Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: Vw0I4W9HUgZbI9QAmo4i6AHbkFLAGvb7q3yO+L/xfyU=
Subject key identifier: 5D:83:EE:DC:4D:F8:C3:1F:4D:F9:CD:D9:5C:57:7A:E1:46:9C:D7:91
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019A5150D82BFD9D9B257E84F6B07FC7E549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:00:43 +0000
Manifest this update: Wed 05 Nov 2025 00:00:43 +0000
Manifest next update: Thu 06 Nov 2025 00:00:43 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: RfHLBXbct3HX44kcdc149TWdCWjcwQE9GFuubsYBS6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d8:2b:fd:9d:9b:25:7e:84:f6:b0:7f:c7:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Nov 5 00:00:43 2025 GMT
Not After : Nov 6 00:00:43 2025 GMT
Subject: CN=5d83eedc4df8c31f4df9cdd95c577ae1469cd791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:35:7f:13:2f:98:72:da:64:d2:37:97:bd:
ea:be:75:9c:e1:e5:d1:f0:15:a3:1f:ba:bb:a5:98:
cd:c4:89:42:10:f0:8d:bb:6d:1b:b5:7b:16:ab:7e:
f9:6c:e7:f5:2a:be:6b:0b:11:2a:92:2c:70:b6:80:
62:54:05:b8:f2:b3:04:ed:dc:fe:bc:be:d2:67:57:
94:fb:48:13:42:fb:a0:68:c5:00:3a:cd:18:67:d2:
9a:00:b1:33:18:b3:22:8b:5f:4b:e3:7c:31:ef:80:
2b:2b:11:18:b9:19:8a:40:70:87:a4:b9:89:f1:65:
76:db:d6:43:79:80:14:19:ce:59:c1:c2:26:8a:95:
23:fe:4e:e2:88:b7:35:81:9b:a1:0e:5b:1d:da:81:
9b:89:fd:86:a2:bc:e4:61:d7:a3:70:ab:0f:df:2a:
82:44:1c:e2:01:c0:7a:a2:21:97:24:98:b3:1e:7c:
be:fe:60:fe:66:cd:d5:a0:b7:98:93:40:fa:c2:c3:
48:34:88:90:d9:bb:32:f5:46:c4:25:1c:07:3b:d4:
69:8e:3e:c6:2c:ec:c1:e3:e8:75:fb:df:c8:1c:7c:
c4:31:6c:2f:2d:0a:3f:1d:f1:68:d7:30:bb:0d:d5:
fe:40:55:ed:57:fb:16:90:bf:71:a0:75:7e:0f:3b:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:EE:DC:4D:F8:C3:1F:4D:F9:CD:D9:5C:57:7A:E1:46:9C:D7:91
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:81:c6:ba:20:3b:03:e3:d3:63:06:3e:ba:47:26:16:6d:d2:
a3:ff:d7:2d:bf:cb:7a:45:a4:b5:aa:e9:82:c3:03:66:5c:d3:
e0:5b:fb:6a:44:45:2a:60:3d:ab:ff:cb:3b:d7:ed:2d:64:ba:
87:72:c7:9c:2b:e3:86:c7:eb:a7:aa:2f:62:f7:75:94:3b:33:
9a:31:1b:94:e4:49:3e:90:b0:74:b5:62:77:11:64:aa:60:49:
58:f5:9a:94:e5:39:29:fd:e5:17:d4:98:55:d5:5e:d6:7f:b6:
27:bc:e8:d5:d3:4e:13:04:09:9f:cb:b6:4e:48:0a:70:03:c6:
88:cb:46:96:41:59:d7:73:ea:15:bc:6a:ee:91:fc:c8:71:c0:
e4:28:cd:f0:43:ee:4e:73:c9:fd:99:98:5a:67:17:8b:0d:75:
0e:84:9f:8d:41:bb:cc:f3:b7:9a:a6:bb:bc:aa:ea:5e:02:d4:
9d:3b:cf:8f:5c:0a:77:2c:0c:a3:58:80:04:d1:09:53:33:af:
21:20:fb:27:01:e4:0a:7f:b3:ae:f9:cd:9a:9c:66:d0:95:ba:
ca:08:7a:3f:2b:38:e2:05:a6:fc:95:c5:c9:c3:51:ee:80:d3:
7b:40:af:21:0f:2b:b0:a1:2d:31:b1:b9:0a:b4:00:08:20:c6:
fd:18:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:09 2025 by rpki-client