Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File: fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier: Wx1SS0m0Ro6p9NMWsIDqbSu4PZuYpFgTgS8O9ShfZM4=
Subject key identifier: 58:09:D0:A5:73:E9:F1:C6:A5:89:17:D3:34:E3:FE:52:E3:E4:2C:39
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial: 019A50E31712595BA5BDFC9B7806C2DD59AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number: 1548
Signing time: Tue 04 Nov 2025 22:00:51 +0000
Manifest this update: Tue 04 Nov 2025 22:00:51 +0000
Manifest next update: Wed 05 Nov 2025 22:00:51 +0000
Files and hashes: 1: UK9YjHWc92sXiUJt3VZoNIq4t0k.roa (hash: igI+4irUGdklUjezFA8tc/PWzUHzep3VbVTtAZ5nupE=)
2: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: QbhbOdprzY0iubn36VbpdU/69FN4XRf+ug5pzYECTSM=)
3: zUIN-vPBSWAo7u0peNQbk111_tY.roa (hash: ycq1Cqg0dupTJx5bcb6gz2Vt69i1lXhyAaV7FfHeKNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:17:12:59:5b:a5:bd:fc:9b:78:06:c2:dd:59:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d59659636089e32324697629c218da38a2b673d
Validity
Not Before: Nov 4 22:00:51 2025 GMT
Not After : Nov 5 22:00:51 2025 GMT
Subject: CN=5809d0a573e9f1c6a58917d334e3fe52e3e42c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:f1:f3:de:ed:e0:da:71:8f:a3:e1:89:22:
73:e4:5b:e9:1c:27:6e:aa:f2:9a:82:19:c1:fa:9a:
ca:10:2a:1f:05:63:0f:6e:62:30:d5:bb:bf:4b:e2:
83:4a:9e:71:9e:bc:02:07:87:7d:fe:38:13:34:82:
26:fa:4c:40:a1:45:4d:e2:ca:06:95:73:13:b9:80:
44:30:83:45:4e:90:54:a7:a8:d6:79:13:04:14:46:
a1:bd:64:4d:2f:ed:8c:da:7d:f9:5d:6c:e2:2b:84:
b1:77:d2:b2:a3:c4:53:fb:be:d1:97:28:61:73:0c:
35:6c:e1:ad:68:2b:1e:f4:68:67:13:25:b6:75:ec:
ab:83:04:85:c8:93:bf:d4:77:bd:6f:39:2c:51:f6:
56:56:c3:95:81:b0:c7:93:df:a8:68:1b:a3:c3:35:
fb:9b:5f:e4:49:3c:a0:21:37:f0:57:01:bd:57:bd:
db:ac:ef:76:e9:1d:2d:59:95:bc:b8:cf:24:46:55:
7b:cb:bf:4c:17:23:d9:33:cb:f5:2b:15:81:31:c2:
52:58:22:8d:d4:fd:d5:fd:58:b4:e5:93:c5:00:31:
2b:f9:91:0a:2a:51:f1:84:9e:e3:6a:b2:b9:03:e0:
82:fc:30:f2:83:3e:19:39:fa:15:b1:26:c8:ba:d2:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:D0:A5:73:E9:F1:C6:A5:89:17:D3:34:E3:FE:52:E3:E4:2C:39
X509v3 Authority Key Identifier:
keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8d:bf:7f:0c:3d:b2:c2:6e:6a:23:c7:6f:89:82:ba:9d:80:
99:a5:80:f2:e5:ba:34:b0:82:f6:df:8e:47:69:5c:9a:69:3a:
50:4a:43:ee:2d:15:54:59:7e:10:93:7d:06:14:bf:b0:b2:10:
69:40:13:c2:e8:1d:9b:d2:86:b5:4b:d7:d7:ed:dc:d3:d6:29:
50:07:2f:d4:a4:dc:a7:ca:75:15:a0:3b:5a:2d:d9:58:3c:e6:
c3:f0:e9:0f:1e:3a:ff:d9:7e:7f:83:75:c8:d1:3b:4f:82:05:
87:38:d4:4f:a2:9e:45:68:42:b7:18:ab:d0:2e:5e:a5:dd:75:
cc:e6:24:84:65:94:44:41:5e:ac:fc:70:a3:b3:e8:f1:32:7b:
a9:54:e6:b3:99:bb:ac:a6:bf:49:39:f8:ad:63:dc:f3:ae:67:
8f:b0:43:28:cd:c3:b4:22:06:60:ea:e0:1f:4d:68:02:fa:4d:
c5:c3:f1:41:f0:ab:ae:e1:59:e0:1e:08:b3:1a:bf:44:cc:a5:
5d:aa:c6:35:66:94:b4:ad:bd:26:22:65:34:b3:2e:4a:f2:6c:
fa:30:00:5a:18:ce:80:3a:64:6a:bf:dd:ff:10:96:ad:c7:ef:
d7:6f:a2:50:a6:a8:f0:19:d0:fd:63:e3:57:d9:00:1a:74:e7:
ca:38:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:13 2025 by rpki-client