsr5M=)
2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: D8aokCvzsDAEwXWngc+SkdlX7SzznH0PxPgu0OQQ5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:74:ba:9c:9d:5f:bc:c3:00:7b:d3:7f:0b:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=67fb629a83f58bae7309d297f2b6bf68e3738583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:75:d6:9b:38:df:7a:ec:56:2a:47:ac:6a:
bc:80:db:58:45:f9:7f:eb:71:3e:cc:81:34:82:db:
49:04:31:63:04:19:fe:56:a1:1b:12:e8:3e:03:5d:
40:b8:ef:0b:be:11:77:5b:21:71:75:7e:dc:f8:39:
f6:97:2b:60:fe:80:f2:54:20:24:79:40:93:9c:01:
8b:27:46:55:ea:ab:c0:f8:37:a2:35:11:26:e5:17:
db:35:8d:ed:b3:3a:18:8b:7c:a6:e1:13:c3:dc:0b:
1c:5c:26:50:e7:9a:85:f4:d2:f7:fd:ff:7f:61:78:
a8:c7:18:ef:12:7f:e7:d1:66:4d:5b:51:f5:e8:55:
51:c1:ce:89:87:f4:f3:c5:1c:cc:83:8a:24:cc:ea:
ec:8b:e8:85:7b:ca:30:3d:8c:35:60:f8:17:db:a5:
3a:7e:6e:35:6c:08:19:3d:be:ba:3c:7b:90:02:8b:
eb:9d:d1:79:7a:06:76:26:3a:20:da:a7:ed:d1:41:
9d:44:11:20:2a:dd:08:ba:d0:79:e8:f7:ac:59:52:
95:eb:dd:c0:bd:c7:5f:ca:c3:2f:71:1f:4f:eb:1b:
06:60:bb:59:14:3a:61:cf:82:0f:8b:9e:97:4d:e0:
1c:cd:de:cb:e6:5e:20:e1:32:c5:61:30:e2:4d:95:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:62:9A:83:F5:8B:AE:73:09:D2:97:F2:B6:BF:68:E3:73:85:83
X509v3 Authority Key Identifier:
keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9e:27:b9:37:02:8d:7a:22:a6:df:59:08:a5:2d:ba:f4:b8:
73:92:8a:2a:1e:de:3e:6d:5f:a8:3a:50:80:17:b8:6d:32:d9:
06:0f:e4:6d:1c:4e:cd:64:fe:28:58:42:96:2c:e8:d2:49:20:
20:3d:e8:cf:e7:60:62:f2:45:50:50:ac:6e:75:da:0e:c9:3b:
7e:af:dc:4b:93:48:8e:f6:a1:84:2e:63:9f:8f:54:af:10:83:
ff:ff:48:85:c4:d9:21:2a:33:ac:1c:03:a6:aa:56:e5:dd:55:
4b:22:0f:f1:86:d4:f4:1a:94:7f:2d:f9:00:b9:7e:2f:97:3f:
7d:f6:c9:c3:a8:94:4f:bd:82:16:69:26:1c:45:1d:11:c2:41:
85:30:ad:db:ee:d8:80:81:ea:36:0d:9a:42:8e:22:b2:b1:7f:
d5:f6:be:7b:2e:6b:8b:e6:78:8c:ec:82:2c:d9:16:43:dc:a6:
84:be:87:e4:d8:dd:a3:bf:27:b2:ca:92:46:c4:2d:1e:7a:9e:
12:09:0b:3f:16:1b:25:a5:9f:95:47:39:b1:03:71:92:b0:2b:
ef:96:81:8c:50:e0:0b:54:6b:c8:dc:16:9a:f2:70:41:bc:fa:
de:11:ac:51:4b:1f:a5:ab:b1:bd:8d:37:bc:60:1c:4e:7f:2c:
db:b2:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:55 2025 by rpki-client