Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier: CVl6UgURD/Py0esTVrjRjsjR6TAaF5JBTuSnFxceUlQ=
Subject key identifier: 75:47:68:77:36:3A:97:7D:11:7B:D2:F3:FB:0A:A8:EA:62:7A:74:C5
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial: 019A4DE187912F20329DADEC105B22AC5996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number: 14F2
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: meJGWVdwSrSSWIO/MY0FsJGvriojf+An8NsLbNknzdg=)
2: M6kd2OZVwbLsznfkTpr9P9tvc9U.roa (hash: Jp9yH5OnFSN9zDtKINo+7/MzPgxLUFZmRYughYu+MLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:87:91:2f:20:32:9d:ad:ec:10:5b:22:ac:59:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=75476877363a977d117bd2f3fb0aa8ea627a74c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:92:5e:b9:38:f0:17:19:26:7d:47:d6:c9:
eb:14:b8:51:24:48:59:2e:f4:56:6d:ad:c7:4b:fa:
19:86:ff:21:08:d9:68:cd:1a:d9:a0:18:46:f1:3c:
f6:48:11:ce:43:a0:ee:42:f8:bd:25:d5:c5:63:51:
2c:25:01:f7:e2:77:6e:f4:a7:03:ff:e6:0e:47:40:
82:50:49:eb:27:54:28:52:91:ff:9b:3b:ed:0e:c8:
93:8c:b9:60:1e:17:d1:63:dd:73:29:48:54:35:65:
46:e6:0e:eb:e5:27:2e:82:ea:85:2b:77:94:16:a1:
e3:2f:2d:8e:fe:9c:f0:3c:9b:17:7e:dd:c6:65:ba:
cf:17:0a:11:29:dd:35:13:4a:8a:04:bf:ec:cf:4b:
a7:19:34:ec:b5:bb:ee:3b:d4:fe:42:0e:e0:cd:fb:
1a:d6:2c:b6:cf:2a:f3:94:4a:06:10:46:7f:e6:34:
33:e4:cd:d6:60:53:9a:56:db:3e:6c:e3:80:b9:21:
1b:c6:cd:b9:74:b7:2e:8c:3d:16:59:6c:8c:0c:2e:
b8:1d:41:1c:f5:5c:92:9f:1f:a8:ba:13:a9:09:25:
ce:89:c6:dc:1b:5c:c8:5e:df:c6:9c:1a:cb:86:c5:
29:eb:57:60:a1:f1:a1:a9:84:89:9a:b6:bf:16:9f:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:68:77:36:3A:97:7D:11:7B:D2:F3:FB:0A:A8:EA:62:7A:74:C5
X509v3 Authority Key Identifier:
keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:1a:9d:1c:79:5a:06:d3:36:be:fb:80:91:0c:00:53:11:
58:13:df:01:55:3f:16:a9:0f:65:56:fa:31:b2:ee:89:be:d0:
67:e3:44:26:99:74:87:dd:d7:75:0f:91:57:dd:41:2c:92:ba:
a6:8e:c1:44:f5:02:a3:4d:1c:78:c4:41:9a:43:b5:f8:9e:ad:
c8:d5:b3:1e:e4:16:1c:ad:7c:ab:ce:09:86:8e:70:aa:f8:46:
62:89:54:e8:3d:e8:da:d3:75:42:4e:df:6d:6f:1f:f5:7d:07:
1e:e4:16:06:69:94:d7:96:97:ff:78:6e:b8:d4:db:3d:23:3a:
ea:11:69:52:76:ad:0f:c3:f5:0a:c8:a4:34:61:aa:22:be:8f:
44:86:d4:03:04:69:18:ea:64:7a:65:7a:cb:6f:14:30:04:a7:
21:ec:e5:d0:90:07:ee:0c:48:dc:37:47:ed:e6:7a:dc:88:fb:
95:03:ef:df:a7:46:f5:90:49:16:b8:64:bf:43:4d:c8:22:1d:
32:2c:2b:fe:ae:4b:e9:22:42:16:df:52:39:c4:ca:1e:b0:6e:
f9:9a:53:54:75:b5:aa:05:27:4f:b9:51:0f:7b:8e:62:16:37:
cd:fd:f9:18:93:45:70:b2:42:97:03:97:cf:ec:94:0d:6a:9a:
a8:5d:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:14 2025 by rpki-client