Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: JUJb7FQ16pDg3G5j4pBwNeu+0DLY4F9smyeWCO57fWU=
Subject key identifier: FB:45:27:ED:11:F1:60:F6:6A:AE:1D:A9:97:4C:6F:AB:B4:93:2A:39
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019A52636A72A6E7192A7B604B82072CBD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 07EC
Signing time: Wed 05 Nov 2025 05:00:38 +0000
Manifest this update: Wed 05 Nov 2025 05:00:38 +0000
Manifest next update: Thu 06 Nov 2025 05:00:38 +0000
Files and hashes: 1: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: TeMTLb60dr00GCUvd6OeLakj/vXAVrXHNWBwhW/KbbY=)
2: T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa (hash: LKcOl9u48RGXIFNErzIBt+0+CJzkc3SUSSRAWMDqgFc=)
3: gaLphM1A_moGiALt3CRC2ndoaVY.roa (hash: 3zCVRytJAz7EydYXmCr5U7I8CEvPHa4z1gbLc/C+dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:6a:72:a6:e7:19:2a:7b:60:4b:82:07:2c:bd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Nov 5 05:00:38 2025 GMT
Not After : Nov 6 05:00:38 2025 GMT
Subject: CN=fb4527ed11f160f66aae1da9974c6fabb4932a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:a3:1f:93:2e:ea:99:46:f8:07:5e:b5:6d:
f6:98:4e:30:de:55:ad:64:dd:19:d6:69:65:a1:b9:
1e:f3:30:03:e4:4b:2a:3b:d8:de:75:78:60:4b:9f:
1b:2a:e9:dd:96:fa:f4:24:51:21:ce:2b:36:c4:d2:
18:8b:51:09:11:1d:f3:09:5c:42:d7:82:94:af:dd:
e2:4d:fc:8d:c6:d6:ae:80:e6:a5:fb:47:55:b6:12:
98:bd:4d:d1:66:cd:28:3c:92:42:d9:56:d2:6f:52:
c2:56:9a:73:c9:64:f8:05:c1:db:d2:42:4a:15:f6:
dd:9c:76:02:5f:e8:3f:9a:ae:d8:5e:9b:af:e7:77:
a6:34:c7:0a:4d:cd:3e:cf:7d:4b:78:50:84:b0:f6:
ef:90:56:3b:9b:62:f6:a4:30:84:45:6f:a0:14:b7:
8e:94:f2:ed:4a:64:b6:83:75:d5:c1:00:ed:be:a6:
17:dc:1d:34:b9:2f:08:27:83:14:0a:88:b3:a9:c2:
42:b6:c2:a8:ea:a5:6f:a3:f7:5b:68:59:3e:5f:7c:
23:ea:25:8a:2f:bd:da:b4:af:52:a0:5c:9e:82:32:
cb:06:47:c0:57:64:72:f5:8e:51:61:3c:60:0e:b1:
7d:40:b4:63:44:e1:95:31:37:93:40:9e:51:93:10:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:27:ED:11:F1:60:F6:6A:AE:1D:A9:97:4C:6F:AB:B4:93:2A:39
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:46:00:3e:b6:0a:82:75:4d:09:24:a7:db:c2:52:58:fc:d0:
e5:2b:00:ef:a7:0d:b9:20:5c:e5:69:70:91:c7:78:1c:55:cc:
3c:b3:d9:2c:20:ba:ec:1e:0d:65:03:6b:60:67:13:40:18:89:
c1:b2:43:cc:25:de:67:07:aa:9c:c3:5e:fe:d3:ac:ca:fe:83:
8a:5f:5f:5b:65:27:2b:0e:7b:49:76:6b:23:5d:0e:7b:e7:b5:
93:72:b0:af:8a:74:6a:72:08:48:93:f5:32:d4:dc:1b:65:34:
dd:af:8e:e6:83:52:b7:57:a6:61:9c:83:c2:f1:72:84:08:08:
71:ba:9a:ec:b2:32:a0:b2:ea:55:57:f9:13:03:b4:1b:58:22:
1b:97:6f:f9:ee:d8:28:82:b4:e1:a1:ca:fd:31:13:ae:86:30:
5e:0d:c0:f8:87:51:1d:8b:e2:6f:d2:04:54:6e:1c:11:70:d8:
36:8a:cf:9e:d7:f7:36:3e:fb:28:cb:8a:d4:cb:12:e8:4e:3e:
72:3e:20:53:f0:fc:27:c0:35:a1:da:6d:bf:62:19:d1:4a:90:
49:3d:98:c5:e0:26:6c:3f:b3:9d:02:84:cd:e5:61:1b:29:e0:
4e:4a:2e:82:ac:46:29:37:68:22:6a:3d:d8:47:63:7a:dc:da:
4c:8d:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:25 2025 by rpki-client