Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: yMdZ5AkdgZm6yNGwL6ZzAw081eRKvs3Um3ykV1sYz7U=
Subject key identifier: DE:0E:A0:20:56:58:80:D2:57:B9:CA:58:4B:61:C3:BA:31:49:28:B0
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019A4FCFEA45E6ED158DD65106E8E5B32192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 03EB
Signing time: Tue 04 Nov 2025 17:00:17 +0000
Manifest this update: Tue 04 Nov 2025 17:00:17 +0000
Manifest next update: Wed 05 Nov 2025 17:00:17 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: e9xYhsRjg/CtpoN5h/DIi7iErW8YW1BkGPQzqF3o8Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ea:45:e6:ed:15:8d:d6:51:06:e8:e5:b3:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Nov 4 17:00:17 2025 GMT
Not After : Nov 5 17:00:17 2025 GMT
Subject: CN=de0ea020565880d257b9ca584b61c3ba314928b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:63:76:77:23:f4:c7:79:35:04:56:66:5e:
b3:60:63:3d:08:71:62:0f:66:db:5d:6e:73:63:cc:
5b:40:af:8c:08:de:a4:7e:cc:08:be:2c:f8:0e:f5:
4f:3f:dd:5d:41:d0:ff:38:fa:6a:46:c5:29:f9:3f:
22:d2:38:ed:a1:1c:bd:9a:d1:60:8a:58:d2:45:d7:
9e:78:09:66:09:82:ae:13:88:df:20:e6:eb:b1:9c:
93:4e:86:5b:76:27:e4:de:a0:20:0c:9f:4b:10:0b:
b3:86:e4:7b:19:46:f7:9b:7e:74:6e:fa:be:3f:60:
ef:f8:99:e8:73:ba:9e:a0:20:0f:7d:5d:0c:9e:a4:
73:1b:e4:53:e2:e2:c3:8e:e5:95:c4:c9:22:6a:84:
be:54:59:cd:b4:79:a7:7b:cf:14:6a:76:1b:c7:f7:
bd:bd:6d:a2:8e:23:d9:3a:6c:2a:5c:86:06:2a:c1:
df:67:4b:4a:c2:57:04:cb:c2:d0:bc:b1:97:9a:d8:
f7:9e:c8:1a:fe:c2:28:41:7b:d6:14:7f:3e:49:b3:
6c:a1:d9:37:27:5a:00:f4:33:4f:99:9f:01:e0:82:
f3:b9:1a:f4:e2:8d:35:f6:ab:95:59:4d:61:ba:3d:
b9:58:55:8d:b3:d7:f4:f2:4a:52:6b:8a:b2:db:1b:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:A0:20:56:58:80:D2:57:B9:CA:58:4B:61:C3:BA:31:49:28:B0
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:5e:9c:65:e5:eb:8d:dc:ad:dd:ae:1e:40:5a:3a:c6:9c:
a2:91:6c:a4:5a:97:15:9b:83:3c:65:c0:11:92:c1:14:57:02:
44:da:4d:ec:ef:89:56:e4:6a:70:54:2f:1f:df:2f:4f:cd:41:
35:bc:78:26:1d:45:c6:7d:26:4f:15:9f:96:3c:35:9c:b3:f0:
14:30:e0:87:7e:88:ee:35:47:e9:34:05:74:ed:c1:ba:0a:43:
9b:82:f8:52:0b:94:7c:46:5d:47:11:28:30:a9:18:f1:c0:78:
3a:06:4e:6c:6c:dd:ae:b8:ff:82:a8:81:b7:7a:1f:6b:1b:9f:
54:8c:b6:ad:7b:2e:15:83:3b:cc:42:d7:a7:4f:99:b5:12:fe:
c7:80:ac:5e:4a:12:13:14:e5:de:a4:9f:5a:53:0a:b4:61:c2:
68:30:9c:a3:3e:30:a3:26:15:2a:a9:b2:7c:ef:30:92:45:54:
12:7e:56:f2:3b:e5:1e:8b:73:91:9d:7a:6a:74:30:00:11:b7:
19:a6:c3:12:7e:ea:f7:b3:2d:c7:08:af:fc:63:bc:42:98:04:
0f:58:5f:70:98:61:63:04:fd:40:8f:38:e6:b7:f7:fe:bb:91:
61:12:4d:00:06:f7:63:d7:c5:d0:95:86:73:8f:0e:d0:4d:1f:
5e:52:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:40 2025 by rpki-client